Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/M83-RgxDSnannVQyun00Ni0qGBo.roa
File: M83-RgxDSnannVQyun00Ni0qGBo.roa (raw, json)
Hash identifier: suqBz/RYQsZcZNkhMT44HRKYuhYz9q8fUrKA2l2K4uE=
Subject key identifier: 33:CD:FE:46:0C:43:4A:76:A7:9D:54:32:BA:7D:34:36:2D:2A:18:1A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018B670004889B6C4B6AB1FBDF26F3A2124A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/M83-RgxDSnannVQyun00Ni0qGBo.roa
Signing time: Wed 25 Oct 2023 13:22:16 +0000
ROA not before: Wed 25 Oct 2023 13:22:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203377
IP address blocks: 46.37.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:00:04:88:9b:6c:4b:6a:b1:fb:df:26:f3:a2:12:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 25 13:22:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33cdfe460c434a76a79d5432ba7d34362d2a181a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:2c:88:2c:f0:ee:61:dc:ed:5c:b3:48:fb:
75:32:24:b4:63:5e:94:6b:13:6f:fb:06:58:ae:8b:
3b:e3:15:2a:57:40:96:a4:97:07:cd:d9:0b:cf:2f:
15:62:0b:70:af:6d:24:7b:8e:30:94:19:eb:62:2f:
99:32:eb:c8:fb:50:ec:75:89:ff:63:7b:c2:db:a3:
5c:61:9a:99:09:dc:b4:54:9e:d7:0a:fd:9e:1d:af:
09:93:e2:93:c1:6a:04:01:9c:77:ea:fe:ac:68:6a:
43:61:0d:e1:38:58:85:c8:e4:d5:b8:94:fb:41:d5:
aa:8e:5b:31:c2:7c:74:f1:2b:44:1c:fa:af:6c:bc:
70:44:e4:54:55:2c:9f:6f:1e:92:f0:81:7b:0e:c4:
f7:2e:dc:52:97:26:be:ee:60:48:3e:cf:6c:0d:1d:
6f:0c:53:97:de:fe:36:7a:a0:67:75:99:0e:b5:e5:
9a:1f:f0:8b:70:15:09:b4:d2:05:13:f8:89:f9:eb:
d2:00:96:36:fe:14:53:5e:e2:10:f6:28:22:31:09:
0a:01:06:e0:cb:56:f6:02:84:fb:0f:d6:86:db:d7:
8f:4e:3a:00:6c:48:20:4d:f4:6c:ff:bf:21:03:b7:
e8:c6:a3:31:1d:0d:8b:04:00:72:3f:fd:7f:81:6a:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CD:FE:46:0C:43:4A:76:A7:9D:54:32:BA:7D:34:36:2D:2A:18:1A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/M83-RgxDSnannVQyun00Ni0qGBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.123.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6e:d7:57:46:a8:03:2a:d1:40:00:8c:c4:da:9d:de:27:db:
ad:9b:ee:9d:11:29:19:ec:72:3b:b3:ec:0b:d4:f4:59:d0:74:
19:f8:3e:bf:16:b6:54:4c:e2:02:66:c7:38:0b:01:1c:76:85:
4c:94:0b:a1:06:e4:e6:7f:6f:77:fa:b0:c1:3a:02:e9:a7:db:
be:23:2c:8c:aa:f0:7d:91:56:37:0d:1a:dc:7d:4a:21:e7:21:
19:cf:30:4d:0c:76:8c:f3:f2:d0:b8:12:21:8f:df:af:f5:73:
99:aa:11:51:a4:97:d3:89:f2:db:11:6e:32:02:29:d7:77:28:
12:2a:3a:be:a4:ca:b8:5a:45:66:47:b8:6e:82:ff:4e:5c:4f:
3c:8a:31:4f:ed:5a:b3:e1:7f:67:ef:d1:46:60:cb:62:2b:c4:
c4:52:de:69:31:ef:71:62:ac:a4:f0:67:94:21:b9:ac:2c:96:
c4:25:fb:63:ec:84:20:67:01:e9:ad:73:08:3a:1b:2c:bc:33:
ca:b1:05:f6:13:6f:cc:32:76:c1:ee:e8:e3:ad:4b:a6:de:69:
4b:e2:cb:da:70:19:01:9e:b3:80:01:9b:7b:08:31:94:dd:b1:
3c:1e:50:dc:a7:c0:82:fc:14:c8:29:fa:30:78:87:2d:fd:86:
72:56:47:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:05 2024 by rpki-client on console-ams.rpki-client.org