Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/T4HUsjne5z-pQ3nJDDZjBqlLS24.roa
File: T4HUsjne5z-pQ3nJDDZjBqlLS24.roa (raw, json)
Hash identifier: 5UwyasCI3h9dd5YhiWSyLs0fWegcFn27Kyk8LvMU1hY=
Subject key identifier: 4F:81:D4:B2:39:DE:E7:3F:A9:43:79:C9:0C:36:63:06:A9:4B:4B:6E
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CAF7744A25F5E55F7500C9AEBFA5858E4
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/T4HUsjne5z-pQ3nJDDZjBqlLS24.roa
Signing time: Thu 28 Dec 2023 08:07:58 +0000
ROA not before: Thu 28 Dec 2023 08:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
185.92.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:77:44:a2:5f:5e:55:f7:50:0c:9a:eb:fa:58:58:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 28 08:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f81d4b239dee73fa94379c90c366306a94b4b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:6d:a5:a5:fb:01:8b:75:dd:53:53:16:84:
72:04:98:5a:f6:ae:0a:79:38:87:ed:bb:15:d3:5c:
5d:f2:ad:1d:9b:e1:a0:4b:1f:19:aa:8e:21:d9:6c:
f6:67:08:f0:52:7a:59:56:b9:db:15:d4:79:2f:96:
d0:52:32:3b:fa:1c:6a:d7:fc:22:bf:90:f6:5b:38:
54:f7:57:ba:16:33:62:8e:b2:ba:82:0d:04:f0:8a:
2b:ba:14:ec:0d:b0:7f:59:e6:52:d1:4e:b4:e2:15:
2f:cb:75:dd:6b:f2:8d:c8:b9:60:74:e1:f8:17:d8:
0f:3a:d4:34:d4:49:9a:8e:6d:90:d2:a1:b1:6f:ee:
3f:6d:3d:d2:b4:2f:3f:ea:b5:16:fe:5a:90:a6:45:
01:08:32:5d:cb:a3:88:af:4e:15:fc:97:34:26:2c:
b2:d9:16:64:c6:05:cd:d6:0b:66:75:4d:ff:fc:c8:
ef:5e:7a:5d:14:0d:e5:a1:d0:3d:6a:a7:03:e3:85:
86:65:79:a8:9e:44:98:a2:c5:7a:82:d5:ca:63:89:
f0:51:5b:c9:a0:29:66:62:9a:1e:5e:ce:2a:46:79:
19:0f:6e:5f:8e:86:93:47:2d:23:aa:b1:dd:e7:53:
52:33:f6:01:63:be:f7:cc:60:bf:24:2b:4f:75:df:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:81:D4:B2:39:DE:E7:3F:A9:43:79:C9:0C:36:63:06:A9:4B:4B:6E
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/T4HUsjne5z-pQ3nJDDZjBqlLS24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:db:54:57:f2:9b:2d:36:ff:19:a7:c8:84:3f:92:72:a3:31:
d7:eb:7a:20:08:47:65:c9:f2:7c:c8:9f:8e:cc:5a:2c:8e:0e:
91:34:67:e6:b1:02:ec:30:d3:17:5d:31:01:24:9d:89:2f:6d:
37:b7:fa:5e:82:c0:ee:7d:21:23:5d:32:82:fa:e6:e3:fa:14:
42:77:37:41:fd:f1:24:98:3d:03:95:9a:ef:f0:f8:c2:d7:73:
a3:bd:b7:0b:10:57:f9:44:ee:ec:f4:20:7b:f7:cc:67:26:15:
08:80:bf:45:8a:a3:f1:62:e1:88:db:e6:3e:f4:c2:a4:59:f6:
cd:ee:ea:59:28:48:74:8e:50:73:b1:35:ba:e0:92:24:e8:09:
03:64:41:3b:2f:0f:3a:97:f8:93:cd:a6:41:49:69:07:5f:21:
a9:b6:2c:b8:df:8b:8c:06:9b:31:a0:2c:20:b7:4e:dd:0e:59:
01:b3:67:2e:2b:f4:30:0e:a4:1a:fb:0c:a7:d4:76:3d:7c:36:
16:4e:37:f9:14:71:43:1f:67:90:aa:71:43:99:13:9b:16:84:
01:c0:39:3d:02:fb:5a:d7:a5:42:6d:44:47:61:6d:33:fd:74:
93:53:6e:a1:84:7d:ef:0b:96:fa:37:3a:5c:ee:23:98:44:32:
c9:33:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:24 2024 by rpki-client on console-ams.rpki-client.org