Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/KVqgUsi6KZwxRnU2aF3ZjGOyh5E.roa
File: KVqgUsi6KZwxRnU2aF3ZjGOyh5E.roa (raw, json)
Hash identifier: uIX/WNJXmoHZ9qcCK/4mew6N1EhMmU8TJPoPBSbvpSU=
Subject key identifier: 29:5A:A0:52:C8:BA:29:9C:31:46:75:36:68:5D:D9:8C:63:B2:87:91
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018A3B4D0BBC22017408EE545F86C3087A3E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/KVqgUsi6KZwxRnU2aF3ZjGOyh5E.roa
Signing time: Mon 28 Aug 2023 08:40:19 +0000
ROA not before: Mon 28 Aug 2023 08:40:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.115.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 08:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:4d:0b:bc:22:01:74:08:ee:54:5f:86:c3:08:7a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 28 08:40:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=295aa052c8ba299c31467536685dd98c63b28791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:44:93:29:14:03:26:f6:a9:c4:f6:69:ad:a3:
55:99:3b:e3:bd:75:0b:30:10:d5:a9:ca:ef:1b:07:
21:02:49:9a:32:c5:e6:89:83:e5:73:96:21:17:88:
ea:3b:eb:d7:f2:c5:54:26:24:29:88:ab:2a:17:94:
0e:d8:4a:49:59:35:33:60:f5:aa:94:1b:45:b5:92:
5e:3e:ec:bc:a8:80:aa:7d:56:24:2c:f7:8b:37:a0:
93:a3:45:1f:c2:02:52:7d:b7:b5:4a:58:b7:03:09:
8f:9a:00:20:9e:6c:93:3f:62:7e:20:b7:9d:02:f5:
a8:b1:58:ce:07:29:12:f0:b9:a2:d4:cb:24:13:11:
73:2c:01:b7:43:cb:11:0b:29:21:49:a6:39:68:28:
dd:21:c3:9d:d1:5d:68:65:4f:d9:e2:28:c0:62:be:
4a:a6:ee:7e:39:51:fc:bc:8c:c7:14:b5:cf:ef:d7:
cb:b9:ee:9e:fb:aa:e5:2f:cc:f8:56:a2:bc:06:65:
90:29:3a:a9:cc:93:80:e4:2e:03:ca:60:81:bd:3a:
9b:1b:5c:f4:d7:a5:03:c6:e6:7e:7a:ac:1e:20:46:
9c:ec:64:c6:ba:92:21:c4:5c:62:c4:02:77:12:1e:
ef:58:38:bc:fe:ce:ee:e2:62:54:64:a8:3f:97:c3:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5A:A0:52:C8:BA:29:9C:31:46:75:36:68:5D:D9:8C:63:B2:87:91
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/KVqgUsi6KZwxRnU2aF3ZjGOyh5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.115.255
46.37.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9f:6a:1e:58:ab:3e:2e:3e:1b:33:0a:1f:4e:33:35:e6:67:
08:fc:db:5f:eb:56:63:3e:13:11:b0:26:b6:4b:29:d9:ad:b7:
09:66:37:22:e8:e0:65:72:c4:52:10:87:ba:53:34:5b:9e:44:
69:d1:f6:5a:3a:01:11:7a:bd:44:71:ab:aa:67:fc:fb:51:f1:
be:08:0b:93:50:a4:31:55:f4:11:ea:11:b1:6c:f2:82:dc:72:
96:fb:44:c0:72:ed:0c:d6:8b:9c:1b:f5:1a:86:ed:4a:fd:e1:
bd:ed:e2:41:b4:f3:12:5f:a4:aa:ed:8c:c7:c4:34:50:36:7b:
6e:f8:f0:6e:ec:a1:b6:1b:46:20:16:6e:6c:64:cc:a7:52:25:
1a:3a:26:a3:c8:39:5d:a9:65:66:a6:a0:1e:0e:00:ca:26:47:
0b:52:b3:67:2d:38:27:cb:61:e8:38:8b:e6:f1:11:21:1c:ea:
ad:1c:29:b4:42:ce:c7:45:c4:cd:b6:9c:59:b8:a3:4d:06:23:
21:73:7b:18:c3:c9:ca:ab:72:7c:e2:cd:bf:3c:c8:f3:fe:fd:
b6:a4:e8:6b:ef:72:c5:49:e2:cf:a0:eb:f2:7f:ca:b2:71:ea:
60:c5:da:69:5c:40:f9:bf:43:ad:cb:68:07:2e:90:e9:36:89:
bb:74:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org