Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OBq3Kl0s6H5Tq7IHV6oI4z4wauI.roa
File: OBq3Kl0s6H5Tq7IHV6oI4z4wauI.roa (raw, json)
Hash identifier: MXrz0mkOkQdiKDOf30oA1t9Z3mUcKnEtSm530D5gtYk=
Subject key identifier: 38:1A:B7:2A:5D:2C:E8:7E:53:AB:B2:07:57:AA:08:E3:3E:30:6A:E2
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0ADE4BE04E033C188F8199E2C927F8
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OBq3Kl0s6H5Tq7IHV6oI4z4wauI.roa
Signing time: Sun 01 Jan 2023 11:15:06 +0000
ROA not before: Sun 01 Jan 2023 11:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 46.37.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:de:4b:e0:4e:03:3c:18:8f:81:99:e2:c9:27:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=381ab72a5d2ce87e53abb20757aa08e33e306ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:e8:d3:90:6c:b0:69:db:b4:0e:e1:1c:32:
d0:c6:e8:3a:12:b1:cd:8f:02:4a:78:94:f4:87:eb:
38:45:54:26:1a:55:f8:a4:c6:c6:95:e9:0a:e2:8d:
64:7c:43:43:b9:5c:7d:29:b2:c0:55:c2:03:6f:3c:
bd:2a:7c:c5:7f:e2:e8:2e:c3:08:9a:df:29:7b:dd:
9c:80:82:7e:d9:8b:a6:24:f0:d9:25:49:a9:84:b7:
8d:1a:56:fa:7f:17:7c:44:fb:f6:8e:ff:7d:74:57:
a6:25:b7:5b:f3:db:49:ee:3e:7c:88:44:42:22:6c:
43:86:9a:99:1e:f0:35:ef:bb:a5:7a:90:a4:b5:94:
f2:43:cd:17:31:ac:43:8c:dc:ba:95:3a:9f:94:3b:
9f:73:c3:3b:7b:a7:a1:6d:00:c0:ee:70:a7:69:d3:
b0:b8:f5:e5:c6:e9:cb:3f:39:27:14:13:bf:e0:2c:
62:47:85:e6:39:0b:1a:5f:1e:72:14:f2:d0:9e:b1:
1d:5e:40:c9:4b:37:49:79:ed:5c:a9:20:b5:17:9c:
db:23:c1:d4:2f:35:37:89:81:8d:3c:02:10:e7:da:
e0:6e:aa:b9:80:13:10:c3:e9:9c:48:a9:12:d7:33:
ba:fc:49:2d:e0:68:a9:09:5b:3c:c3:b8:af:d1:4e:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1A:B7:2A:5D:2C:E8:7E:53:AB:B2:07:57:AA:08:E3:3E:30:6A:E2
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OBq3Kl0s6H5Tq7IHV6oI4z4wauI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
79:90:d4:9c:2c:21:29:06:93:38:81:16:63:58:f4:3d:21:1a:
65:4d:1f:ef:4e:a1:5b:43:5c:14:14:53:21:f5:25:f4:35:64:
14:cc:e4:c4:af:33:a7:a2:5e:bd:42:6e:f7:aa:b9:c3:27:49:
c9:6a:94:39:a7:a9:eb:1a:ef:bb:21:0f:a8:35:10:f4:b2:20:
cb:a0:8a:a4:b6:3c:2a:4c:76:3f:5d:ad:17:13:f7:b0:2f:ac:
77:99:a4:61:21:23:4f:90:7f:48:37:9d:95:89:dc:13:d1:32:
ee:e0:38:82:af:e1:84:78:a8:97:14:55:30:bf:27:a2:73:8b:
80:74:a6:d3:0b:1d:f1:45:50:ed:b6:2e:fe:64:4c:8f:a9:e1:
1f:8b:64:5b:f0:6e:d6:3d:5a:15:e1:67:1b:6d:eb:54:70:48:
6c:0f:68:2f:a7:73:2b:89:d6:81:9a:98:0c:24:fd:91:3c:b9:
38:88:57:77:d6:06:2b:6a:b5:35:c8:31:34:d8:71:79:7f:9c:
25:2b:70:5b:48:85:6f:48:35:8e:38:71:20:c6:77:b4:5e:15:
69:9c:f5:7f:3d:11:e5:66:b2:75:c9:9f:cc:27:18:3a:2a:04:
3d:19:36:ef:25:7a:8c:72:b6:a7:f2:6b:bf:4b:f1:04:3e:84:
9f:f2:29:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:05 2024 by rpki-client on console-ams.rpki-client.org