Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/QXOBssrab-3eieoscvIW5s9BJFI.roa
File: QXOBssrab-3eieoscvIW5s9BJFI.roa (raw, json)
Hash identifier: CUo52/yEfFg4lTQ1Ncm5OhgBpeJZtij8po/Mk1U+OhY=
Subject key identifier: 41:73:81:B2:CA:DA:6F:ED:DE:89:EA:2C:72:F2:16:E6:CF:41:24:52
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018C5B2600686CDC8EDFE27CDEBF4176E00F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/QXOBssrab-3eieoscvIW5s9BJFI.roa
Signing time: Mon 11 Dec 2023 23:11:06 +0000
ROA not before: Mon 11 Dec 2023 23:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3223
IP address blocks: 46.37.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:26:00:68:6c:dc:8e:df:e2:7c:de:bf:41:76:e0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 11 23:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=417381b2cada6fedde89ea2c72f216e6cf412452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:bc:a3:fb:9e:61:10:c3:5c:cb:8d:26:49:
cf:f6:f2:cc:4e:b5:57:f8:3e:3a:a8:89:b8:3c:32:
55:0d:d4:29:dc:c5:f3:18:d7:e3:c4:92:ff:6c:43:
07:27:d7:f5:af:0b:8d:9f:bd:69:63:88:48:a2:07:
af:85:a3:75:92:eb:4b:98:e1:c1:88:40:13:e9:e5:
db:66:6b:f8:9e:be:c9:74:63:4f:1b:1e:c0:04:92:
fa:d0:51:ad:49:a7:ae:f5:21:eb:33:c0:6d:47:a9:
da:11:fb:f7:04:fa:99:f9:e4:70:54:5b:2a:85:9f:
bb:55:63:e5:33:c9:47:19:16:43:64:a5:d6:63:f8:
a5:f3:e0:30:a0:d7:7b:da:1f:ba:be:1f:34:25:6f:
2e:d4:a1:de:ae:8e:d1:c3:cb:25:a1:53:18:ad:c3:
f3:2c:6f:5b:fc:1e:fe:24:2f:75:a9:4a:ae:a0:a5:
c2:27:d7:2a:67:86:50:a7:a3:a8:cf:38:6c:20:16:
a6:8a:1e:8f:4e:08:06:31:2d:09:a8:c0:79:c3:25:
f2:4e:13:6c:9a:54:47:a2:fc:1c:aa:a5:cc:3a:04:
ce:53:18:02:bd:a7:45:66:e8:ff:d2:90:e8:77:a1:
4f:32:9a:5d:7b:ec:19:bc:d5:61:7e:23:2d:03:2c:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:73:81:B2:CA:DA:6F:ED:DE:89:EA:2C:72:F2:16:E6:CF:41:24:52
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/QXOBssrab-3eieoscvIW5s9BJFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.108.0/24
Signature Algorithm: sha256WithRSAEncryption
61:07:76:92:8e:7e:78:65:1a:20:86:ec:6d:f8:71:45:a7:06:
67:e6:1e:2e:5d:f4:14:a2:c0:87:db:ac:1b:6e:8e:76:a3:51:
d1:55:94:6a:82:0b:3f:f5:9f:34:27:84:01:1d:e5:36:87:e4:
e0:f3:7a:4f:32:04:5d:41:6e:f0:75:19:54:8e:9a:5b:08:37:
75:97:66:46:5e:9d:be:2d:12:03:30:ae:be:28:78:65:b0:e9:
c8:b5:b7:7a:a9:1a:a7:3e:b9:21:2a:81:77:d6:9d:c2:e3:1d:
0e:12:2c:ce:43:5f:ee:ed:4c:66:d4:1a:f6:2a:7c:41:77:c7:
b2:8d:bc:dd:c4:33:74:b1:d8:19:b5:11:22:86:71:03:bc:ba:
cd:54:75:b2:3f:b7:37:dd:c7:23:8d:ea:84:09:01:7d:62:21:
db:bb:cd:6d:bb:33:ef:fa:0d:5f:fc:80:9b:ea:ec:57:1c:20:
9c:8c:83:ec:f0:1e:08:2d:d4:ae:ea:be:df:4a:2e:83:89:52:
59:83:fa:18:be:cf:81:52:c5:90:63:ea:83:68:d5:66:60:7d:
9c:e5:c3:d3:34:ce:8d:04:0b:20:63:14:34:79:5f:b1:1e:6c:
95:25:73:00:39:28:a1:d3:61:2b:5a:37:db:b7:35:8f:38:95:
37:ce:95:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:05 2024 by rpki-client on console-ams.rpki-client.org