Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Ob5gg5Rt8cECuDttBCe0C_HFElE.roa
File: Ob5gg5Rt8cECuDttBCe0C_HFElE.roa (raw, json)
Hash identifier: 4s1+T8b6Iccs1LvBJ+jIkwUFKDrOiPgtc5aNW7y30mw=
Subject key identifier: 39:BE:60:83:94:6D:F1:C1:02:B8:3B:6D:04:27:B4:0B:F1:C5:12:51
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0185D4300F7989437A0DC4160B8BD6739A2E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Ob5gg5Rt8cECuDttBCe0C_HFElE.roa
Signing time: Sat 21 Jan 2023 11:56:37 +0000
ROA not before: Sat 21 Jan 2023 11:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d4:30:0f:79:89:43:7a:0d:c4:16:0b:8b:d6:73:9a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 21 11:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39be6083946df1c102b83b6d0427b40bf1c51251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:d7:ae:98:14:d4:a1:b1:6a:44:95:20:a8:
92:0d:9f:7d:0e:10:14:e4:09:05:43:77:45:27:4e:
e3:f1:76:08:df:a9:b8:1c:6a:d1:a8:0d:fc:ca:ca:
c7:6f:c4:49:59:70:b9:c7:1f:e3:b3:6b:ed:4c:2d:
49:eb:6d:37:de:2e:8e:0c:8f:a6:59:3c:2f:5c:54:
4c:d6:b2:d3:b7:7c:24:5d:1a:ff:0c:d8:31:27:31:
86:f9:f8:71:29:41:9d:6c:ad:df:d5:f9:47:0c:c6:
65:49:b5:fb:c8:8b:8b:70:4f:61:a6:a0:f3:e4:25:
44:08:9e:d6:f1:ae:c9:6b:cb:5c:c5:5e:83:8d:8b:
e8:84:2b:47:7f:52:03:0a:33:fe:57:9e:fb:26:90:
fb:80:de:15:be:9c:03:17:a5:db:d8:d6:96:a6:78:
b2:a5:4e:10:92:83:af:db:d1:d3:c9:db:b1:d1:a7:
e6:85:2b:e7:ef:aa:4b:24:ac:03:da:ce:83:b9:7f:
7a:36:7b:5b:44:e8:b3:3b:17:a9:3e:a9:83:6e:21:
0d:f4:e0:f1:ba:38:ce:22:a8:8e:7a:65:88:fe:a6:
40:0e:d4:61:3f:e2:7a:1e:62:2d:be:fa:5d:dc:6b:
f9:7c:e9:fd:cc:fd:bf:c5:8a:8b:f6:e1:35:48:33:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BE:60:83:94:6D:F1:C1:02:B8:3B:6D:04:27:B4:0B:F1:C5:12:51
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Ob5gg5Rt8cECuDttBCe0C_HFElE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ea:d1:64:c8:6b:02:fe:52:94:74:22:a3:79:01:6a:4d:89:
0d:a9:f8:65:91:f2:5f:6a:9c:dc:3e:cc:e2:5a:ea:fd:17:e7:
15:a5:da:f8:35:e7:c5:a6:c4:28:02:91:43:e1:ae:67:47:92:
3b:6a:8e:04:4c:58:69:1f:f9:81:10:a4:69:3e:af:49:89:39:
dc:65:bd:8d:ff:e3:cc:1d:2a:2d:9c:ee:51:32:bc:1a:73:cd:
7b:62:f5:3e:b0:bb:5c:a7:9b:74:ac:c8:cc:3b:87:b2:e9:60:
e2:c6:32:52:fb:17:ed:c1:97:7f:b4:3d:9a:96:d7:51:a8:da:
b6:53:6f:21:2f:d4:5a:36:53:3e:e5:ae:ef:bd:42:d9:a1:7a:
c8:b1:2a:f2:3a:c5:ff:43:36:d7:df:d3:9e:4d:fa:38:5b:9c:
1d:0b:f9:9a:25:a0:e6:e6:a1:92:8c:4d:3b:24:7a:e9:2b:48:
75:74:65:7c:cd:c3:d6:2c:36:3a:f6:ee:32:c6:43:8c:50:44:
68:14:04:77:a9:00:17:6a:bf:ec:4d:d8:ac:92:ea:f1:ec:5f:
6a:0b:72:b4:5d:1e:d0:25:9a:d6:04:93:86:6e:69:b1:30:a0:
b7:a0:f2:90:08:0d:44:5d:8f:a4:01:11:db:db:fd:b3:a1:7f:
3f:89:b5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org