Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OBWJ0jnss5ENqsLu8GBFgQlVo_o.roa
File: OBWJ0jnss5ENqsLu8GBFgQlVo_o.roa (raw, json)
Hash identifier: lQSoZufBBBcQBWr7u+wb2KYlmodTNG37uCaLo24HMx4=
Subject key identifier: 38:15:89:D2:39:EC:B3:91:0D:AA:C2:EE:F0:60:45:81:09:55:A3:FA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018DF5FAC3A5B270AE745977C453DD4419AB
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OBWJ0jnss5ENqsLu8GBFgQlVo_o.roa
Signing time: Thu 29 Feb 2024 17:47:48 +0000
ROA not before: Thu 29 Feb 2024 17:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 06:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:fa:c3:a5:b2:70:ae:74:59:77:c4:53:dd:44:19:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 29 17:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=381589d239ecb3910daac2eef06045810955a3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:42:d3:22:2d:7f:bc:75:ed:0e:78:ba:87:3d:
5b:73:96:3f:96:b1:09:83:bc:ab:55:b8:4c:d2:51:
1c:b4:b6:00:16:97:17:11:6d:b0:d6:09:18:0c:53:
47:1d:2f:b6:a3:9a:e3:8d:75:fe:c3:6a:6e:2e:41:
ef:7e:1a:7d:dd:31:1d:66:d7:c5:02:aa:07:d0:1d:
3c:4f:bc:61:a6:b1:b6:bc:d0:f2:62:1c:ce:88:1a:
24:f6:33:23:eb:36:88:94:23:81:df:e9:fe:36:37:
2f:d5:57:83:3a:5f:59:fe:30:87:7d:2d:64:f0:b4:
e2:18:83:f1:b0:b3:9e:8a:72:ad:56:8f:68:5d:59:
67:37:80:94:f9:bc:51:1a:4f:3d:6e:38:0d:c1:09:
c1:92:1d:64:14:da:79:cc:9d:71:0f:62:25:03:48:
4e:03:4f:66:39:1e:2b:1a:79:6b:35:2e:20:40:5e:
90:69:81:ec:93:76:23:ad:05:c3:51:9c:dc:83:ff:
7e:dd:84:d8:97:c8:df:ce:7f:bd:b1:df:4a:1d:ac:
7d:a3:15:12:11:6e:fb:92:07:25:db:04:c1:6c:5d:
f3:7d:1d:86:8e:69:dd:d7:68:d5:8d:4b:20:cf:30:
e3:23:73:1e:62:e2:6d:ce:ab:7c:d7:e8:73:e4:b9:
35:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:15:89:D2:39:EC:B3:91:0D:AA:C2:EE:F0:60:45:81:09:55:A3:FA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OBWJ0jnss5ENqsLu8GBFgQlVo_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.121.0/24
Signature Algorithm: sha256WithRSAEncryption
32:69:a9:43:d7:6c:8a:ad:d5:b0:d5:17:a9:a6:0c:53:58:f7:
c1:33:d9:a5:a5:1c:2b:dd:e7:8a:03:b0:f7:4a:e6:d9:e0:66:
ee:d8:b2:4c:c0:ba:79:40:80:63:4f:90:13:b2:cc:4d:69:00:
09:68:d7:ba:69:2b:da:21:e6:01:59:d2:3c:23:69:d7:85:27:
99:5b:8d:c6:61:9d:ef:34:47:3b:b1:0e:a0:88:df:fc:1b:e2:
fd:b0:0c:a9:92:18:68:eb:9c:5e:a3:9e:60:ab:c6:9e:8d:7d:
6a:98:66:93:2f:15:56:46:49:87:0b:3f:ab:5e:0c:43:ee:33:
50:80:09:ef:7b:f0:3b:93:37:a0:bb:99:61:11:41:92:eb:19:
48:16:d7:63:df:d7:12:88:42:20:8d:5e:bd:de:35:ba:dc:89:
f8:f3:8c:4d:4d:c6:8c:85:da:04:80:8d:fc:c2:11:14:d9:2d:
4b:4f:24:2c:d9:dc:28:99:e2:3b:0f:f4:ec:e4:d5:1d:bd:6e:
65:80:a5:18:a6:60:ec:13:03:8a:de:d4:a8:cb:1b:5b:c3:93:
db:cc:f1:54:1c:7a:91:b3:fd:9e:11:ae:c4:2a:59:60:77:b7:
bc:c0:77:4f:6b:09:a4:11:32:27:db:ea:41:8f:c9:3d:81:fc:
b0:4f:db:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org