Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/TEh1RIX2X8u7UJQi2ihGPVochuk.roa
File: TEh1RIX2X8u7UJQi2ihGPVochuk.roa (raw, json)
Hash identifier: qgvQdPwRb1CH3nt1zddQLLz/CnoWzCYEfr40RerN1ew=
Subject key identifier: 4C:48:75:44:85:F6:5F:CB:BB:50:94:22:DA:28:46:3D:5A:1C:86:E9
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018A3B5E6FEF6959FF51CD691D814D397A88
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/TEh1RIX2X8u7UJQi2ihGPVochuk.roa
Signing time: Mon 28 Aug 2023 08:59:19 +0000
ROA not before: Mon 28 Aug 2023 08:59:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:5e:6f:ef:69:59:ff:51:cd:69:1d:81:4d:39:7a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 28 08:59:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c48754485f65fcbbb509422da28463d5a1c86e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:50:4b:44:7f:3a:a5:da:6e:d8:a6:8e:c0:ba:
e6:3d:b9:e4:e9:bd:47:13:5e:3e:05:dd:ff:73:7a:
89:be:df:7d:90:49:e8:0e:0b:0a:b1:74:a4:00:a6:
c8:4c:41:a0:f3:b6:12:20:88:1f:1b:c1:72:0b:22:
6a:e4:a8:5e:de:38:cf:b2:c4:45:c8:07:47:b8:71:
6a:3b:d8:01:d8:ea:30:8b:56:20:20:e4:4e:72:c3:
bf:2b:16:55:57:57:d0:a9:df:87:44:f0:3a:a8:da:
d8:17:a5:06:44:ea:c1:9b:2d:6c:d4:ca:a7:0b:64:
2f:62:95:e9:fc:f1:27:ed:74:80:c0:7a:58:66:fb:
9b:b8:19:f5:fd:2d:36:cd:d3:fb:d3:2e:e4:a0:6c:
75:8c:e9:f4:fc:94:5d:cb:cb:0c:51:a0:0b:20:a6:
cb:03:b6:88:e0:2f:27:ac:7e:30:3c:8a:16:6b:94:
a8:56:8b:0e:0f:ca:2c:56:46:10:84:9f:77:d3:ec:
13:42:c0:af:09:e9:1b:c5:26:65:89:19:4f:fd:20:
99:89:83:b4:e6:70:f6:eb:06:a1:6d:89:c2:54:f3:
6c:cf:5f:c3:35:a0:a4:a8:ac:e8:71:55:dc:77:a6:
63:41:08:4f:6a:a2:bd:eb:93:a0:71:21:e2:45:ca:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:48:75:44:85:F6:5F:CB:BB:50:94:22:DA:28:46:3D:5A:1C:86:E9
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/TEh1RIX2X8u7UJQi2ihGPVochuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.119.0/24
Signature Algorithm: sha256WithRSAEncryption
60:82:27:bb:0e:be:32:7a:e7:eb:6a:3c:0c:16:f3:4f:70:98:
15:1a:a3:c6:90:2e:89:d9:6e:f4:51:9c:4e:be:42:6a:a9:21:
c3:cf:34:54:49:64:c0:5c:01:52:a0:5d:4c:ad:d9:d1:8b:44:
dd:e9:4f:45:f8:df:98:8c:02:9d:43:de:44:4f:f4:4b:fb:08:
56:10:29:4a:0f:c2:05:db:e1:fb:b5:a8:05:46:72:f7:a6:cb:
80:ae:6b:76:c8:09:62:ab:77:9d:dc:bb:31:07:8f:41:2c:f6:
2b:87:a6:96:ea:82:a4:88:9b:45:63:4b:19:82:3b:9e:a0:61:
ff:d0:11:fa:97:80:6d:9c:a7:7e:a5:2b:f7:16:14:40:f8:1b:
fe:f9:00:cd:b5:70:f7:83:f2:73:0a:33:dc:c9:2d:b2:97:51:
73:0c:34:41:62:11:5b:ce:af:3f:4c:7a:db:05:1d:06:3a:28:
46:30:a6:f2:27:72:62:e0:48:71:c4:96:21:0e:95:40:91:ab:
18:7d:85:9c:ab:21:a8:c3:e1:fb:6f:c4:34:ad:3e:ee:e1:f9:
d2:05:8d:04:2a:27:e4:d5:7f:bb:28:c1:6b:fe:ab:b5:42:8b:
e2:e3:87:29:45:0e:3d:fd:5e:cd:7a:dc:c7:0f:69:d0:bd:e6:
77:ca:8a:48
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYo7Xm/vaVn/Uc1pHYFNOXqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwODI4MDg1OTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzQ4NzU0NDg1ZjY1ZmNiYmI1MDk0MjJkYTI4NDYzZDVhMWM4NmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglBLRH86pdpu2KaOwLrmPbnk6b1H
E14+Bd3/c3qJvt99kEnoDgsKsXSkAKbITEGg87YSIIgfG8FyCyJq5Khe3jjPssRF
yAdHuHFqO9gB2Oowi1YgIOROcsO/KxZVV1fQqd+HRPA6qNrYF6UGROrBmy1s1Mqn
C2QvYpXp/PEn7XSAwHpYZvubuBn1/S02zdP70y7koGx1jOn0/JRdy8sMUaALIKbL
A7aI4C8nrH4wPIoWa5SoVosOD8osVkYQhJ930+wTQsCvCekbxSZliRlP/SCZiYO0
5nD26wahbYnCVPNsz1/DNaCkqKzocVXcd6ZjQQhPaqK965OgcSHiRcqjIwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFExIdUSF9l/Lu1CUItooRj1aHIbpMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvVEVoMVJJWDJYOHU3VUpRaTJpaEdQVm9jaHVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALiViMAwD
BAAuJXEDBAAuJXIDBAAuJXcwDQYJKoZIhvcNAQELBQADggEBAGCCJ7sOvjJ65+tq
PAwW809wmBUao8aQLonZbvRRnE6+QmqpIcPPNFRJZMBcAVKgXUyt2dGLRN3pT0X4
35iMAp1D3kRP9Ev7CFYQKUoPwgXb4fu1qAVGcvemy4Cua3bICWKrd53cuzEHj0Es
9iuHppbqgqSIm0VjSxmCO56gYf/QEfqXgG2cp36lK/cWFED4G/75AM21cPeD8nMK
M9zJLbKXUXMMNEFiEVvOrz9MetsFHQY6KEYwpvIncmLgSHHEliEOlUCRqxh9hZyr
IajD4ftvxDStPu7h+dIFjQQqJ+TVf7sowWv+q7VCi+LjhylFDj39Xs163McPadC9
5nfKikg=
-----END CERTIFICATE-----
Generated at Thu Sep 7 06:41:12 2023 by rpki-client on console-ams.rpki-client.org