Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Sdpq8TMhwsODOXb-L5JkQlwpKJ8.roa
File: Sdpq8TMhwsODOXb-L5JkQlwpKJ8.roa (raw, json)
Hash identifier: vkfz9dO+6ecfRJ+eLJzK1nl3dWXQLcbhRR8cvjcC1tA=
Subject key identifier: 49:DA:6A:F1:33:21:C2:C3:83:39:76:FE:2F:92:64:42:5C:29:28:9F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0188B6DA0CF371B1C94A6DC5188ADD78D873
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Sdpq8TMhwsODOXb-L5JkQlwpKJ8.roa
Signing time: Tue 13 Jun 2023 22:22:03 +0000
ROA not before: Tue 13 Jun 2023 22:22:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 12:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:da:0c:f3:71:b1:c9:4a:6d:c5:18:8a:dd:78:d8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 13 22:22:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49da6af13321c2c3833976fe2f9264425c29289f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:fc:80:ac:9b:60:57:c7:ee:91:04:29:62:
f5:ee:09:7e:c6:3c:b9:c3:16:70:23:b0:7c:1b:77:
4a:61:80:40:62:a7:84:1c:91:69:ed:36:12:d2:0d:
0a:93:ce:04:e3:66:6d:aa:41:0e:1d:8d:5d:e4:b1:
4b:3b:08:91:00:bf:76:a0:6b:ef:6d:f1:2a:b3:76:
70:9d:03:62:9d:30:0f:ed:ef:29:7c:21:c0:76:22:
fb:8f:de:fb:48:cc:0d:b4:2e:74:50:ac:75:c7:54:
69:c9:a0:15:72:58:9f:d1:9e:3d:5a:37:7d:3f:e4:
3f:ab:b4:12:03:2b:73:9a:6b:91:cd:d9:2d:7a:41:
4b:8d:e6:a7:ee:61:8d:92:e9:06:59:6c:62:ea:2f:
5f:63:40:be:f3:b4:5e:d9:25:b0:07:a5:47:ce:0a:
39:26:01:37:33:4a:5f:0b:12:ea:21:e1:f0:f2:7e:
1b:a1:d3:9b:94:dc:37:d4:bd:b9:fd:d1:00:e8:85:
38:08:2b:c2:eb:f6:a6:87:5d:d7:c2:6a:28:97:2c:
23:7c:9f:26:6f:cf:ce:6f:a3:bf:18:8c:72:d2:6f:
60:6e:91:3a:cc:ad:77:9d:b2:73:26:6d:f3:f9:10:
6e:87:1a:6e:64:3d:d3:88:fd:2d:3d:96:51:c1:c3:
5e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DA:6A:F1:33:21:C2:C3:83:39:76:FE:2F:92:64:42:5C:29:28:9F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Sdpq8TMhwsODOXb-L5JkQlwpKJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.115.255
Signature Algorithm: sha256WithRSAEncryption
84:89:52:8a:2b:3b:b6:92:83:7b:08:77:02:e1:b1:45:59:1e:
83:9d:97:7e:34:3e:45:0b:49:30:99:fe:b7:ac:aa:c2:33:bf:
6c:a6:bf:45:25:63:19:c1:ae:d5:45:cb:3a:87:db:8b:1c:7d:
87:6c:14:13:3b:e7:9b:5d:aa:d0:c7:92:9b:78:fe:58:1a:ec:
a7:51:2a:68:d3:fe:da:32:fe:8a:7a:14:a0:01:79:fe:b4:59:
0b:8d:a6:dd:ff:64:4c:7c:eb:9d:27:7d:0e:34:c2:f4:36:2e:
15:b3:a4:33:2c:63:40:e4:83:c3:37:72:a4:bf:e6:f4:e3:30:
79:60:59:07:90:59:d4:35:0a:ac:b7:32:41:00:6c:d5:b7:63:
f0:a5:78:b8:60:f9:02:fc:52:34:8a:8e:03:ce:f6:a0:3b:8a:
bd:0f:5c:41:54:87:82:ab:63:4e:c7:f3:fd:b3:ca:79:4b:06:
29:98:e8:e6:36:59:da:01:68:2d:46:95:30:3b:f1:4c:e8:34:
2d:64:03:fe:2c:67:9b:c1:4e:52:ee:2b:05:d1:56:43:27:d6:
24:6e:2a:9f:70:1f:3b:e8:fd:83:bf:80:23:99:fd:9a:aa:14:
74:dd:e5:2d:f0:a9:d3:1d:bd:ec:5f:ec:6f:7e:3b:60:19:78:
ae:9b:9b:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:07 2024 by rpki-client on console-ams.rpki-client.org