Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LbMKfiVFLEuQdvg6WF1K_B5TZWo.roa
File: LbMKfiVFLEuQdvg6WF1K_B5TZWo.roa (raw, json)
Hash identifier: m7MRHNc1w7gP8U1/nDJqm0EqqMqdyEynDrI0HVx7nTs=
Subject key identifier: 2D:B3:0A:7E:25:45:2C:4B:90:76:F8:3A:58:5D:4A:FC:1E:53:65:6A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AFA8C608CEBF5EEED2F895272C0B76D7E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LbMKfiVFLEuQdvg6WF1K_B5TZWo.roa
Signing time: Wed 04 Oct 2023 11:56:58 +0000
ROA not before: Wed 04 Oct 2023 11:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:8c:60:8c:eb:f5:ee:ed:2f:89:52:72:c0:b7:6d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 4 11:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2db30a7e25452c4b9076f83a585d4afc1e53656a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:72:fb:61:55:77:6e:8c:2e:d4:67:f6:57:
08:24:5c:e6:92:1f:64:a9:64:71:1a:88:e2:62:07:
b8:42:ff:e7:91:57:a7:80:4b:74:15:d9:4a:dc:22:
3c:d4:09:fc:c6:33:70:e7:ef:50:a4:fd:29:79:4d:
27:a0:f6:f8:01:cb:7e:6f:2c:34:9c:4d:9a:92:fa:
49:bb:15:8b:d5:66:60:82:2a:94:3a:51:07:de:6f:
cd:00:f5:a7:fa:af:db:9c:fd:1b:9e:96:03:fc:ce:
3b:2f:12:5a:dc:3d:0b:17:ff:7c:d9:07:d7:12:3d:
37:d9:e3:32:ce:bb:8a:15:11:89:d6:b9:04:f4:2f:
03:1f:0d:4a:d9:99:68:f4:45:c5:48:6a:d9:a7:46:
30:50:b6:9e:50:cf:1e:3a:1c:77:e1:0c:5c:3f:5c:
4b:1a:b9:85:b5:b8:71:95:ed:47:c2:b3:ea:13:74:
94:77:ba:1e:3a:0d:ff:60:b1:df:e2:7e:c6:84:be:
c4:5d:42:59:e6:81:b7:fc:36:31:29:f8:b1:5c:59:
1a:f5:a8:60:10:08:ab:bd:b6:69:7f:15:96:55:40:
5f:74:80:ac:6d:ad:97:a3:64:fe:fc:30:e5:bb:6f:
96:45:3f:d9:bc:1c:aa:24:3e:e8:1b:6f:5b:f1:1c:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B3:0A:7E:25:45:2C:4B:90:76:F8:3A:58:5D:4A:FC:1E:53:65:6A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/LbMKfiVFLEuQdvg6WF1K_B5TZWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.114.0/24
Signature Algorithm: sha256WithRSAEncryption
35:dc:e3:e6:b2:3f:f5:cb:ac:50:81:5c:bc:b4:ed:d4:85:ac:
af:b1:1d:44:8c:87:a1:c5:c1:71:10:bf:92:30:9d:ad:c8:b1:
46:05:ad:85:7b:01:53:16:21:94:4a:c3:b5:02:55:36:73:4b:
e3:9d:31:e4:db:28:f4:aa:c7:db:2e:fa:a6:0a:85:2d:f3:0a:
c4:f0:d4:09:c5:48:87:16:83:49:ea:61:11:27:b4:59:db:a3:
3d:1d:39:72:ea:4e:81:6b:37:81:f2:bb:b2:98:f7:c8:43:9c:
c0:c8:3d:a0:e6:74:36:60:8e:99:d9:fb:b6:db:1a:ef:e6:38:
aa:4d:80:d0:e9:0e:3f:56:0f:5e:f8:79:50:16:ff:8f:0c:13:
93:d8:59:4d:2a:f6:90:79:84:e0:a9:6f:93:eb:d3:26:3e:15:
7d:f9:22:bb:e0:de:af:14:d8:41:6c:7d:21:19:51:39:70:89:
9e:a4:56:47:90:d0:b8:19:5a:31:ec:82:06:4d:7e:c4:07:e8:
62:3d:3b:48:62:95:f5:ef:3d:1d:ae:aa:a0:b4:1d:81:64:8b:
06:52:f2:63:67:73:d3:e7:24:1c:99:49:c0:5e:62:0d:c1:b2:
af:c6:0d:d6:00:8a:82:99:e1:9c:e1:7c:98:4c:59:ec:0b:80:
45:f3:c0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:05 2024 by rpki-client on console-ams.rpki-client.org