Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ItaMD0vzd_0qfTXZL_4E_ohON_c.roa
File: ItaMD0vzd_0qfTXZL_4E_ohON_c.roa (raw, json)
Hash identifier: mK56voBZWO/dF2II7eRGqijTDPz7ExVtFEM/C7wXECE=
Subject key identifier: 22:D6:8C:0F:4B:F3:77:FD:2A:7D:35:D9:2F:FE:04:FE:88:4E:37:F7
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348B916C5CB295030540BD1F8168312
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ItaMD0vzd_0qfTXZL_4E_ohON_c.roa
Signing time: Mon 01 Jan 2024 04:29:32 +0000
ROA not before: Mon 01 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 46.37.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 11:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b9:16:c5:cb:29:50:30:54:0b:d1:f8:16:83:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22d68c0f4bf377fd2a7d35d92ffe04fe884e37f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:fd:b8:3e:c3:88:80:f9:f3:22:67:10:b3:
87:08:83:4b:51:5b:7d:4f:0c:3a:fa:bf:2c:fd:c0:
90:e3:1a:fa:0c:91:ae:19:5f:e3:6c:5e:af:ec:71:
7a:1c:7c:a5:f6:e1:e9:ba:fc:ff:c3:74:1c:58:7f:
c3:8c:bc:6b:2c:13:2e:c3:37:4d:f0:57:3d:36:07:
0b:3c:9e:56:b0:a7:98:ac:4a:60:a7:9d:c8:f8:bc:
a9:81:ed:d2:c4:52:94:5d:1b:88:5c:58:49:d8:99:
4c:c7:4d:b1:23:03:c2:b3:a4:4d:2e:bf:3c:a2:58:
1f:d0:56:57:bd:e9:d8:39:1a:f7:0b:69:f4:d0:5d:
42:12:7d:e9:85:5b:70:9c:af:14:a0:e8:22:2e:ab:
ad:00:41:98:e1:06:35:dd:81:9e:1d:e9:b7:89:c1:
a0:2c:4d:6d:56:6e:b0:dc:e9:67:ca:39:25:52:c3:
70:89:9f:ec:67:12:06:52:ad:8d:27:9a:3d:78:5a:
06:d3:ab:57:a1:5d:59:55:ab:3e:ab:d9:b6:36:22:
75:57:90:c6:9c:02:af:69:9a:91:29:db:89:41:36:
f5:89:4e:6e:a7:fd:7b:b9:8c:12:15:f9:d3:ef:be:
3d:62:3d:64:0d:63:aa:4a:ed:17:c6:04:7e:22:52:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D6:8C:0F:4B:F3:77:FD:2A:7D:35:D9:2F:FE:04:FE:88:4E:37:F7
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ItaMD0vzd_0qfTXZL_4E_ohON_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
83:aa:0e:7f:63:6f:a1:9e:aa:da:3c:fa:99:be:73:44:3c:4e:
34:64:32:db:f8:78:ce:2f:39:12:8a:97:f5:49:0e:3d:b7:16:
fb:5c:6e:83:1a:2f:31:92:db:52:a0:e1:ad:79:bb:59:d1:68:
ec:b7:7f:c1:f8:c8:eb:3d:e5:d7:95:4f:ca:ba:a8:5e:d7:1e:
ce:10:bc:a7:e9:67:bf:e3:b8:98:b9:38:bc:e0:a6:a1:f0:c2:
e6:9f:8d:04:18:d8:36:99:14:b5:74:6f:ca:7c:31:d4:63:93:
52:44:8a:a7:0a:bf:97:08:35:94:0b:42:2f:04:8a:11:47:a5:
8c:a3:d6:00:2c:cb:aa:dc:1f:95:87:2e:23:f9:32:56:b5:89:
39:d5:1a:ea:ae:6e:0d:9e:20:f7:54:a2:f2:f9:05:af:dc:d3:
c8:65:dc:56:ae:fd:ec:93:56:3a:dd:92:eb:36:62:f4:0f:96:
1f:8b:0e:e3:ba:cc:7b:cb:87:33:65:cb:46:52:d6:15:47:f9:
5d:55:a8:64:22:e0:bd:5c:f8:9c:2d:a6:15:8a:ad:6c:51:59:
13:6e:6d:94:7b:d8:a7:87:e2:e5:99:e3:ea:e8:08:fe:27:d7:
b4:dc:73:17:60:c8:80:29:ac:6d:fb:f2:ff:ee:fa:79:36:59:
05:f1:61:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 14:22:10 2024 by rpki-client on console-ams.rpki-client.org