Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OY6KGUs5l_xDhAxvXJIdVLmSrKU.roa
File: OY6KGUs5l_xDhAxvXJIdVLmSrKU.roa (raw, json)
Hash identifier: /87vZiGuE5dNRn5GUDqDVtv4aqJUmKPzI3d/4VPmIb0=
Subject key identifier: 39:8E:8A:19:4B:39:97:FC:43:84:0C:6F:5C:92:1D:54:B9:92:AC:A5
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AF66057FD113E442D999937048DFA142D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OY6KGUs5l_xDhAxvXJIdVLmSrKU.roa
Signing time: Tue 03 Oct 2023 16:30:23 +0000
ROA not before: Tue 03 Oct 2023 16:30:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42055
IP address blocks: 46.37.120.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:60:57:fd:11:3e:44:2d:99:99:37:04:8d:fa:14:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 3 16:30:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=398e8a194b3997fc43840c6f5c921d54b992aca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:c4:a6:ab:93:0c:6a:2c:3b:b1:d0:be:78:
27:3f:b5:a2:db:c4:9c:f9:cf:63:a8:71:5b:f3:ac:
ac:dc:6a:86:08:13:a4:4a:e0:40:dc:d6:54:07:22:
25:c0:37:99:8f:ea:4c:90:a9:46:78:e5:e3:54:ff:
79:03:e9:13:ad:bc:f0:b3:88:1e:75:45:b9:ed:3b:
8f:88:d6:5c:75:67:7b:1f:14:39:c4:a8:4c:9e:27:
c9:ae:5c:26:66:8f:db:e2:22:f4:33:ba:4d:7d:c4:
59:e2:56:f1:4a:c2:af:d2:45:57:5d:ac:73:00:5a:
31:f2:7e:b7:9e:75:42:ec:43:18:ac:43:1d:20:09:
7b:51:87:a2:e3:ad:03:c5:70:7b:39:57:5c:c5:32:
38:db:59:94:43:b5:c7:d0:4c:92:23:71:25:5d:41:
0e:c8:9e:70:9b:8a:24:0d:a6:9e:98:e5:7d:dc:95:
9e:dd:93:67:b2:3f:78:6e:78:84:f9:6c:45:b3:05:
82:26:99:e8:ac:37:df:a4:ec:75:5a:0d:71:ac:c3:
0d:06:f7:1d:e2:28:7e:3d:ba:88:a6:7b:c1:a3:8b:
d2:97:95:91:b2:92:03:83:65:b9:ca:52:f6:3b:dc:
96:d8:7f:fa:ef:22:70:ae:d6:fb:00:97:df:b4:30:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8E:8A:19:4B:39:97:FC:43:84:0C:6F:5C:92:1D:54:B9:92:AC:A5
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OY6KGUs5l_xDhAxvXJIdVLmSrKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.120.0/24
46.37.123.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2c:9b:e1:e9:9a:f0:d8:90:15:df:d6:ab:c5:91:d3:b5:45:
0f:7d:58:86:04:22:91:4b:37:b8:8e:b3:89:08:0a:19:5f:a3:
51:29:9c:51:3e:9d:ce:0b:96:f8:1a:56:1c:46:b1:3c:e3:f9:
a7:a1:d6:08:aa:09:b1:c3:d9:da:63:93:1a:06:5c:15:7d:36:
d1:dd:7b:74:a7:aa:1f:28:cc:ee:89:70:dc:b7:22:1a:4f:81:
3f:95:79:50:e9:e2:b9:48:ef:06:05:dd:63:fc:e1:af:da:9b:
ba:6e:10:2f:d0:71:af:dc:45:a5:92:b4:4f:54:28:b6:52:1f:
2b:d3:fc:e8:1c:28:d0:dc:48:4d:88:b3:11:ca:18:20:74:f4:
78:fd:13:49:af:2e:4a:84:97:41:e0:bc:fd:3f:9e:7b:0d:50:
0b:9b:c0:42:db:e9:ef:42:27:bc:12:74:2b:52:6e:93:d2:c7:
27:38:32:fb:a4:2c:26:a3:8a:a9:d2:6b:cf:29:42:f6:d6:81:
49:33:ce:95:d0:dc:bf:4a:bf:5d:16:23:1a:79:82:28:a1:3b:
1d:5d:32:1c:1c:9d:0b:ae:9d:02:57:34:8f:28:1d:48:8b:28:
a5:0a:7b:4e:cc:d1:e2:8d:01:ad:7c:4b:f3:0f:67:39:5a:8a:
ec:6e:74:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:07 2024 by rpki-client on console-ams.rpki-client.org