Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/V6Ldh8pf9aJHUJY6QLIV8dx3Z84.roa
File: V6Ldh8pf9aJHUJY6QLIV8dx3Z84.roa (raw, json)
Hash identifier: xfgr2l29spAkf+jihVOQ4/doeSeuS9NXukOl/op39GU=
Subject key identifier: 57:A2:DD:87:CA:5F:F5:A2:47:50:96:3A:40:B2:15:F1:DC:77:67:CE
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018629338CE6051D2B25EB7583E0E585AA62
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/V6Ldh8pf9aJHUJY6QLIV8dx3Z84.roa
Signing time: Tue 07 Feb 2023 00:08:09 +0000
ROA not before: Tue 07 Feb 2023 00:08:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.120.0/23 maxlen: 23
46.37.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:29:33:8c:e6:05:1d:2b:25:eb:75:83:e0:e5:85:aa:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 7 00:08:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57a2dd87ca5ff5a24750963a40b215f1dc7767ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:e5:a3:99:11:cb:90:e8:f9:d5:a2:cd:9b:
35:1b:fb:fd:86:af:87:fb:27:02:84:c4:62:6a:2b:
74:3f:55:c9:a5:87:76:f5:5c:a4:e1:ff:2a:e9:7c:
3c:ea:1c:34:3d:ea:7f:e4:56:aa:f1:53:3e:f4:17:
80:71:50:35:1d:e8:64:6e:df:10:ad:9c:b6:f6:57:
bf:5c:b6:f4:84:07:a7:d5:a0:82:90:21:7b:43:d0:
3f:1b:40:c0:1e:99:ac:f6:0d:8c:d6:f1:00:e8:d2:
2a:4e:9b:3d:a5:a0:33:d9:f1:0c:84:52:ae:7a:1d:
fe:df:c6:51:4b:0d:98:be:01:10:51:57:c6:be:2d:
ca:23:c9:5d:47:5b:f7:92:8b:81:d3:6c:c0:0a:81:
d4:63:48:ea:3a:de:01:4e:8c:a3:fc:a3:3f:a3:9a:
8e:f3:40:1f:9c:9d:09:92:c5:9f:4d:d4:3a:b2:8f:
56:a6:77:14:29:b1:60:53:7e:3e:9d:bd:ca:dc:26:
f6:c0:1b:ea:fc:4b:c9:53:2a:c6:8f:30:d4:10:a6:
17:5b:26:9f:05:4b:0d:31:94:d0:9f:5c:10:1c:e7:
d0:c6:d2:cf:83:19:63:fe:85:b0:69:0d:f4:ef:32:
4f:99:1d:ef:4d:e3:57:70:2b:0e:f6:00:5e:06:ef:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A2:DD:87:CA:5F:F5:A2:47:50:96:3A:40:B2:15:F1:DC:77:67:CE
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/V6Ldh8pf9aJHUJY6QLIV8dx3Z84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.118.0/24
46.37.120.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:3e:23:aa:47:9f:60:51:3c:93:1f:c1:1c:99:df:bc:33:2a:
a4:eb:4b:43:6a:24:b8:78:6b:10:ad:7c:0c:0e:9f:b9:bb:9e:
95:f3:9c:ba:da:53:56:85:0b:b4:00:47:09:d2:ba:ad:14:75:
e0:58:cf:36:40:5a:fd:bf:8e:e9:42:be:41:e9:13:1c:f6:86:
d4:45:ff:08:fb:25:a0:9a:09:61:fc:c2:35:e0:cc:8e:55:b7:
55:52:8c:77:65:3b:d4:42:32:95:cd:cc:87:67:6b:91:19:ba:
ab:15:5c:fb:5f:73:89:09:ed:3b:2e:7b:93:40:2a:6f:92:c4:
27:de:1c:5d:04:bf:08:e6:1e:1e:a8:91:bd:09:36:99:8c:e5:
29:c6:20:44:27:10:4e:81:f7:b9:ef:4c:5d:01:d0:3d:d5:26:
fb:0c:e9:07:67:d0:27:95:9d:4d:5d:f6:6e:0a:32:a2:e7:9e:
bc:ee:77:b8:d1:aa:46:7e:43:b6:89:e8:f6:b6:f0:e4:ef:b5:
7e:00:eb:c2:fa:6f:79:de:07:dd:b8:23:78:12:b3:cc:68:b3:
0a:e0:8c:65:96:5c:3a:53:ba:2c:00:e3:a1:30:b7:64:1f:44:
7a:8f:3b:d9:15:88:d5:18:a9:30:b5:1e:c4:81:67:5d:68:1a:
11:33:f2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org