Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ThngPaCo4pGJzicKa0rheKdLGgs.roa
File: ThngPaCo4pGJzicKa0rheKdLGgs.roa (raw, json)
Hash identifier: 5+hecjp31prZUOWiCW6JXftYgHxm+8qWGhw8QaniUsY=
Subject key identifier: 4E:19:E0:3D:A0:A8:E2:91:89:CE:27:0A:6B:4A:E1:78:A7:4B:1A:0B
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018982718CEC63EE37119DA5C26F3DA10C57
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ThngPaCo4pGJzicKa0rheKdLGgs.roa
Signing time: Sun 23 Jul 2023 11:10:26 +0000
ROA not before: Sun 23 Jul 2023 11:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 46.37.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:82:71:8c:ec:63:ee:37:11:9d:a5:c2:6f:3d:a1:0c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 23 11:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e19e03da0a8e29189ce270a6b4ae178a74b1a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:2a:00:2e:89:49:03:a1:c6:5c:b1:fb:24:
48:67:3b:78:ba:ab:9d:89:d4:c7:b5:e9:19:ce:24:
11:f9:d4:b9:2b:6a:bd:3e:c1:0a:8a:b5:2f:d8:60:
b8:46:8d:7e:50:e4:65:55:80:7c:0a:09:19:97:03:
d2:50:d8:63:db:e1:cc:db:23:0e:24:74:97:f3:3d:
c9:51:15:a3:93:e2:24:e1:35:96:3f:d9:0a:05:4f:
94:1c:33:d2:01:2d:55:18:9a:34:67:1b:75:fb:7c:
4b:6b:a7:4d:03:6c:ad:7f:a4:64:e5:47:b8:f8:c9:
aa:f7:79:80:87:86:0d:3b:e4:30:9f:54:49:cf:d1:
8f:cb:c6:93:a5:d6:f3:3a:9b:ac:3f:7c:d6:38:b8:
06:9e:4f:56:d3:ce:38:a3:8c:82:3c:a7:ed:43:4e:
9c:ea:5f:9a:c9:ad:04:b5:09:07:18:d2:a0:85:6b:
af:3d:53:85:f7:6d:67:19:af:86:af:a3:e6:b2:55:
3e:31:11:05:0b:ed:6f:40:0b:35:63:60:2c:58:f1:
5c:3d:8d:3e:1f:1e:ee:14:d5:f3:b5:ee:51:9d:1b:
4b:c4:08:99:4f:1f:10:8a:8d:df:ff:6f:c5:31:b8:
84:68:1a:60:df:ae:72:a5:33:6b:66:73:1a:ed:aa:
99:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:19:E0:3D:A0:A8:E2:91:89:CE:27:0A:6B:4A:E1:78:A7:4B:1A:0B
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ThngPaCo4pGJzicKa0rheKdLGgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.107.0/24
Signature Algorithm: sha256WithRSAEncryption
74:cb:e0:d8:6c:70:b7:60:4a:5b:f7:a4:55:70:4e:84:3f:6d:
9a:36:13:a8:5b:f7:1f:56:5d:99:07:52:64:31:71:81:3f:36:
41:87:59:85:e2:07:01:53:ec:f7:3b:35:3f:25:b2:6e:4b:b3:
8e:15:24:f0:7f:2c:d3:ff:6d:e3:67:f5:81:a5:6c:1a:45:ca:
a2:f3:ea:41:20:4a:25:fa:61:32:aa:a4:99:55:c3:06:47:dc:
39:74:2a:f2:0a:70:f8:9d:39:90:98:89:27:17:93:ae:d9:8e:
42:f5:fd:31:8a:00:3f:2e:a8:84:42:bd:f8:bf:d2:fe:c6:42:
ed:09:0c:ef:28:63:79:e3:dc:e2:98:e0:55:da:fc:78:69:1e:
ea:a2:f9:76:09:55:bf:97:56:d4:6d:3c:b0:24:3b:63:bd:c9:
1d:e0:d2:72:a0:a8:27:fd:27:9c:b5:ae:c0:f1:04:6d:4f:90:
53:2a:72:43:7b:c9:03:e7:65:b7:4c:79:d3:a3:f0:cb:b4:bc:
8e:f8:1d:d6:f4:2a:3a:73:fc:95:3a:f2:39:e2:1c:d3:c8:ef:
5e:a4:ce:34:d0:83:2a:d1:45:32:57:ae:fb:86:1d:e7:eb:46:
93:62:7b:df:3e:d1:b5:c5:7a:8e:cb:c7:9b:b5:5a:48:bf:fd:
b6:1d:77:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:50 2024 by rpki-client on console-fra.rpki-client.org