Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NAVFFf2Q6EOHUQUDMQr1w6dJ1so.roa
File: NAVFFf2Q6EOHUQUDMQr1w6dJ1so.roa (raw, json)
Hash identifier: xdTzdBrwFLyIIxh0UiQk9jzQ/BgBmtyFvd9rad0CZs4=
Subject key identifier: 34:05:45:15:FD:90:E8:43:87:51:05:03:31:0A:F5:C3:A7:49:D6:CA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0188901B5B438001DA5D4100025BB6BB8A7C
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NAVFFf2Q6EOHUQUDMQr1w6dJ1so.roa
Signing time: Tue 06 Jun 2023 09:48:11 +0000
ROA not before: Tue 06 Jun 2023 09:48:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 46.37.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:1b:5b:43:80:01:da:5d:41:00:02:5b:b6:bb:8a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 6 09:48:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34054515fd90e84387510503310af5c3a749d6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:d4:00:c5:f4:38:04:de:c9:d2:01:ab:2b:
30:46:2b:b6:cb:76:38:c9:8a:63:ea:38:38:ce:ec:
1a:69:3d:d0:9f:c2:6b:4c:17:f5:3d:66:7d:f8:9e:
51:ea:c0:c3:a6:17:cf:b3:be:fd:87:70:3b:2d:e8:
71:8f:ab:6f:61:cb:65:25:72:d2:1a:49:ad:04:e8:
ea:d5:2e:5e:cd:7e:26:3a:83:da:b6:09:35:ba:c4:
ec:fe:23:b4:86:c5:fd:63:b0:0e:1d:8f:6f:5f:6a:
fa:ce:a8:18:3c:08:95:3b:21:59:40:2a:5f:a0:b3:
51:f0:12:7a:84:37:c9:2e:72:3c:5e:29:39:5f:f0:
45:7a:bc:b3:b5:f7:c6:01:d0:b6:91:b5:f0:d6:14:
02:38:7a:3b:7f:2e:07:e1:a7:9b:4f:c7:09:38:c2:
f4:5d:aa:85:f8:24:d4:2e:04:c8:5f:22:59:36:17:
47:c8:31:cd:89:70:3e:c9:62:99:23:26:ef:66:6b:
47:0e:98:61:74:49:eb:63:95:78:a7:e8:da:0a:95:
10:88:56:30:13:ef:52:57:ab:0e:37:14:f4:98:c0:
0b:1d:8d:25:d7:79:ad:11:36:8c:4b:1a:c1:70:71:
51:67:7f:05:a6:00:34:17:8b:f9:f8:36:f7:63:eb:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:05:45:15:FD:90:E8:43:87:51:05:03:31:0A:F5:C3:A7:49:D6:CA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NAVFFf2Q6EOHUQUDMQr1w6dJ1so.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6f:94:b6:3a:f8:d4:cd:e8:f8:7e:ae:df:92:a6:5b:da:05:
cb:b1:0e:e7:dc:59:fe:85:3a:d9:3e:c1:93:d5:54:a1:3f:be:
e9:d2:76:a7:f7:8f:18:3e:df:d5:66:c1:ac:6c:7a:2a:a7:c5:
c8:f0:46:55:e7:3d:26:be:41:d4:4a:e6:01:08:3c:70:97:2e:
61:9f:4a:eb:2f:66:2b:3b:0b:a5:02:f0:be:f0:e2:06:13:2e:
ad:9b:ef:04:54:2c:83:73:f1:19:a2:67:69:c7:a0:2f:53:50:
31:64:19:df:41:f7:e2:3b:d6:73:aa:25:08:7a:11:6c:24:92:
66:da:37:dc:fc:5c:89:d0:23:60:48:3c:f8:68:22:76:84:92:
4a:20:72:a7:3c:9b:c5:a9:2e:b0:46:80:1d:3d:c3:49:1e:10:
1b:44:14:ca:d8:d8:96:0c:ca:b4:ff:ae:64:9c:91:92:50:40:
ce:03:3e:e9:b0:15:e9:81:f6:ed:7c:24:53:75:49:93:09:ab:
3c:c6:56:91:c9:f2:00:83:65:7a:01:fe:21:9c:31:cb:16:58:
b1:32:bc:48:e3:36:24:9c:37:85:42:ae:61:ee:53:d4:c5:f7:
c2:80:33:ba:f5:4a:17:75:60:3c:e5:62:f1:56:19:89:90:b0:
25:c7:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org