Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Jv1guO5IuPAnAc6ScaWg7crpyr8.roa
File: Jv1guO5IuPAnAc6ScaWg7crpyr8.roa (raw, json)
Hash identifier: SOgJ34xWymZgGq1xZKPwLIhNAid41NPVNzmKryVSUY0=
Subject key identifier: 26:FD:60:B8:EE:48:B8:F0:27:01:CE:92:71:A5:A0:ED:CA:E9:CA:BF
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC26E0CE77FEFE5D96D7633C55C9BA63E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Jv1guO5IuPAnAc6ScaWg7crpyr8.roa
Signing time: Mon 01 Jan 2024 00:30:41 +0000
ROA not before: Mon 01 Jan 2024 00:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
185.92.45.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6e:0c:e7:7f:ef:e5:d9:6d:76:33:c5:5c:9b:a6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 00:30:41 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26fd60b8ee48b8f02701ce9271a5a0edcae9cabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:0a:7e:8a:7b:c7:7d:40:94:25:22:c9:32:
1f:15:2c:13:f8:8b:45:41:71:7b:d5:d2:bb:4a:c1:
4f:af:16:21:2c:f5:73:40:6f:47:4c:8d:40:77:d8:
ca:e9:27:d5:b2:15:86:a7:d8:37:fa:11:c2:d4:aa:
8e:e1:1f:07:15:55:8e:72:ca:56:3a:3a:7b:ec:ea:
db:0d:5e:31:32:55:25:bd:17:aa:f5:50:93:9c:87:
ac:54:f7:40:b5:0d:c8:84:56:d4:94:88:d1:0b:5f:
e1:72:1f:69:43:54:4c:f5:f3:21:59:8b:64:0b:1d:
b7:ec:c7:dc:0f:a5:2b:2a:37:e1:b1:e7:44:3c:59:
9c:53:b6:14:69:08:1e:d1:54:b9:c1:19:e8:b4:28:
0d:d5:e4:42:1b:25:13:9d:c5:c6:6e:2c:45:d8:53:
d7:40:72:92:5a:b5:4b:9c:8c:43:a3:67:fc:da:72:
07:99:05:6b:9c:5a:d0:41:a2:8c:59:a1:e3:11:e3:
00:14:e0:bb:22:41:94:f0:a5:b5:94:a6:06:51:26:
d0:45:fb:52:de:1f:d0:13:d5:0a:0f:b9:45:98:c5:
33:ac:8d:af:4c:a8:cb:0a:50:63:ec:16:37:d7:7d:
42:29:7a:54:c3:47:0f:97:e3:4e:08:05:68:96:f0:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FD:60:B8:EE:48:B8:F0:27:01:CE:92:71:A5:A0:ED:CA:E9:CA:BF
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Jv1guO5IuPAnAc6ScaWg7crpyr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.122.0/24
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ac:76:8c:2b:0d:bf:f1:ae:cf:a6:4b:d3:92:1f:a9:36:e1:
e0:e7:63:7d:ee:bf:14:34:e3:61:1c:a8:33:fb:61:75:45:fe:
59:df:78:c4:dd:9c:b4:71:e6:55:ca:9f:d4:28:c1:87:27:43:
81:fb:5b:85:42:5b:42:4c:13:70:c8:2a:1b:d6:c4:ea:a2:d9:
4a:2d:92:c0:b4:5b:83:29:11:14:5c:4d:c6:28:38:63:93:05:
48:e4:a3:50:0e:c0:1b:b8:40:cf:aa:ef:fc:1c:53:80:fd:a9:
20:79:4c:8d:ab:f6:84:35:f5:44:6e:e7:3b:45:85:0f:85:1b:
cc:5e:c4:05:e7:52:c3:95:0a:33:59:3b:94:21:07:6d:b4:da:
85:17:f1:6c:bc:4c:cb:ee:9d:af:11:00:38:48:f0:99:6c:16:
53:6e:53:cf:70:9e:92:df:5f:a1:70:87:cc:ce:96:d9:4a:0a:
ed:3c:71:80:f1:3f:32:54:0f:d9:c0:7e:f5:d7:32:3d:bd:ef:
db:72:42:28:15:51:fd:21:44:ea:67:37:12:0b:b7:ac:1f:89:
09:60:45:b1:dd:d2:db:fb:21:b4:ff:e5:12:17:48:76:7f:b9:
14:d3:21:44:d3:ff:a7:d7:e3:ae:f2:c7:8a:3a:05:45:c7:5b:
01:28:63:74
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzCbgznf+/l2W12M8Vcm6Y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjQwMTAxMDAzMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmZkNjBiOGVlNDhiOGYwMjcwMWNlOTI3MWE1YTBlZGNhZTljYWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg4Kfop7x31AlCUiyTIfFSwT+ItF
QXF71dK7SsFPrxYhLPVzQG9HTI1Ad9jK6SfVshWGp9g3+hHC1KqO4R8HFVWOcspW
Ojp77OrbDV4xMlUlvReq9VCTnIesVPdAtQ3IhFbUlIjRC1/hch9pQ1RM9fMhWYtk
Cx237MfcD6UrKjfhsedEPFmcU7YUaQge0VS5wRnotCgN1eRCGyUTncXGbixF2FPX
QHKSWrVLnIxDo2f82nIHmQVrnFrQQaKMWaHjEeMAFOC7IkGU8KW1lKYGUSbQRftS
3h/QE9UKD7lFmMUzrI2vTKjLClBj7BY3131CKXpUw0cPl+NOCAVolvBdiQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCb9YLjuSLjwJwHOknGloO3K6cq/MB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvSnYxZ3VPNUl1UEFuQWM2U2NhV2c3Y3JweXI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALiViAwQA
LiVxAwQALiV6AwQAuVwtMA0GCSqGSIb3DQEBCwUAA4IBAQB4rHaMKw2/8a7PpkvT
kh+pNuHg52N97r8UNONhHKgz+2F1Rf5Z33jE3Zy0ceZVyp/UKMGHJ0OB+1uFQltC
TBNwyCob1sTqotlKLZLAtFuDKREUXE3GKDhjkwVI5KNQDsAbuEDPqu/8HFOA/akg
eUyNq/aENfVEbuc7RYUPhRvMXsQF51LDlQozWTuUIQdttNqFF/FsvEzL7p2vEQA4
SPCZbBZTblPPcJ6S31+hcIfMzpbZSgrtPHGA8T8yVA/ZwH711zI9ve/bckIoFVH9
IUTqZzcSC7esH4kJYEWx3dLb+yG0/+USF0h2f7kU0yFE0/+n1+Ou8seKOgVFx1sB
KGN0
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org