Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/TUqXV8cw7tyb3AFdQexjS7mJB-s.roa
File: TUqXV8cw7tyb3AFdQexjS7mJB-s.roa (raw, json)
Hash identifier: ibePCFQVPZ75RVEbQUuNvXTA5cIF6slsNLJiwZAnpkA=
Subject key identifier: 4D:4A:97:57:C7:30:EE:DC:9B:DC:01:5D:41:EC:63:4B:B9:89:07:EB
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01920B361DD590F3E492DC218C94942C4775
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/TUqXV8cw7tyb3AFdQexjS7mJB-s.roa
Signing time: Thu 19 Sep 2024 16:55:48 +0000
ROA not before: Thu 19 Sep 2024 16:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 46.37.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 11:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0b:36:1d:d5:90:f3:e4:92:dc:21:8c:94:94:2c:47:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 19 16:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d4a9757c730eedc9bdc015d41ec634bb98907eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:ba:5c:f4:bd:82:80:4d:46:23:6e:65:c0:
1c:9e:27:84:08:6c:22:7d:5c:77:06:a1:33:e5:21:
c6:9e:74:40:df:dc:db:90:d9:26:a0:97:a2:65:f5:
15:93:a8:f8:e5:70:bb:21:ba:7f:f1:47:1f:93:0f:
01:5f:c8:ac:7f:fc:a2:4d:ed:c3:b5:08:11:91:64:
ef:f3:df:84:9e:ea:09:c7:d3:d6:ad:b7:35:75:08:
1e:e6:e3:32:92:31:3f:bc:a4:a6:ff:7e:fe:5e:8d:
de:d1:51:10:15:7f:42:41:73:ee:a1:2a:71:13:f6:
b9:99:f5:77:44:7b:22:48:26:97:eb:ca:01:5a:9e:
01:8c:71:60:ff:53:43:51:09:24:de:99:28:11:86:
96:f7:e5:52:2e:9b:74:b2:ae:de:91:51:d4:1a:ab:
b2:7a:0f:90:3c:07:a8:f8:67:4d:52:41:36:9c:2b:
2e:7a:8d:9b:b1:1b:04:7c:b1:9d:75:25:ea:fa:68:
10:66:2b:11:94:70:50:c4:eb:33:d8:8e:68:b9:4e:
11:a6:41:6a:34:90:4d:d1:4c:31:4f:b8:16:ca:b9:
c1:c1:4b:bc:e3:d6:eb:7e:ee:bc:6e:46:25:2f:ad:
cc:9b:0f:ac:14:68:f6:02:bf:e6:68:8c:8e:e6:30:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4A:97:57:C7:30:EE:DC:9B:DC:01:5D:41:EC:63:4B:B9:89:07:EB
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/TUqXV8cw7tyb3AFdQexjS7mJB-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.118.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ab:5d:94:63:bf:e9:b4:12:94:80:13:da:ad:a5:a8:f5:ed:
b3:43:d1:b6:76:c2:83:eb:d1:6c:43:39:d2:e4:3f:91:2c:3c:
e1:a9:77:00:53:ab:ad:86:8d:0a:c1:54:d7:59:73:fb:69:0f:
e4:00:2f:59:83:15:24:5c:c2:12:6b:e8:c4:80:42:a6:81:95:
ae:9f:20:df:8d:b2:ed:34:fa:61:fe:69:c8:f8:bb:19:21:7c:
bf:9b:39:52:c2:9f:d3:15:18:76:d0:7c:23:fd:09:bc:8a:b5:
5e:9a:af:01:6c:98:69:ea:c3:68:58:3d:dd:1a:f8:fd:88:72:
61:cf:84:f9:33:9f:68:0f:35:3a:5f:81:57:02:cf:05:69:c8:
68:d6:57:9d:94:a8:26:e0:5f:a7:71:b2:4d:50:a6:64:2d:7c:
ec:47:55:2c:c2:79:7d:f5:72:3b:1f:69:33:3a:4c:7d:42:24:
c8:f5:77:a7:cd:20:e5:97:da:7e:0e:11:29:34:65:21:56:23:
34:ea:68:12:80:da:26:9b:35:83:ee:90:18:10:12:67:9f:4a:
46:97:4e:91:0d:e6:cf:df:b8:33:6e:12:ec:5f:d1:13:67:74:
af:2a:c4:df:0c:79:cf:d0:eb:34:ac:de:81:6a:50:87:be:c3:
fe:db:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:08 2024 by rpki-client on console-fra.rpki-client.org