Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Ln177i9fJto-CFExTaMrUYL6KNA.roa
File: Ln177i9fJto-CFExTaMrUYL6KNA.roa (raw, json)
Hash identifier: SgMdxMjILaqJ+9uTzdMhnW+CZRGCYGNOKnxc+Kf9zOs=
Subject key identifier: 2E:7D:7B:EE:2F:5F:26:DA:3E:08:51:31:4D:A3:2B:51:82:FA:28:D0
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018D368746D93A2B462793917505D0B979DC
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Ln177i9fJto-CFExTaMrUYL6KNA.roa
Signing time: Tue 23 Jan 2024 13:34:11 +0000
ROA not before: Tue 23 Jan 2024 13:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 46.37.110.0/24 maxlen: 24
46.37.115.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 07:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:87:46:d9:3a:2b:46:27:93:91:75:05:d0:b9:79:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 23 13:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e7d7bee2f5f26da3e0851314da32b5182fa28d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:95:d2:7b:e2:ad:63:70:8e:37:09:86:9f:
bf:c2:ed:a4:8c:96:9a:5a:20:e4:e8:ce:81:19:e1:
56:bb:31:06:b5:fb:14:73:66:52:d8:71:fe:ae:18:
5f:80:5b:91:e2:52:e8:71:2e:c9:fa:ad:2a:aa:e9:
f1:b6:4e:72:56:f3:fe:b6:2a:d9:1a:72:dd:22:2f:
7e:dd:57:78:b3:2b:73:50:fe:49:90:80:3f:d6:4f:
b3:42:01:25:88:14:12:de:26:3f:4b:f9:09:ee:7c:
d9:53:8d:a0:b2:9d:37:df:1c:47:ec:2c:e5:df:dd:
34:47:fd:c2:bf:15:1b:ff:55:fe:45:76:6c:12:6d:
ad:8d:45:38:47:b3:b0:05:73:97:c7:74:de:8e:f3:
59:fa:84:bf:30:06:e4:6c:86:70:26:7c:9e:f1:19:
d7:ca:ae:8d:c3:b6:03:55:1c:c5:3b:54:ef:a4:15:
5d:0a:32:ff:29:52:3e:83:78:4a:92:99:ed:d8:e6:
bd:08:41:27:28:90:d9:92:82:75:0f:0b:f0:10:d2:
4c:21:b5:8b:fe:0d:42:dd:26:43:d5:c3:07:31:c3:
77:79:e9:23:71:c5:fe:6c:df:a2:7c:5e:e0:0b:25:
c4:86:a2:07:ab:8e:9a:37:c3:3a:8b:d3:9b:2e:f7:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7D:7B:EE:2F:5F:26:DA:3E:08:51:31:4D:A3:2B:51:82:FA:28:D0
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Ln177i9fJto-CFExTaMrUYL6KNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.110.0/24
46.37.115.0/24
46.37.121.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b4:08:b9:59:c7:4b:be:ed:93:d6:60:51:77:16:3b:b2:93:
be:84:c3:9b:69:d2:a8:a7:0c:7f:31:9f:02:e5:32:ef:34:50:
5d:18:f3:30:85:f4:04:d6:c0:c8:ef:1b:79:0d:dd:4a:71:9e:
2b:84:9e:a8:47:e8:4b:e3:43:92:ee:8c:32:8f:79:44:97:d3:
05:4b:7e:8b:14:44:7a:78:aa:83:79:87:e6:b4:e5:c2:ac:c9:
27:09:83:a4:58:4a:a7:2b:e8:98:4e:f5:ff:88:cb:1a:80:08:
6c:bc:00:2a:47:35:58:37:78:b1:40:28:80:4b:17:cd:25:ef:
5b:6a:0c:d2:08:fe:32:56:a8:12:1f:d6:53:ce:61:2a:06:28:
63:07:e6:7d:cb:4a:72:76:09:0a:7b:f8:4c:06:e5:0f:c7:c8:
88:36:61:7a:04:2a:69:ad:c4:e1:88:18:a8:de:27:27:8e:1e:
19:1a:fc:22:f6:c9:76:7f:a2:5b:8f:aa:6f:00:f6:c5:33:57:
23:2a:de:cb:d5:94:fc:be:63:c2:17:87:97:a2:93:4a:9d:06:
c8:99:16:a9:d2:c4:b6:e7:98:3b:5b:84:2b:6d:09:91:f8:80:
86:19:0c:58:03:d6:29:2f:5f:e0:14:6a:b7:d2:d5:0c:ee:ce:
2a:54:67:1c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY02h0bZOitGJ5ORdQXQuXncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjQwMTIzMTMzNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTdkN2JlZTJmNWYyNmRhM2UwODUxMzE0ZGEzMmI1MTgyZmEyOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOWV0nvirWNwjjcJhp+/wu2kjJaa
WiDk6M6BGeFWuzEGtfsUc2ZS2HH+rhhfgFuR4lLocS7J+q0qqunxtk5yVvP+tirZ
GnLdIi9+3Vd4sytzUP5JkIA/1k+zQgEliBQS3iY/S/kJ7nzZU42gsp033xxH7Czl
3900R/3CvxUb/1X+RXZsEm2tjUU4R7OwBXOXx3TejvNZ+oS/MAbkbIZwJnye8RnX
yq6Nw7YDVRzFO1TvpBVdCjL/KVI+g3hKkpnt2Oa9CEEnKJDZkoJ1DwvwENJMIbWL
/g1C3SZD1cMHMcN3eekjccX+bN+ifF7gCyXEhqIHq46aN8M6i9ObLveCWQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC59e+4vXybaPghRMU2jK1GC+ijQMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvTG4xNzdpOWZKdG8tQ0ZFeFRhTXJVWUw2S05BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiVuAwQA
LiVzAwQALiV5MA0GCSqGSIb3DQEBCwUAA4IBAQBBtAi5WcdLvu2T1mBRdxY7spO+
hMObadKopwx/MZ8C5TLvNFBdGPMwhfQE1sDI7xt5Dd1KcZ4rhJ6oR+hL40OS7owy
j3lEl9MFS36LFER6eKqDeYfmtOXCrMknCYOkWEqnK+iYTvX/iMsagAhsvAAqRzVY
N3ixQCiASxfNJe9bagzSCP4yVqgSH9ZTzmEqBihjB+Z9y0pydgkKe/hMBuUPx8iI
NmF6BCpprcThiBio3icnjh4ZGvwi9sl2f6Jbj6pvAPbFM1cjKt7L1ZT8vmPCF4eX
opNKnQbImRap0sS255g7W4QrbQmR+ICGGQxYA9YpL1/gFGq30tUM7s4qVGcc
-----END CERTIFICATE-----
Generated at Sun Jan 28 10:13:02 2024 by rpki-client on console-ams.rpki-client.org