Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/PC9-Pl4XAd5q5pkDYMuXrCuai-Q.roa
File: PC9-Pl4XAd5q5pkDYMuXrCuai-Q.roa (raw, json)
Hash identifier: Uzi/3ZF1kHncYW4nQUIRZtdnWGvYLavBp7qLilImDus=
Subject key identifier: 3C:2F:7E:3E:5E:17:01:DE:6A:E6:99:03:60:CB:97:AC:2B:9A:8B:E4
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018B49BEFFEF38985AB3D097AF1DEEB6EF47
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/PC9-Pl4XAd5q5pkDYMuXrCuai-Q.roa
Signing time: Thu 19 Oct 2023 21:02:16 +0000
ROA not before: Thu 19 Oct 2023 21:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.120.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:49:be:ff:ef:38:98:5a:b3:d0:97:af:1d:ee:b6:ef:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 19 21:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c2f7e3e5e1701de6ae6990360cb97ac2b9a8be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:69:33:36:05:15:b4:19:b7:03:72:02:23:
bb:b6:58:94:2f:9f:c7:15:14:6f:a4:9d:b2:e1:aa:
a2:47:38:bc:bf:d9:ae:29:78:1f:20:d4:5a:a3:09:
11:24:a6:74:e4:07:58:5e:c1:27:88:d9:39:93:f4:
45:d0:68:ba:9f:e0:78:6f:45:c6:ef:6b:86:70:a6:
2b:09:18:0f:57:c4:d5:3a:fb:fb:7d:88:19:97:e1:
73:94:d8:48:b0:f8:53:c0:ec:cf:c9:a8:7c:fb:bf:
9c:14:67:55:60:cd:c6:5b:36:cc:9a:a8:63:2e:82:
a2:20:79:cc:57:1c:12:60:14:5d:fa:c0:7b:35:9d:
84:c7:2a:fd:3e:d7:4a:8a:35:a0:34:79:a7:32:b0:
33:9b:8a:24:96:b9:99:ef:2c:69:3e:64:1c:02:66:
63:70:80:25:4a:a5:76:45:af:16:5b:7f:8f:b8:f9:
3e:74:ed:2a:4e:c0:42:23:7a:12:4f:f5:be:d7:7a:
35:ec:b6:2c:82:d3:81:c1:11:4c:da:f7:aa:28:d3:
1b:3f:43:19:af:8a:32:13:6a:d5:89:a6:97:02:bf:
b7:6e:9a:15:d0:90:4c:b2:da:c7:19:bd:0d:6d:2e:
12:b9:a1:bd:1d:24:b0:d8:40:77:5b:d9:d2:a2:ef:
71:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2F:7E:3E:5E:17:01:DE:6A:E6:99:03:60:CB:97:AC:2B:9A:8B:E4
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/PC9-Pl4XAd5q5pkDYMuXrCuai-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.120.0/24
46.37.123.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7a:36:6e:9d:87:b0:eb:6d:37:aa:49:8b:1e:c3:dd:45:d7:
1d:8b:f2:04:65:cd:70:28:0d:b1:22:19:97:0c:62:2a:9a:fe:
57:63:8e:36:9a:26:3d:6d:72:2b:5b:d0:53:94:7c:a9:61:98:
94:3e:da:1a:ad:88:bf:44:00:4a:a3:73:d2:55:90:e8:0b:ec:
0b:57:89:33:96:ab:24:2d:78:a2:0b:60:f8:a9:52:85:35:b7:
38:cf:77:90:90:7a:ad:2a:7c:83:61:3a:bc:07:3e:c6:14:46:
ff:ef:ae:38:09:b9:c5:9e:81:9c:91:78:a3:a4:90:d9:0a:7f:
07:f7:ae:5c:3c:f6:50:0f:e9:89:65:d8:3a:6e:c3:c1:87:a8:
68:c9:c8:e3:0f:4e:75:03:45:05:34:9d:fe:67:b6:02:c7:1c:
93:bb:50:e5:78:69:ae:75:f0:20:da:19:3b:ca:a8:30:90:7f:
a1:fd:28:24:4e:52:bb:8a:60:20:07:c1:22:96:1d:03:1b:13:
4d:f5:13:6b:75:4f:4a:fa:54:d0:10:5c:dc:4f:77:4b:09:7e:
4a:81:d2:c8:32:23:11:d1:92:2e:48:35:b6:4c:1d:7f:b9:15:
8b:f4:6e:1c:e5:03:73:de:c8:95:53:b4:cd:ee:63:cc:b6:8b:
37:00:b2:32
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 24 16:27:40 2023 by rpki-client on console-ams.rpki-client.org