Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/VcXgDvyr3-zvDacZVmkd4BDFKew.roa
File: VcXgDvyr3-zvDacZVmkd4BDFKew.roa (raw, json)
Hash identifier: q3C1mbIQmGf2AUFj1kbhpH783Yb3+ssxmNQ/XjeAXyE=
Subject key identifier: 55:C5:E0:0E:FC:AB:DF:EC:EF:0D:A7:19:56:69:1D:E0:10:C5:29:EC
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AE2A0702256A7673F3CA39AE9588FF142
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/VcXgDvyr3-zvDacZVmkd4BDFKew.roa
Signing time: Fri 29 Sep 2023 20:27:59 +0000
ROA not before: Fri 29 Sep 2023 20:27:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.120.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:a0:70:22:56:a7:67:3f:3c:a3:9a:e9:58:8f:f1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 29 20:27:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55c5e00efcabdfecef0da71956691de010c529ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:95:08:49:8d:94:62:30:7c:9f:a5:7b:6d:87:
cc:a6:16:90:c6:54:fe:d8:9b:eb:78:51:ab:a7:b3:
4b:96:81:f2:da:0b:40:07:ac:88:95:2a:06:06:6d:
21:5f:c4:9b:3b:4e:5d:6b:2b:af:da:c6:a9:28:85:
66:3d:37:89:e6:8a:b5:7f:e4:d9:81:e6:1c:07:f8:
20:3a:5e:9b:2c:09:dc:b6:10:5d:8f:f1:44:96:5d:
82:e3:5b:56:b8:53:6f:df:0c:b3:00:79:12:b9:0f:
05:79:5b:a3:13:56:03:e8:ec:dd:c4:aa:2b:44:12:
3a:8e:08:89:b1:c2:cd:14:1b:9d:cb:83:90:21:7f:
cf:b4:dc:c6:94:ce:2f:67:a9:f5:83:05:96:cd:87:
50:cd:3f:c6:80:e8:b6:0e:19:80:ce:6a:81:e5:f7:
a6:21:c7:b4:e7:76:7e:62:11:f6:9b:a9:62:f7:32:
f5:6a:d9:83:36:ff:c4:c5:7c:1a:a6:32:be:29:b7:
c6:14:65:5a:6d:ae:94:af:ed:be:b0:3c:18:bf:93:
4a:ec:10:d3:3d:84:5f:d1:f9:9a:04:62:3f:90:aa:
23:e3:e4:dd:1d:61:2e:13:27:1a:0d:97:57:8d:b1:
d6:65:aa:59:7e:9c:ca:8d:fc:38:1f:1b:38:37:24:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C5:E0:0E:FC:AB:DF:EC:EF:0D:A7:19:56:69:1D:E0:10:C5:29:EC
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/VcXgDvyr3-zvDacZVmkd4BDFKew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.120.0/23
46.37.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:28:2c:58:02:4b:ce:9a:fe:cc:4e:a4:7e:70:4d:6f:95:d1:
0d:f5:06:f1:87:61:d8:53:49:b8:6d:53:36:4b:9a:f2:7b:5e:
c4:10:14:8b:90:a5:a5:02:9e:ad:de:d8:8c:9c:a0:10:0c:a8:
3f:fc:fb:00:ac:1b:20:8b:49:91:fb:25:85:9b:75:0b:19:34:
6e:80:2a:fd:21:4f:ed:b0:3f:35:4c:e1:37:8c:f3:d5:62:6c:
2b:73:9e:b5:d4:71:fb:b7:35:bf:40:97:9d:c0:10:34:60:8b:
3d:7c:29:2a:86:fe:c8:85:09:0f:35:52:64:32:c2:1b:5a:f3:
02:97:4b:34:04:c3:69:6e:f9:60:72:c0:dd:6c:8f:a8:31:da:
92:12:8a:ef:38:82:79:1f:b7:e5:3c:86:ab:0d:8a:4f:f1:3f:
c2:5f:06:a9:35:4b:60:c0:57:91:67:e2:cc:69:68:9b:e0:c2:
e2:57:5c:d3:a1:1d:2a:be:66:b3:30:78:96:35:4b:0f:89:bc:
61:f9:a6:7a:7d:c2:4f:fb:75:0f:52:9a:4f:90:af:38:dc:dd:
ed:05:82:ce:25:c6:6c:e9:4d:f3:3f:21:71:08:a7:f7:6d:e8:
1b:fb:dd:f3:52:05:ce:5b:33:3f:9e:4d:de:31:e7:a3:65:f7:
2f:17:b4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 08:53:26 2023 by rpki-client on console-fra.rpki-client.org