Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LJw1497njycMElClbXn2taQRrY0.roa
File: LJw1497njycMElClbXn2taQRrY0.roa (raw, json)
Hash identifier: OpbN1fr7xtP64Fd2i56PnvqIogtVxx1h3Pm6pBTujR4=
Subject key identifier: 2C:9C:35:E3:DE:E7:8F:27:0C:12:50:A5:6D:79:F6:B5:A4:11:AD:8D
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AA748F1C49C88E9E35ADB0600961A2252
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LJw1497njycMElClbXn2taQRrY0.roa
Signing time: Mon 18 Sep 2023 07:54:50 +0000
ROA not before: Mon 18 Sep 2023 07:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:48:f1:c4:9c:88:e9:e3:5a:db:06:00:96:1a:22:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 18 07:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c9c35e3dee78f270c1250a56d79f6b5a411ad8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:7d:91:cc:3e:b1:0f:b7:88:8f:97:f9:d1:
fc:ba:47:ae:64:f5:54:0a:a2:fd:5f:ca:e0:05:c5:
b9:52:52:42:09:27:d5:54:2c:61:15:63:92:4e:25:
51:10:bd:c7:80:97:3f:8f:5e:10:eb:83:c3:5a:64:
70:05:09:ee:7b:c4:9d:cd:7a:58:e5:1d:36:f9:40:
a2:f6:ae:e0:69:a1:cb:f0:38:f2:be:0c:52:74:42:
96:34:d4:d5:c7:a2:c2:61:91:8d:f1:8b:e9:c8:7f:
9c:c5:0b:e8:74:9b:d2:07:e4:a2:20:18:f2:ee:95:
c4:9a:65:e9:0b:ca:0e:de:a1:2b:d0:86:e4:17:17:
37:45:f4:3d:b2:1a:37:a2:fa:5e:69:7e:99:9e:47:
14:d4:70:11:70:d2:cf:86:04:53:5e:62:18:06:82:
e6:a6:c4:2b:b3:00:43:93:5b:00:84:94:64:c8:8c:
eb:28:b8:8b:e6:4a:ec:cd:4e:fa:15:c8:fd:c6:8b:
cf:54:67:e6:ea:9a:3a:8a:c3:ca:59:83:59:ed:61:
56:fb:8f:f5:e6:26:02:99:e2:44:89:58:5b:5b:47:
93:87:67:08:68:11:57:b7:ab:b7:8a:eb:bb:70:09:
3e:89:1e:07:8e:cf:24:48:2b:d2:bd:f1:c4:35:6f:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:35:E3:DE:E7:8F:27:0C:12:50:A5:6D:79:F6:B5:A4:11:AD:8D
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LJw1497njycMElClbXn2taQRrY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.100.0-46.37.102.255
46.37.105.0-46.37.106.255
46.37.109.0/24
46.37.126.0/24
185.92.44.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4b:8a:cc:54:a9:26:fd:2a:60:98:5d:ad:61:e9:28:4d:d1:
eb:c4:60:9f:86:3c:de:cf:95:38:b1:aa:bc:3d:6b:c7:b6:88:
ab:e3:6d:bf:6e:56:62:05:3d:78:51:ec:bf:dc:36:26:7f:03:
ff:65:bf:d2:98:83:83:a4:e5:0a:91:80:c2:11:dd:6d:51:a5:
ae:ff:4a:ff:21:a9:78:5a:67:b7:d4:d3:59:08:ab:7a:25:f1:
b5:10:85:00:6c:8e:99:fb:60:a5:6b:ae:67:c3:dd:d9:e6:9c:
9a:3e:cd:1a:ee:dc:b8:15:83:52:91:65:6a:97:25:77:fe:43:
63:5c:36:b3:c1:7a:12:1a:10:08:0f:ef:c9:a0:b0:15:c8:d9:
f0:81:e7:a7:54:8c:38:fb:41:0e:2e:ba:36:a3:f7:9a:41:b9:
da:52:ab:a3:46:5d:4a:0a:0d:9b:fa:00:a6:52:28:27:c2:e1:
69:b8:30:b0:8a:52:46:81:ee:e4:36:d0:f7:4f:42:a1:c8:be:
21:2f:55:15:9b:50:6f:1e:7b:68:8e:54:a9:77:62:d0:c3:b6:
d8:89:54:3c:f6:05:8b:2d:14:d2:9a:68:3c:87:b3:34:a4:3d:
ba:ea:e8:c6:35:1e:8f:01:88:b3:e4:6d:5a:8c:a9:87:52:0a:
02:a7:c6:77
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAYqnSPHEnIjp41rbBgCWGiJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwOTE4MDc1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzljMzVlM2RlZTc4ZjI3MGMxMjUwYTU2ZDc5ZjZiNWE0MTFhZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuF9kcw+sQ+3iI+X+dH8ukeuZPVU
CqL9X8rgBcW5UlJCCSfVVCxhFWOSTiVREL3HgJc/j14Q64PDWmRwBQnue8SdzXpY
5R02+UCi9q7gaaHL8DjyvgxSdEKWNNTVx6LCYZGN8YvpyH+cxQvodJvSB+SiIBjy
7pXEmmXpC8oO3qEr0IbkFxc3RfQ9sho3ovpeaX6ZnkcU1HARcNLPhgRTXmIYBoLm
psQrswBDk1sAhJRkyIzrKLiL5krszU76Fcj9xovPVGfm6po6isPKWYNZ7WFW+4/1
5iYCmeJEiVhbW0eTh2cIaBFXt6u3iuu7cAk+iR4Hjs8kSCvSvfHENW8//QIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFCycNePe548nDBJQpW159rWkEa2NMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvTEp3MTQ5N25qeWNNRWxDbGJYbjJ0YVFSclkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQALiViMAwD
BAIuJWQDBAAuJWYwDAMEAC4laQMEAC4lagMEAC4lbQMEAC4lfgMEALlcLAMEALlc
LjANBgkqhkiG9w0BAQsFAAOCAQEADkuKzFSpJv0qYJhdrWHpKE3R68Rgn4Y83s+V
OLGqvD1rx7aIq+Ntv25WYgU9eFHsv9w2Jn8D/2W/0piDg6TlCpGAwhHdbVGlrv9K
/yGpeFpnt9TTWQireiXxtRCFAGyOmftgpWuuZ8Pd2eacmj7NGu7cuBWDUpFlapcl
d/5DY1w2s8F6EhoQCA/vyaCwFcjZ8IHnp1SMOPtBDi66NqP3mkG52lKro0ZdSgoN
m/oAplIoJ8LhabgwsIpSRoHu5DbQ909Coci+IS9VFZtQbx57aI5UqXdi0MO22IlU
PPYFiy0U0ppoPIezNKQ9uuroxjUejwGIs+RtWoyph1IKAqfGdw==
-----END CERTIFICATE-----
Generated at Wed Sep 20 20:47:16 2023 by rpki-client on console-ams.rpki-client.org