Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Q_dcu7TYNo1QVxNy-xI087HhgVI.roa
File: Q_dcu7TYNo1QVxNy-xI087HhgVI.roa (raw, json)
Hash identifier: 46tRFkRuYE9UEnA96AEK8lqU+oor598Z41K2VsR8alg=
Subject key identifier: 43:F7:5C:BB:B4:D8:36:8D:50:57:13:72:FB:12:34:F3:B1:E1:81:52
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0ADCE8E220A33BD4F4CE67D4019817
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Q_dcu7TYNo1QVxNy-xI087HhgVI.roa
Signing time: Sun 01 Jan 2023 11:15:06 +0000
ROA not before: Sun 01 Jan 2023 11:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 46.37.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:dc:e8:e2:20:a3:3b:d4:f4:ce:67:d4:01:98:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43f75cbbb4d8368d50571372fb1234f3b1e18152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:85:b5:c8:75:5e:e1:42:11:25:c2:9d:df:
a4:41:6f:0d:99:40:e5:05:36:50:d2:8b:33:7c:5e:
98:cc:49:17:53:c6:22:29:e1:ee:06:bf:7c:ba:33:
e0:3e:2d:d6:7c:f5:6d:d1:20:35:e0:7f:07:5b:ab:
8a:9d:f2:59:c7:82:a4:4d:9e:7f:30:8c:16:78:03:
05:21:1d:48:1f:a7:90:9b:d0:d3:8f:22:5c:69:f1:
2a:7e:a0:69:a0:26:99:68:89:c8:9b:aa:09:26:b6:
e3:44:67:47:d6:2f:99:3a:fc:19:26:4c:d1:d1:bd:
dd:87:9e:51:5e:59:13:c4:0b:bc:98:43:4f:d4:bf:
bc:b5:2a:b6:dd:e3:a6:85:5a:50:35:e0:f9:27:47:
a6:4c:f2:e4:15:e4:ff:50:bd:c2:ff:c5:bc:76:28:
68:05:ae:5f:dc:27:76:91:1c:53:29:82:96:45:88:
bf:28:58:1e:31:d2:4b:ca:84:2f:40:2f:90:86:a0:
d5:e8:4f:e0:9b:15:d8:56:b5:e7:85:91:92:cb:9f:
1c:40:8e:a9:19:20:45:af:3e:bb:c4:9d:c0:99:97:
f0:bb:02:9d:2e:10:ed:2a:86:5a:50:1f:5e:d1:c0:
f5:c2:64:0b:dc:5c:a2:73:5b:27:f2:0d:49:46:4f:
9f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:5C:BB:B4:D8:36:8D:50:57:13:72:FB:12:34:F3:B1:E1:81:52
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Q_dcu7TYNo1QVxNy-xI087HhgVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:34:6d:02:6b:11:ae:4c:31:7f:eb:12:02:07:83:ac:b1:68:
84:9a:81:22:88:2b:f7:e4:25:33:78:32:7a:ca:40:c3:15:87:
e5:10:ea:b8:06:73:7e:73:f8:0d:96:a8:77:64:bf:75:14:24:
ac:72:76:04:cf:2c:fe:94:5c:b1:c5:46:09:64:6a:59:c5:65:
99:35:b7:00:5b:b6:fb:5e:1b:2c:11:a9:7c:bb:58:d8:f7:bd:
41:7f:63:43:50:81:55:81:4d:a0:d7:ba:15:ed:b1:0a:bb:ff:
7c:99:49:84:80:35:74:7b:0e:7c:c0:60:12:a7:ff:b6:c8:0e:
58:5f:b8:9b:c3:6d:9c:f8:80:00:e6:a7:ae:85:b0:fe:83:45:
bb:17:b0:b0:09:30:c4:09:6a:ba:2e:a2:c1:32:06:db:5e:17:
42:32:51:1a:4f:d9:e5:5d:f8:5b:54:de:70:3d:7b:d5:9e:26:
7b:67:0a:88:ba:4d:cc:d4:3a:90:20:b2:f9:cc:f6:74:e4:2c:
8a:a5:82:e0:49:5c:52:f1:89:26:15:bf:dc:bb:9f:a0:e9:fa:
48:2f:c6:79:27:4c:04:dd:3e:08:16:b9:d1:f0:e1:61:fa:de:
ff:6e:3b:82:b1:6d:2b:f0:84:23:95:2f:00:2b:02:f1:bc:0f:
c4:d7:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:44 2023 by rpki-client on console-fra.rpki-client.org