Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NnxWNvQ9ZYqO426y9F2tueyREdo.roa
File: NnxWNvQ9ZYqO426y9F2tueyREdo.roa (raw, json)
Hash identifier: ANsZLNDwvQzrbAubWNQZCe7lwD7PP/lnWeVKNizo5f4=
Subject key identifier: 36:7C:56:36:F4:3D:65:8A:8E:E3:6E:B2:F4:5D:AD:B9:EC:91:11:DA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01933A33C029C60FDBDC3E2C8EF8171B3289
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NnxWNvQ9ZYqO426y9F2tueyREdo.roa
Signing time: Sun 17 Nov 2024 12:58:10 +0000
ROA not before: Sun 17 Nov 2024 12:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 11:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3a:33:c0:29:c6:0f:db:dc:3e:2c:8e:f8:17:1b:32:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Nov 17 12:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=367c5636f43d658a8ee36eb2f45dadb9ec9111da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:2f:d6:0b:fb:73:5f:74:44:6e:35:8b:9f:
dc:d4:34:6a:ae:3d:a4:21:1d:34:87:b7:63:14:48:
7d:94:d6:9c:a0:47:c6:76:1e:61:f6:2e:20:28:80:
20:31:59:88:bd:27:5e:df:c9:32:b9:c1:4b:e2:65:
18:f3:b6:93:ca:df:c8:d0:77:9a:71:1e:7e:3f:1f:
21:57:9b:97:d6:57:a5:43:07:22:3a:17:60:c6:e0:
ae:52:4e:4d:8d:fc:99:d0:dd:05:a0:e9:d2:c5:95:
fb:df:22:11:ec:35:4e:c5:fe:66:38:52:f0:d5:ef:
e6:41:75:68:f7:0a:6c:01:66:86:64:a7:49:f2:a2:
46:e7:f2:3e:21:44:3b:b1:15:f6:6f:60:a9:27:82:
c4:02:26:b6:89:1d:e1:89:f9:82:41:20:f6:02:da:
c9:be:1c:ae:d8:0e:9f:70:5f:ea:67:54:32:c8:75:
42:19:59:37:ae:d3:f2:c3:c4:6a:69:a3:fa:c0:de:
e0:97:39:44:47:31:07:f6:20:d4:b8:00:6e:9c:5d:
f1:87:e0:7e:88:a5:6b:37:67:58:1d:f3:04:8b:f9:
6c:3c:7d:6e:e1:54:a9:34:83:88:78:37:de:fe:77:
16:fa:76:f0:c6:67:1d:8e:7f:83:e9:89:b0:7a:8b:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7C:56:36:F4:3D:65:8A:8E:E3:6E:B2:F4:5D:AD:B9:EC:91:11:DA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NnxWNvQ9ZYqO426y9F2tueyREdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
20:62:3a:82:19:8d:41:5f:ed:53:4f:3d:19:d0:94:4a:a0:50:
8b:ef:53:1f:96:bb:4a:91:4f:8f:be:26:06:c8:bd:7d:00:af:
6a:33:c9:ac:8e:4c:32:f4:17:8c:5c:d8:ea:50:b7:c0:79:8c:
44:1a:59:ce:8d:86:86:3c:43:36:22:26:68:1a:23:db:c8:9c:
4e:91:9a:5b:35:c7:d1:9e:ad:5f:8a:56:45:9d:7a:7e:14:e5:
39:12:3e:24:4e:5a:f1:4f:00:62:d5:0d:17:3f:a2:f5:1c:1d:
df:f9:68:d2:7c:6a:3f:cc:55:04:93:bc:b8:51:43:66:66:b8:
6f:e8:e3:26:6e:0f:39:ba:d7:ec:1b:86:b1:e9:19:dc:60:cc:
82:61:9b:57:d1:30:ca:10:ae:e6:3e:dd:52:2b:7b:02:6b:b4:
f0:40:b2:33:3b:e6:97:a5:52:35:8a:fc:83:99:f6:f8:19:c5:
51:7b:41:05:da:8e:ed:d4:1f:f2:68:b3:e0:8d:cb:a7:ed:89:
e6:03:7f:35:9e:fc:10:a8:c2:f7:1d:35:8f:0b:d7:5e:3d:65:
09:1f:35:ad:0e:04:5d:2e:d7:c1:c7:ca:c4:40:3b:b5:e3:fd:
dc:85:34:c7:46:80:28:7d:52:48:9f:46:35:5a:0d:a3:85:e9:
0a:ee:73:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:11 2024 by rpki-client on console-fra.rpki-client.org