Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/T9mjJEsGXIjPBf1ouzxu5rTBkI8.roa
File: T9mjJEsGXIjPBf1ouzxu5rTBkI8.roa (raw, json)
Hash identifier: ANrB74tpg78xqXotFfsPke2/dt6ssBHlpqkAxh2eHEw=
Subject key identifier: 4F:D9:A3:24:4B:06:5C:88:CF:05:FD:68:BB:3C:6E:E6:B4:C1:90:8F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01897237CBD4158AB829851442F762BEFF13
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/T9mjJEsGXIjPBf1ouzxu5rTBkI8.roa
Signing time: Thu 20 Jul 2023 07:33:26 +0000
ROA not before: Thu 20 Jul 2023 07:33:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jul 2023 23:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:37:cb:d4:15:8a:b8:29:85:14:42:f7:62:be:ff:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 20 07:33:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fd9a3244b065c88cf05fd68bb3c6ee6b4c1908f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:35:d3:c0:52:99:66:96:95:ff:b8:57:c6:
bd:10:39:f8:d9:f5:50:a2:32:55:16:11:f1:8e:1e:
0e:e3:e9:ad:be:74:f8:a5:3e:c5:54:9a:c5:b5:b0:
70:ca:b9:3e:74:ee:e2:38:89:b1:a2:4d:bd:22:8b:
f4:c7:d5:3e:46:f3:37:b6:57:83:31:5f:f3:f6:a6:
4e:f2:3b:dd:40:19:5a:06:f5:fa:4b:f7:af:09:70:
39:e8:b2:43:a5:ca:21:69:23:d2:35:0c:e4:00:ad:
0a:e7:90:c7:5a:eb:c7:64:61:dc:e1:41:0b:bb:a8:
96:9e:b2:cb:54:e1:45:86:d9:c5:1b:88:dc:b7:c9:
02:2c:7b:ca:16:a7:0a:29:95:74:4f:53:91:81:1e:
09:bd:6f:9d:2e:6f:cb:71:56:00:89:02:aa:3c:9d:
ec:36:e0:dc:c2:e7:4d:47:53:1c:46:5f:b9:23:61:
64:d1:fc:3d:e9:3b:da:10:b8:b0:f3:c4:5a:a7:cf:
87:33:7d:1d:52:bc:92:0a:93:b9:2a:e0:ff:b3:71:
26:83:71:5c:48:e3:03:bf:1f:08:9c:86:38:cd:57:
b9:9a:e4:1e:10:c5:d9:bc:ed:b6:e4:40:3a:08:42:
24:80:36:1b:03:7e:55:10:2d:c2:85:4d:f4:87:f3:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D9:A3:24:4B:06:5C:88:CF:05:FD:68:BB:3C:6E:E6:B4:C1:90:8F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/T9mjJEsGXIjPBf1ouzxu5rTBkI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.119.0/24
Signature Algorithm: sha256WithRSAEncryption
71:88:ca:f7:d8:da:61:52:44:12:29:7c:97:b0:38:cd:66:46:
a0:58:9e:5d:73:d2:67:af:de:de:03:72:33:b8:d8:db:bf:e8:
7d:c3:90:f9:7e:50:cf:e4:50:ef:47:de:ea:76:90:1b:57:91:
a2:89:04:bc:d4:ba:61:a0:9f:c7:6f:30:47:4c:97:fc:3f:8c:
7a:d5:40:0f:18:c3:eb:04:57:25:ac:35:57:71:25:90:03:aa:
9d:44:c8:a6:39:c3:56:86:b4:46:2a:b6:9d:e5:0b:09:3a:4b:
81:d4:ff:86:c5:58:2c:b3:32:39:45:50:45:3c:68:41:0f:a0:
d7:fe:8a:9c:4b:1b:f4:dd:d6:f0:a0:1a:97:f3:b7:d9:7c:93:
36:20:4f:82:3d:bc:0e:f7:62:75:c4:0e:07:59:7a:6d:2d:21:
3b:98:6f:4b:09:ba:0d:b1:ae:15:ff:5b:aa:74:0b:03:74:b6:
43:92:39:db:ac:9b:f1:2f:50:90:48:46:f8:65:98:f1:2d:96:
36:db:67:4e:ba:60:16:27:c7:5a:78:71:5c:cd:61:61:4e:ae:
6a:34:01:14:c9:b4:de:22:e3:39:39:30:76:8d:a0:d6:68:06:
1c:ed:47:ee:2a:01:ae:bc:f8:ee:14:82:44:ac:53:d3:2a:04:
16:bc:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org