Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/M_axp9KK-4BWC2ziOq_ydz7_qws.roa
File: M_axp9KK-4BWC2ziOq_ydz7_qws.roa (raw, json)
Hash identifier: Apfd/da8pZQPwOiQExPkzMewGnPWajKgQAMEEvD0eVA=
Subject key identifier: 33:F6:B1:A7:D2:8A:FB:80:56:0B:6C:E2:3A:AF:F2:77:3E:FF:AB:0B
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01882B8C4D74B2B4020B23B9FE17EB12935F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/M_axp9KK-4BWC2ziOq_ydz7_qws.roa
Signing time: Wed 17 May 2023 21:09:54 +0000
ROA not before: Wed 17 May 2023 21:09:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
46.37.120.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2b:8c:4d:74:b2:b4:02:0b:23:b9:fe:17:eb:12:93:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 17 21:09:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33f6b1a7d28afb80560b6ce23aaff2773effab0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:77:9e:87:55:65:1e:aa:d1:22:9d:4f:9c:
94:98:d0:79:c7:2e:4e:bb:7e:04:63:c6:b1:68:78:
e5:e9:af:79:77:d2:db:0a:6e:04:65:d5:ae:9f:81:
70:1f:ec:38:60:22:19:e0:28:37:63:6e:3f:46:2a:
2c:c9:5d:42:b7:78:6c:ee:52:25:dc:cd:96:41:c2:
49:37:50:ab:f4:4a:f8:ea:63:69:22:d9:16:c3:b1:
a1:bb:2a:2e:ea:c2:da:b4:ae:3b:ff:40:78:61:70:
db:a8:86:72:ea:08:12:04:b1:cd:ac:00:be:94:1d:
9d:b4:05:84:21:a7:6e:5d:72:62:d8:7d:ab:b3:5c:
45:ef:b4:8f:d0:84:4c:7b:b5:d2:94:d1:e6:8a:83:
bc:42:8b:fc:3b:0b:8c:2c:09:e0:df:13:8b:5b:56:
1d:70:3f:6f:9e:16:fb:60:a8:38:62:c9:f6:cd:27:
cc:b1:4e:85:63:41:0f:91:29:58:07:bc:c3:1c:5c:
83:40:ac:24:e2:1c:0a:2b:59:c4:35:03:ea:83:0d:
95:4b:e5:0e:4e:a1:e5:b8:a5:d5:95:95:a5:3d:80:
5d:66:85:2e:11:f6:71:98:28:f5:bf:85:75:1a:ca:
7e:46:89:71:50:c5:fb:bd:a4:a8:08:d9:7a:45:b7:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F6:B1:A7:D2:8A:FB:80:56:0B:6C:E2:3A:AF:F2:77:3E:FF:AB:0B
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/M_axp9KK-4BWC2ziOq_ydz7_qws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.100.0-46.37.102.255
46.37.105.0-46.37.106.255
46.37.109.0/24
46.37.118.0-46.37.121.255
46.37.126.0/24
185.92.44.0/24
185.92.46.0/23
Signature Algorithm: sha256WithRSAEncryption
90:53:a9:95:1f:28:17:c3:93:fe:62:6e:bc:7d:f5:46:a9:c1:
e4:67:be:77:54:5a:a2:60:a6:d5:2f:52:cd:ec:31:3a:49:9f:
ef:3c:06:53:5a:b9:09:84:16:b8:17:08:f9:ab:7d:c9:7e:ba:
c3:00:ce:88:92:4f:28:8a:02:28:74:02:3c:41:ba:65:e9:e1:
05:b7:53:a5:59:df:81:13:a0:fa:50:40:14:d5:62:89:95:96:
9a:f3:dc:b8:3b:38:24:7d:05:fb:30:e6:6b:2f:a8:73:8d:71:
24:cc:f6:57:f9:24:b8:1d:c7:af:0c:d6:c3:a4:b9:fc:ed:01:
78:4b:73:ae:ee:eb:4f:14:84:42:6c:5f:ed:3b:1a:d8:85:10:
a5:52:78:3d:be:5e:99:d0:c3:c1:e6:e9:11:1d:43:f5:df:04:
9f:64:e5:55:51:3d:cf:56:fe:cd:ff:d4:ec:60:a9:a0:39:8b:
2b:44:e2:03:3d:5d:0d:72:ac:9e:47:4a:b3:30:5a:58:e6:d6:
31:dc:d2:ba:88:72:84:6e:2a:9c:7f:87:a3:d8:67:13:64:d6:
c9:4e:a0:2c:81:a5:e6:31:20:98:20:cd:78:55:2b:03:b1:80:
02:7c:14:ad:c9:6f:19:70:45:5b:68:a6:70:56:2d:df:34:9a:
25:64:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:44 2023 by rpki-client on console-fra.rpki-client.org