Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/KDDPIk9FZL5nJAQHvBSe7YcOer8.roa
File: KDDPIk9FZL5nJAQHvBSe7YcOer8.roa (raw, json)
Hash identifier: 6D4Eu+5pnFNPZBmeCo4KL2vXMyFfcEqqO2ekG0sLSC4=
Subject key identifier: 28:30:CF:22:4F:45:64:BE:67:24:04:07:BC:14:9E:ED:87:0E:7A:BF
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01898E0434FCA9A32C2D112983CC6FBDB948
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/KDDPIk9FZL5nJAQHvBSe7YcOer8.roa
Signing time: Tue 25 Jul 2023 17:06:27 +0000
ROA not before: Tue 25 Jul 2023 17:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 46.37.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8e:04:34:fc:a9:a3:2c:2d:11:29:83:cc:6f:bd:b9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 25 17:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2830cf224f4564be67240407bc149eed870e7abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4f:5f:67:51:e4:64:b8:74:0e:3c:a2:74:35:
04:8b:05:a6:57:ac:6d:d8:9a:57:2b:a9:01:01:1b:
6e:7e:cb:30:96:71:3b:32:9e:ae:10:50:e5:10:8d:
84:2c:ee:1a:f7:7b:54:73:5c:d3:74:7b:9d:be:ad:
15:59:c9:2f:b4:7a:6a:29:e8:f7:49:0d:01:43:5f:
4e:78:59:f9:21:f6:a5:c4:65:5e:63:cf:13:0c:36:
38:58:87:ca:e7:3b:95:6b:aa:3b:82:60:cf:d0:95:
fd:ac:9e:91:19:6e:fb:73:88:ef:ee:d5:92:fb:f2:
79:eb:b9:58:e3:94:b9:54:6e:30:97:cd:0c:9c:b0:
15:19:f0:29:c1:22:69:fc:ff:bd:10:10:b8:1c:80:
c9:3c:c2:c6:53:95:ee:f2:90:91:70:db:6d:ca:fd:
98:76:02:f0:8c:75:16:40:ed:24:f1:00:7d:1f:f6:
21:fd:10:8e:d7:e5:9b:cb:b4:f0:26:24:36:63:47:
22:ff:a7:47:cb:3c:d2:0d:24:04:8b:22:84:14:20:
a3:f7:d5:65:1c:d6:4b:6a:85:1c:77:dd:c2:c0:50:
6e:c9:33:84:03:e6:7c:bc:34:16:6e:d3:16:ba:2f:
9d:b9:d0:b0:f2:91:99:44:97:c6:22:1f:c8:33:7b:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:30:CF:22:4F:45:64:BE:67:24:04:07:BC:14:9E:ED:87:0E:7A:BF
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/KDDPIk9FZL5nJAQHvBSe7YcOer8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1a:e5:b9:cf:b6:29:95:95:6c:da:4b:80:ac:a0:58:3b:25:
c5:1b:15:86:43:21:24:e6:76:d7:1c:78:af:4f:54:95:d8:e1:
a0:d1:c0:6d:f1:53:74:ca:83:1d:ed:c3:80:5c:52:ba:e2:8e:
5e:8a:0b:12:6e:bc:d5:52:68:61:13:dc:ac:aa:47:35:b0:d3:
3d:a0:1d:bd:8c:f5:92:75:97:48:54:fa:a6:7c:b0:7b:d5:60:
68:63:1c:9e:2c:81:db:0f:e1:d5:a5:5c:91:38:f7:90:1a:30:
d5:72:21:08:67:2c:c2:58:89:3f:49:f9:2e:a5:f3:e4:55:26:
d0:21:cb:f0:20:15:39:e2:59:68:e3:b6:92:c8:55:f4:93:24:
b3:1f:49:59:1b:1e:0c:c7:2b:03:ee:39:c1:2c:77:2a:5b:ef:
7f:b2:4a:1d:22:d0:59:75:9c:36:0e:b6:a0:aa:e7:49:b3:7d:
7e:d4:a3:63:bf:e7:93:11:ab:2a:21:9f:f3:1d:26:47:47:f7:
23:9d:b6:7b:99:00:bb:fe:1b:68:4b:5f:dd:4e:55:6b:99:3c:
3d:b8:90:db:f7:67:5a:51:22:76:bd:35:64:e1:5f:46:ff:9f:
3b:6d:00:61:22:6a:4b:21:bc:e6:db:fa:1e:e1:0d:fd:97:47:
3f:24:ef:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmOBDT8qaMsLREpg8xvvblIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwNzI1MTcwNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODMwY2YyMjRmNDU2NGJlNjcyNDA0MDdiYzE0OWVlZDg3MGU3YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk9fZ1HkZLh0DjyidDUEiwWmV6xt
2JpXK6kBARtufsswlnE7Mp6uEFDlEI2ELO4a93tUc1zTdHudvq0VWckvtHpqKej3
SQ0BQ19OeFn5IfalxGVeY88TDDY4WIfK5zuVa6o7gmDP0JX9rJ6RGW77c4jv7tWS
+/J567lY45S5VG4wl80MnLAVGfApwSJp/P+9EBC4HIDJPMLGU5Xu8pCRcNttyv2Y
dgLwjHUWQO0k8QB9H/Yh/RCO1+Wby7TwJiQ2Y0ci/6dHyzzSDSQEiyKEFCCj99Vl
HNZLaoUcd93CwFBuyTOEA+Z8vDQWbtMWui+dudCw8pGZRJfGIh/IM3v6cQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCgwzyJPRWS+ZyQEB7wUnu2HDnq/MB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvS0REUElrOUZaTDVuSkFRSHZCU2U3WWNPZXI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiV3MA0G
CSqGSIb3DQEBCwUAA4IBAQClGuW5z7YplZVs2kuArKBYOyXFGxWGQyEk5nbXHHiv
T1SV2OGg0cBt8VN0yoMd7cOAXFK64o5eigsSbrzVUmhhE9ysqkc1sNM9oB29jPWS
dZdIVPqmfLB71WBoYxyeLIHbD+HVpVyROPeQGjDVciEIZyzCWIk/SfkupfPkVSbQ
IcvwIBU54llo47aSyFX0kySzH0lZGx4MxysD7jnBLHcqW+9/skodItBZdZw2Drag
qudJs31+1KNjv+eTEasqIZ/zHSZHR/cjnbZ7mQC7/htoS1/dTlVrmTw9uJDb92da
USJ2vTVk4V9G/587bQBhImpLIbzm2/oe4Q39l0c/JO+9
-----END CERTIFICATE-----
Generated at Tue Aug 15 22:08:38 2023 by rpki-client on console-ams.rpki-client.org