Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LT79bw2tFYR8p7AdxMNYBKbxI2I.roa
File: LT79bw2tFYR8p7AdxMNYBKbxI2I.roa (raw, json)
Hash identifier: dtXCDBboZLrL1RzTt56zPlvC3KwpH70Agbzr+uADG3c=
Subject key identifier: 2D:3E:FD:6F:0D:AD:15:84:7C:A7:B0:1D:C4:C3:58:04:A6:F1:23:62
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0189928C2BE8B235C873AB6848BBB4CF2A4F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LT79bw2tFYR8p7AdxMNYBKbxI2I.roa
Signing time: Wed 26 Jul 2023 14:13:27 +0000
ROA not before: Wed 26 Jul 2023 14:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:8c:2b:e8:b2:35:c8:73:ab:68:48:bb:b4:cf:2a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 26 14:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d3efd6f0dad15847ca7b01dc4c35804a6f12362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b3:cf:49:8e:ae:13:6c:33:e7:b5:8e:ee:d6:
14:d6:b3:81:8b:c4:9a:e6:70:20:90:a0:12:c4:7b:
91:dd:35:48:ff:af:f3:66:cc:7b:9d:45:6a:46:a9:
3a:d1:a5:e2:7e:6d:94:c9:48:d6:5d:60:2a:f8:e6:
93:cd:5a:01:0e:75:31:96:78:57:de:fc:57:9d:14:
08:1f:8a:81:38:d0:0e:a4:21:b7:55:77:84:f3:08:
55:89:c6:db:ba:cf:f0:3c:b2:c7:d8:4d:93:8d:6f:
bb:0f:b5:69:40:49:9e:1d:c4:a7:0b:92:a7:4d:db:
64:27:50:3b:0f:d6:d1:b4:e6:e8:9f:fa:de:70:99:
3d:de:2d:37:1e:f7:18:53:08:be:05:cd:be:c9:cb:
5b:39:8a:7c:d3:d2:10:6e:b7:9e:af:5d:7e:a5:3c:
2d:ce:a3:a9:b5:ba:dc:49:6e:17:64:ad:df:d6:4a:
2e:8a:12:39:ed:08:b7:e6:b6:8a:43:ba:68:16:6f:
9a:66:f5:b7:8b:df:69:49:b0:b8:42:47:5d:e1:bc:
2a:78:e2:2f:7e:db:56:95:8d:51:71:de:58:6f:91:
a8:cb:fc:9f:d2:00:49:60:24:05:8b:7b:c1:7a:3f:
e0:20:22:62:e7:0a:98:2c:78:7e:a9:1f:a3:e7:59:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3E:FD:6F:0D:AD:15:84:7C:A7:B0:1D:C4:C3:58:04:A6:F1:23:62
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LT79bw2tFYR8p7AdxMNYBKbxI2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
16:ff:2f:3f:4e:0b:a5:28:e4:af:bc:eb:1e:68:94:b4:0e:d6:
0c:ee:53:bf:cf:83:e9:3c:4a:33:dc:38:24:43:c9:14:21:18:
b8:79:28:cf:d9:cc:fe:d0:d1:2a:fe:99:90:ec:26:ab:91:26:
82:e1:92:ae:14:2d:43:be:0d:d5:24:8a:69:c7:65:c4:81:64:
ce:85:b7:a6:b9:c4:ea:03:62:fc:bf:30:82:fe:ec:66:42:9b:
d1:9c:06:1c:8f:2e:be:a0:87:53:f6:8b:8e:ef:15:c7:68:6d:
a0:61:7c:c0:d8:d9:8f:61:81:e1:67:cf:3c:02:c3:2e:7e:2f:
7c:b1:a3:2e:87:db:c0:d3:3e:51:81:37:37:21:f8:91:d5:e3:
25:fb:0a:db:cf:c4:57:31:26:4c:d9:41:f3:17:4e:0b:a6:98:
f5:13:fc:49:74:35:e3:65:19:62:73:fe:3b:f6:2a:9c:c3:17:
04:db:45:ca:b0:6e:76:7d:61:49:df:3f:18:21:5c:98:cb:3a:
52:b8:57:4a:9b:f6:d0:f7:7f:49:93:d4:6b:88:0e:7d:ac:a3:
7b:5c:a9:91:49:d9:e0:b1:7c:c0:4f:e7:82:09:c2:28:b3:a0:
4a:13:e8:4b:8c:a6:9b:56:2c:4b:b2:8d:b7:65:b9:6f:33:cf:
37:6a:c2:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 28 23:07:29 2023 by rpki-client on console-ams.rpki-client.org