Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NWlLOCnmVlhZxypxQih1X8B3m2s.roa
File: NWlLOCnmVlhZxypxQih1X8B3m2s.roa (raw, json)
Hash identifier: t3KeEYZNcGWZS6bcBVlt3WST9Azt8/j4kvHDpt1/y40=
Subject key identifier: 35:69:4B:38:29:E6:56:58:59:C7:2A:71:42:28:75:5F:C0:77:9B:6B
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018BD74FDE60A96531841EEBBBE7784EA4A1
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NWlLOCnmVlhZxypxQih1X8B3m2s.roa
Signing time: Thu 16 Nov 2023 08:46:57 +0000
ROA not before: Thu 16 Nov 2023 08:46:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:4f:de:60:a9:65:31:84:1e:eb:bb:e7:78:4e:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Nov 16 08:46:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35694b3829e6565859c72a714228755fc0779b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:78:b1:aa:1f:b3:78:c0:04:79:f0:aa:bc:
a0:2f:ec:74:97:fe:c7:79:55:85:74:45:0e:cb:62:
bb:6e:f4:8d:96:9a:aa:2c:f5:8e:a1:da:93:c9:f0:
a7:38:5d:92:70:f8:0d:a8:be:82:fc:c8:73:bd:28:
76:cd:7a:04:49:d1:a9:b6:2c:cb:d4:cd:26:b4:91:
18:91:5a:f3:0f:27:82:29:bc:05:1b:55:4d:d3:6a:
ca:be:62:c4:13:c8:bd:15:b8:e2:8a:66:4b:d7:c5:
45:96:bf:b3:87:ff:3f:ae:ce:3a:ab:b9:a6:09:dd:
21:d6:af:c5:53:38:e2:20:6b:21:34:e9:3b:a6:6f:
b3:33:ae:3e:e0:9f:7e:95:cf:8b:27:41:11:4a:76:
76:b4:c4:33:c1:0b:81:5e:01:28:ce:a8:1a:6b:a4:
24:6d:2e:d8:a5:f9:f0:c0:2b:fc:62:64:77:48:9c:
05:8f:f0:98:16:d1:92:19:38:4d:89:28:e7:ca:5f:
0e:e8:cb:2d:b7:17:72:9c:29:71:f3:2f:21:a6:8f:
7b:44:dd:e8:1e:97:f6:c0:e1:2a:7c:2e:24:32:e5:
98:d3:95:7a:96:73:7a:4e:03:e8:e7:33:e9:53:58:
7e:81:54:1d:1d:43:64:a2:72:bd:4e:d8:69:5c:38:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:69:4B:38:29:E6:56:58:59:C7:2A:71:42:28:75:5F:C0:77:9B:6B
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NWlLOCnmVlhZxypxQih1X8B3m2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.121.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:68:78:b8:fa:2c:3f:b2:08:b2:7d:75:4f:de:07:d4:66:dc:
24:27:22:bc:0d:90:c9:41:ac:b8:a6:f4:b6:b0:e3:52:6d:a6:
38:87:f8:2e:f2:f2:e5:0b:49:44:25:b5:29:12:6b:30:c2:fe:
29:ca:cc:0f:13:60:4b:4f:a8:73:1c:d9:97:30:ca:ab:d0:14:
e8:c4:d0:b1:12:f4:7f:8e:8a:72:e6:e3:35:4b:d5:83:7e:07:
5d:9d:ab:df:97:4c:e1:06:97:46:92:a0:e4:27:12:ba:5f:81:
94:f4:38:60:ce:72:81:31:71:6a:56:d3:09:6a:5b:e0:3b:cf:
f6:2a:e1:4c:65:85:e0:3c:19:b6:85:1c:82:02:32:c5:37:56:
21:43:2f:54:77:7d:ff:fc:2d:17:9a:73:ec:4b:85:e2:70:02:
72:db:2c:02:53:18:76:08:59:64:4a:b0:75:5f:0b:85:3a:c0:
84:d2:a3:33:0d:b9:f6:a8:71:56:6f:db:35:9a:33:7f:38:dd:
37:c4:30:08:e2:0b:ec:90:7a:67:66:12:5e:f8:c9:99:e2:e5:
46:ba:26:6e:29:dd:dd:42:ba:5f:7e:ea:73:4c:46:b9:6e:24:
94:f7:97:26:4b:99:9a:df:9c:2c:a7:6b:c3:74:4b:23:25:8f:
73:61:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 09:53:48 2023 by rpki-client on console-ams.rpki-client.org