Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Nd3b--E66SXDupZJvd-asO5Ozak.roa
File: Nd3b--E66SXDupZJvd-asO5Ozak.roa (raw, json)
Hash identifier: H/kNWPmPouYsypo61q2wkBKrpfmXFol3EIpMyp/pk7g=
Subject key identifier: 35:DD:DB:FB:E1:3A:E9:25:C3:BA:96:49:BD:DF:9A:B0:EE:4E:CD:A9
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01899EABCF3C35ADB206B96D70F32172B5A5
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Nd3b--E66SXDupZJvd-asO5Ozak.roa
Signing time: Fri 28 Jul 2023 22:43:27 +0000
ROA not before: Fri 28 Jul 2023 22:43:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
46.37.120.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9e:ab:cf:3c:35:ad:b2:06:b9:6d:70:f3:21:72:b5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 28 22:43:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35dddbfbe13ae925c3ba9649bddf9ab0ee4ecda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:27:f8:26:05:5e:11:e7:fa:9c:9a:5f:32:
5e:c3:30:e3:fb:93:af:5c:66:c9:b1:8c:b3:55:cf:
93:8c:55:4c:8d:39:1c:97:4d:e6:04:e8:6e:2d:be:
68:af:74:a5:dd:25:bd:4c:1d:ab:bc:37:9d:d5:9f:
02:46:a8:75:13:97:5e:f8:70:d5:0d:3a:c2:6f:c7:
74:36:1c:9f:4b:38:ca:51:57:41:a4:37:30:9c:1d:
a5:bc:6e:ee:80:47:78:2b:48:6c:cd:0e:2c:2d:f5:
35:e8:c3:c8:b9:7f:b6:ff:91:1a:aa:98:0e:7c:45:
fc:ab:b8:36:f3:8a:7c:38:81:9f:c4:ef:16:43:39:
23:59:cb:13:c5:cf:89:84:6a:c6:58:a0:ea:e0:00:
b2:13:65:4f:cc:29:23:ad:7d:77:dd:03:1f:4f:9b:
e2:f0:f9:11:49:1f:f9:11:83:b0:75:55:2b:d9:bf:
8a:18:7f:9b:ae:66:61:ff:a7:fa:7b:42:5f:c2:c4:
cd:8c:3b:95:08:a3:5c:26:7c:ab:d5:d9:cf:34:75:
91:6a:3e:56:33:06:bb:81:48:bd:ea:21:40:e8:79:
0f:33:4d:73:8b:8e:bc:00:0a:1f:36:06:78:25:d2:
67:c6:a0:e3:02:ed:37:35:58:f6:ba:60:bc:c7:71:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DD:DB:FB:E1:3A:E9:25:C3:BA:96:49:BD:DF:9A:B0:EE:4E:CD:A9
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Nd3b--E66SXDupZJvd-asO5Ozak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.100.0-46.37.102.255
46.37.105.0-46.37.106.255
46.37.109.0/24
46.37.118.0/24
46.37.120.0/23
46.37.126.0/24
185.92.44.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
33:11:32:b8:42:64:9b:07:b3:5e:49:d2:15:6d:55:e1:34:fb:
c8:a0:f0:4d:89:08:32:dc:7a:9a:3f:a9:96:5f:22:02:68:73:
7d:6b:3b:68:bf:d4:af:ce:50:31:aa:68:ef:ea:5a:8d:51:78:
7f:3f:03:79:63:99:53:fe:8d:b9:80:4b:f8:17:cc:34:3b:b1:
2b:83:82:4e:70:f8:be:7a:4c:01:ae:db:41:65:f0:ac:7a:d9:
75:31:47:d1:dd:7e:48:1b:c3:b3:24:f6:e7:a9:c6:7e:af:aa:
78:39:c5:e3:dc:f1:58:0a:a5:54:55:8c:51:7d:20:b4:74:d5:
a5:e7:6b:50:36:36:7a:b8:76:f5:3c:b9:5c:7d:8c:48:50:1d:
22:52:45:fa:6a:6a:61:14:e0:fc:45:21:2b:59:88:b0:31:c9:
8e:ef:1a:85:45:d2:9c:b8:ef:f1:14:e7:bf:c4:61:03:88:f9:
bc:d6:14:3b:39:e3:45:a4:22:52:40:78:50:aa:c5:1c:18:a5:
23:a7:cb:2c:97:26:43:16:24:f0:4a:ae:80:2b:21:bf:2c:e9:
4b:95:3a:46:c7:a7:09:16:54:a4:3a:77:27:28:65:93:23:ae:
26:27:60:51:c3:b1:88:67:26:b5:ab:44:ad:ac:af:b9:41:21:
31:62:eb:b3
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 17 07:26:22 2023 by rpki-client on console-ams.rpki-client.org