Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OdU2agq5C1TbhYsWbUqsZWle_UU.roa
File: OdU2agq5C1TbhYsWbUqsZWle_UU.roa (raw, json)
Hash identifier: BObMgk9+cHOIZ6WPc86IZwq85ehVJw7Njk1i8PZL15A=
Subject key identifier: 39:D5:36:6A:0A:B9:0B:54:DB:85:8B:16:6D:4A:AC:65:69:5E:FD:45
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018A6E44C1C19A1E6FB4C3A38D4BBDBE2E45
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OdU2agq5C1TbhYsWbUqsZWle_UU.roa
Signing time: Thu 07 Sep 2023 06:11:54 +0000
ROA not before: Thu 07 Sep 2023 06:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:44:c1:c1:9a:1e:6f:b4:c3:a3:8d:4b:bd:be:2e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 7 06:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39d5366a0ab90b54db858b166d4aac65695efd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ae:9c:4a:d5:9a:e6:47:de:52:e1:4e:41:af:
32:bb:ac:46:64:7f:d9:c7:8c:23:c0:0c:72:55:e8:
d4:8f:0e:13:35:8c:37:ed:4e:af:91:d7:8e:62:a3:
03:d6:7f:1d:e4:d5:10:ee:59:80:18:18:1a:99:29:
76:8e:47:e4:84:97:b1:9c:0e:e4:4c:e3:3e:a7:46:
24:6a:a4:12:31:66:e4:87:3b:79:9b:f1:a9:c2:c0:
18:5d:c0:ea:99:e3:89:2e:e7:a6:8f:a8:91:5b:cb:
33:7f:0c:e5:1d:6d:f9:9c:ce:37:c7:cc:69:78:76:
2f:2a:89:da:6b:fb:e2:c9:23:72:a9:12:a4:ec:9e:
b4:8a:b6:e5:fd:30:37:8b:9e:ef:f5:1b:84:3d:72:
c5:75:3d:41:5c:23:07:c1:89:b1:6a:12:3d:8e:47:
12:1b:3f:4d:bd:85:a7:21:c7:a7:a8:e2:1c:83:a6:
83:2e:29:fe:ca:b7:f6:3d:8b:72:4f:d5:85:7f:e9:
8c:56:1c:c6:52:6e:ed:1c:19:09:ac:af:ed:d4:b3:
cc:8e:2c:49:ed:7d:af:2c:65:d2:8e:f4:33:1f:76:
59:e8:b8:e6:29:c1:37:45:11:9a:ad:be:5f:49:61:
69:b0:8d:46:63:9d:6b:12:0d:af:49:4e:ea:f8:bd:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D5:36:6A:0A:B9:0B:54:DB:85:8B:16:6D:4A:AC:65:69:5E:FD:45
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/OdU2agq5C1TbhYsWbUqsZWle_UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
06:06:12:ee:a4:70:1f:ac:4b:b2:7a:0b:30:62:ff:d2:d7:d4:
e2:46:98:ee:27:45:ab:30:8e:f9:be:c2:07:4c:77:72:7e:47:
4e:d7:c6:7e:6f:88:86:cb:ae:bc:de:2f:a3:26:94:16:60:b7:
15:33:6c:17:62:76:5e:c3:b4:2a:a2:c9:87:69:03:54:31:52:
c4:65:15:3e:69:31:be:d2:f6:fe:e5:05:e8:68:17:3c:9c:39:
bc:35:a3:9d:cc:66:cc:17:0c:1e:a0:a1:e2:31:29:fd:2e:8b:
7d:00:8a:db:bb:a0:bc:47:3d:04:a9:21:9d:d7:50:1f:57:8e:
ba:8a:e6:e7:2d:96:90:88:af:58:61:2b:23:77:68:c9:23:c3:
9e:ac:f0:8a:80:d1:cf:e8:77:d3:ed:4e:40:1a:e9:3b:f4:36:
68:1c:d1:d9:ee:d9:14:e6:08:88:54:a6:08:23:7a:f7:d6:83:
3d:9a:62:f4:6a:c7:6d:b3:a6:21:2b:f7:4c:d9:40:59:3a:22:
a6:c2:a0:67:60:02:68:16:10:c8:51:ff:cb:66:7a:e5:30:82:
5b:6b:a2:26:ae:d2:dc:20:93:12:10:9c:97:94:fa:fa:ae:85:
38:0b:6f:c7:4e:a3:78:07:89:7a:a5:4b:dd:84:d8:15:f9:7e:
0a:b4:f2:1a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYpuRMHBmh5vtMOjjUu9vi5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwOTA3MDYxMTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWQ1MzY2YTBhYjkwYjU0ZGI4NThiMTY2ZDRhYWM2NTY5NWVmZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq6cStWa5kfeUuFOQa8yu6xGZH/Z
x4wjwAxyVejUjw4TNYw37U6vkdeOYqMD1n8d5NUQ7lmAGBgamSl2jkfkhJexnA7k
TOM+p0YkaqQSMWbkhzt5m/GpwsAYXcDqmeOJLuemj6iRW8szfwzlHW35nM43x8xp
eHYvKonaa/viySNyqRKk7J60irbl/TA3i57v9RuEPXLFdT1BXCMHwYmxahI9jkcS
Gz9NvYWnIcenqOIcg6aDLin+yrf2PYtyT9WFf+mMVhzGUm7tHBkJrK/t1LPMjixJ
7X2vLGXSjvQzH3ZZ6LjmKcE3RRGarb5fSWFpsI1GY51rEg2vSU7q+L1JnwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDnVNmoKuQtU24WLFm1KrGVpXv1FMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvT2RVMmFncTVDMVRiaFlzV2JVcXNaV2xlX1VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALiVgAwQA
LiViMAwDBAAuJXEDBAAuJXIwDQYJKoZIhvcNAQELBQADggEBAAYGEu6kcB+sS7J6
CzBi/9LX1OJGmO4nRaswjvm+wgdMd3J+R07Xxn5viIbLrrzeL6MmlBZgtxUzbBdi
dl7DtCqiyYdpA1QxUsRlFT5pMb7S9v7lBehoFzycObw1o53MZswXDB6goeIxKf0u
i30Aitu7oLxHPQSpIZ3XUB9XjrqK5uctlpCIr1hhKyN3aMkjw56s8IqA0c/od9Pt
TkAa6Tv0Nmgc0dnu2RTmCIhUpggjevfWgz2aYvRqx22zpiEr90zZQFk6IqbCoGdg
AmgWEMhR/8tmeuUwgltroiau0twgkxIQnJeU+vquhTgLb8dOo3gHiXqlS92E2BX5
fgq08ho=
-----END CERTIFICATE-----
Generated at Tue Sep 12 12:14:13 2023 by rpki-client on console-ams.rpki-client.org