Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/P5LEslOWOFS_TEUDdJu5_bWioHU.roa
File: P5LEslOWOFS_TEUDdJu5_bWioHU.roa (raw, json)
Hash identifier: 9vMYZslUktrljripeCiTFEV9AQsgxJGANEzqRzAlqFQ=
Subject key identifier: 3F:92:C4:B2:53:96:38:54:BF:4C:45:03:74:9B:B9:FD:B5:A2:A0:75
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018E0F9155F8941AFCAD7DAC79EDC1CEF2F9
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/P5LEslOWOFS_TEUDdJu5_bWioHU.roa
Signing time: Tue 05 Mar 2024 17:02:46 +0000
ROA not before: Tue 05 Mar 2024 17:02:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 14:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:91:55:f8:94:1a:fc:ad:7d:ac:79:ed:c1:ce:f2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Mar 5 17:02:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f92c4b253963854bf4c4503749bb9fdb5a2a075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:64:e5:91:b1:e9:ba:92:d0:01:d2:2e:a9:
92:b6:e1:f3:5e:d8:0b:c4:80:92:d2:41:b7:08:43:
54:ec:48:5f:85:ef:88:4f:6a:d8:63:02:de:63:60:
9d:6a:66:a6:1c:76:61:d1:bb:bc:ae:9e:04:4a:b8:
c3:6a:2c:35:81:87:b1:fa:e6:8a:a6:a3:d8:c9:5c:
46:0e:2b:64:fc:9e:4e:08:b4:7a:43:96:d8:3f:10:
1e:0d:78:b0:6f:ce:20:38:23:7a:88:46:40:fe:20:
1c:70:23:62:d5:5a:ce:d7:94:b2:38:f4:19:f8:8e:
7b:b5:9e:ca:95:6a:d8:6b:a6:9f:57:d9:35:38:f7:
55:0f:33:49:49:42:14:a7:2e:7f:94:4f:19:e5:96:
d7:f1:da:66:ab:60:ca:9d:61:d0:65:6f:0c:8a:e0:
fb:39:da:89:ea:22:e6:88:a5:80:7a:c9:78:53:ef:
b9:34:cf:32:e1:83:af:63:97:24:40:0a:4a:08:80:
7d:2d:56:5d:19:54:ce:f3:63:2d:00:40:b3:04:ec:
c1:31:cc:14:7b:d9:fb:70:3d:d4:37:87:24:32:bb:
42:c6:47:6b:4d:f4:15:3c:6b:d6:85:fa:4f:f8:46:
d9:a9:28:29:99:50:3e:49:02:70:66:73:61:e6:7a:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:92:C4:B2:53:96:38:54:BF:4C:45:03:74:9B:B9:FD:B5:A2:A0:75
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/P5LEslOWOFS_TEUDdJu5_bWioHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4c:87:d8:07:fd:b0:64:54:b5:d5:19:ef:39:38:ba:0e:4e:
eb:d9:6c:8a:ba:c3:14:88:39:79:b0:cc:d8:89:91:3f:36:5a:
17:06:b3:93:d6:c6:2a:ca:ed:3a:2c:6b:b1:01:a7:e2:17:1e:
60:0e:a6:d0:d2:22:5e:cc:b1:0b:2b:16:fb:81:12:0e:f4:99:
ca:95:2e:c0:11:96:bb:80:ec:0d:93:b3:d3:a4:a3:f3:bd:01:
43:fd:5c:b4:04:9a:19:cd:91:03:64:fb:3a:7a:50:6b:18:7d:
82:ea:97:3c:7a:0f:a8:4f:6b:c4:13:2c:1a:6e:fe:ef:b8:86:
ae:28:a2:60:65:27:40:3a:ab:76:91:7d:4b:47:94:d8:28:c2:
45:00:25:33:79:b3:f6:94:63:e8:1b:e9:20:57:0f:57:ea:e7:
92:a5:10:06:19:84:9c:08:f6:e3:c3:13:4e:b7:e0:c5:73:8a:
55:86:9c:23:61:96:d5:4b:cd:90:b3:49:89:9e:64:d7:e3:31:
6c:39:28:22:85:cd:d7:77:f5:ae:62:75:d4:db:3a:b7:c5:35:
01:dd:25:1a:6a:88:9e:08:dc:9c:6a:96:1d:85:92:82:17:d5:
ea:16:fd:42:39:d4:72:5b:76:7a:44:e6:a2:26:46:63:a8:45:
7c:6d:e4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 19:04:46 2024 by rpki-client on console-ams.rpki-client.org