Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/SixHl3wB5UmRSLBabGywl1e4Pck.roa
File: SixHl3wB5UmRSLBabGywl1e4Pck.roa (raw, json)
Hash identifier: e7ZXftPwfrvqpUljrJb5WROp9XGHjMB7FLAytWFOGKs=
Subject key identifier: 4A:2C:47:97:7C:01:E5:49:91:48:B0:5A:6C:6C:B0:97:57:B8:3D:C9
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018F2D8B1CE3CDC92CE2ADD0D5A8BA9A8F11
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/SixHl3wB5UmRSLBabGywl1e4Pck.roa
Signing time: Tue 30 Apr 2024 05:47:22 +0000
ROA not before: Tue 30 Apr 2024 05:47:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.110.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 14:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:8b:1c:e3:cd:c9:2c:e2:ad:d0:d5:a8:ba:9a:8f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 30 05:47:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a2c47977c01e5499148b05a6c6cb09757b83dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:5e:bf:43:68:78:f2:77:3a:a0:d5:31:3c:
84:85:58:ca:bc:b7:b0:33:34:b1:21:b2:eb:bb:86:
43:d7:f8:0b:fd:8e:b3:f8:90:0f:3c:7b:6b:04:d6:
80:4c:fb:fd:0a:a6:83:aa:39:d3:dd:4e:1e:47:03:
cb:49:35:b8:ca:e8:ef:b4:3a:76:04:87:5a:5c:c6:
e7:5e:7d:60:c3:7b:ed:52:79:e0:45:28:e6:53:b6:
b2:28:fc:de:fd:88:a3:24:5a:00:e0:e0:45:96:e1:
7f:be:1d:f2:6f:00:01:66:62:ac:ee:dd:e6:43:8f:
17:b3:71:a2:b7:c2:ac:60:13:76:1b:8d:1f:61:59:
9a:9d:80:32:65:31:ed:43:56:0c:68:bc:4e:c9:d1:
17:11:e0:14:cd:b7:09:3f:20:21:00:c1:37:8c:29:
cc:41:94:53:0b:59:5b:c4:04:d4:c7:62:5b:cc:71:
3e:62:fa:ab:f3:5c:93:24:66:46:cf:93:38:9b:5c:
d9:12:d4:bc:59:f3:a6:93:5e:ee:cc:61:0e:c8:ae:
85:51:ea:d1:08:77:3f:18:e1:a9:14:95:8c:57:ad:
49:13:f4:20:02:10:a3:a9:07:d8:99:a2:ab:ec:24:
49:93:5d:a4:de:6a:71:72:40:24:61:07:f0:94:0a:
23:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2C:47:97:7C:01:E5:49:91:48:B0:5A:6C:6C:B0:97:57:B8:3D:C9
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/SixHl3wB5UmRSLBabGywl1e4Pck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.110.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:8c:ea:df:1c:fd:4e:7f:db:b5:7a:c6:8c:89:64:f8:22:f2:
af:e4:b0:d8:7d:08:68:37:71:21:bd:6b:bd:b2:45:46:be:67:
09:e1:6b:7e:06:0d:7a:f9:99:96:9c:4e:42:1d:b6:9a:bb:a2:
4e:ae:b2:84:5d:b8:f0:75:2d:cf:47:6d:70:54:66:1c:99:3a:
8e:61:6e:ed:90:c7:6a:11:ff:97:e4:34:15:7a:ab:89:2c:c9:
cc:bb:f6:9b:07:d0:12:71:2b:66:b4:ca:25:af:a0:11:eb:77:
ae:a0:86:b7:a1:48:0c:07:53:dd:74:d4:3d:13:c5:90:0f:d6:
dd:fa:5f:e2:36:3f:c7:3f:9e:14:d9:01:39:11:6f:a0:64:02:
42:51:c2:fc:4e:ab:95:7a:57:f9:72:f9:bd:e1:87:b4:9f:93:
7a:12:f2:08:f5:9e:73:e3:9a:ce:6e:5b:8d:b7:4f:c2:a8:ac:
99:a0:fc:ff:28:96:98:c3:d4:de:dc:06:41:d1:57:e1:7d:52:
01:38:ed:c2:16:4f:7e:03:9d:fa:80:65:ed:f1:f2:67:56:f3:
d9:e0:df:35:a8:62:9f:e8:f3:1c:d5:c8:94:50:5b:ee:5f:f4:
0a:f4:0b:5e:fb:f1:82:5f:39:d1:50:c5:63:f9:e1:40:2d:df:
d5:c5:21:2d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY8tixzjzcks4q3Q1ai6mo8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjQwNDMwMDU0NzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTJjNDc5NzdjMDFlNTQ5OTE0OGIwNWE2YzZjYjA5NzU3YjgzZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGFev0NoePJ3OqDVMTyEhVjKvLew
MzSxIbLru4ZD1/gL/Y6z+JAPPHtrBNaATPv9CqaDqjnT3U4eRwPLSTW4yujvtDp2
BIdaXMbnXn1gw3vtUnngRSjmU7ayKPze/YijJFoA4OBFluF/vh3ybwABZmKs7t3m
Q48Xs3Git8KsYBN2G40fYVmanYAyZTHtQ1YMaLxOydEXEeAUzbcJPyAhAME3jCnM
QZRTC1lbxATUx2JbzHE+Yvqr81yTJGZGz5M4m1zZEtS8WfOmk17uzGEOyK6FUerR
CHc/GOGpFJWMV61JE/QgAhCjqQfYmaKr7CRJk12k3mpxckAkYQfwlAojfQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEosR5d8AeVJkUiwWmxssJdXuD3JMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvU2l4SGwzd0I1VW1SU0xCYWJHeXdsMWU0UGNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiViAwQA
LiVuAwQALiVxMA0GCSqGSIb3DQEBCwUAA4IBAQCLjOrfHP1Of9u1esaMiWT4IvKv
5LDYfQhoN3EhvWu9skVGvmcJ4Wt+Bg16+ZmWnE5CHbaau6JOrrKEXbjwdS3PR21w
VGYcmTqOYW7tkMdqEf+X5DQVequJLMnMu/abB9AScStmtMolr6AR63euoIa3oUgM
B1PddNQ9E8WQD9bd+l/iNj/HP54U2QE5EW+gZAJCUcL8TquVelf5cvm94Ye0n5N6
EvII9Z5z45rObluNt0/CqKyZoPz/KJaYw9Te3AZB0VfhfVIBOO3CFk9+A536gGXt
8fJnVvPZ4N81qGKf6PMc1ciUUFvuX/QK9Ate+/GCXznRUMVj+eFALd/VxSEt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:07 2024 by rpki-client on console-ams.rpki-client.org