Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WBXNJFtpwUfzwOYB46Rn93kWaGg.roa
File: WBXNJFtpwUfzwOYB46Rn93kWaGg.roa (raw, json)
Hash identifier: 53H2Z+bsyZ8UzNHJYzjmt9SA5oLbcV1vJdTG+y5JK/U=
Subject key identifier: 58:15:CD:24:5B:69:C1:47:F3:C0:E6:01:E3:A4:67:F7:79:16:68:68
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348B7A4A45E8E8BC0F09B119F1D4849
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WBXNJFtpwUfzwOYB46Rn93kWaGg.roa
Signing time: Mon 01 Jan 2024 04:29:31 +0000
ROA not before: Mon 01 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 46.37.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 06:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b7:a4:a4:5e:8e:8b:c0:f0:9b:11:9f:1d:48:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5815cd245b69c147f3c0e601e3a467f779166868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:26:63:12:2a:60:ff:8e:92:e7:81:96:59:
a7:33:39:a2:29:bc:46:10:5d:d3:c9:8f:0d:96:2f:
4c:20:c2:1b:f8:5c:1d:92:ab:33:5a:81:fe:b2:fa:
d2:bd:24:ac:8b:74:b0:ab:b8:e8:7c:04:22:5e:5e:
f9:21:3e:5c:e9:14:2e:33:2c:30:a5:22:35:40:34:
5c:26:c5:20:d4:3b:b1:50:18:f3:4a:e3:ef:34:d3:
64:a9:59:4d:39:f5:73:ed:7d:85:cd:fa:bb:03:ea:
a0:ee:44:13:e4:be:87:2b:2d:c3:2b:a5:75:07:dd:
f6:c0:02:d1:e3:4b:18:7f:bc:92:8f:08:06:4c:fe:
fc:d1:8f:c2:2b:f0:b1:9c:ea:8d:dd:90:97:ff:46:
ce:dd:76:32:c6:0d:4d:a8:5f:64:89:76:57:4e:44:
64:9d:3f:15:21:38:52:b9:81:f0:df:f3:ad:51:dd:
73:ab:13:10:61:b4:79:dd:4a:79:9f:04:c4:06:3f:
a0:40:64:3e:e7:33:68:e4:9c:08:41:a3:54:c6:d0:
95:01:48:d2:be:7b:75:fb:ce:39:0e:21:27:83:a6:
85:57:93:ec:c1:fb:a0:26:a4:ed:bb:f2:de:2c:c8:
f6:da:a1:c5:ca:c2:c4:86:cf:d6:4c:9d:d9:1a:81:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:CD:24:5B:69:C1:47:F3:C0:E6:01:E3:A4:67:F7:79:16:68:68
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WBXNJFtpwUfzwOYB46Rn93kWaGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:05:60:e0:b9:f8:d4:ee:2a:29:20:45:9f:51:01:c8:c7:a4:
5d:11:7c:98:90:cb:04:74:fd:67:1f:05:37:47:cb:e8:0f:c6:
18:b5:07:81:32:da:86:f3:bb:d4:31:f2:83:70:9a:53:ed:16:
4c:bf:b1:86:db:bb:89:f8:b7:2e:a3:38:b9:e1:66:d6:47:4c:
03:76:94:75:c0:eb:5a:48:3d:b2:f1:60:b3:6d:24:19:17:59:
81:4e:72:c4:49:59:27:5d:6b:8b:c8:54:18:1d:39:b3:8c:9e:
f5:88:36:6b:8a:02:7e:90:d5:83:6d:3c:4d:2c:7d:b6:0b:e1:
ad:0e:ac:cc:38:c9:94:46:c7:c9:75:bb:98:6a:32:84:10:43:
61:d9:0b:53:b1:e2:cc:90:5a:b0:c5:3b:d8:9e:4d:da:93:4c:
be:7b:52:fc:25:da:c6:47:55:61:c5:da:a3:09:26:dc:3e:e0:
a6:08:77:0d:09:a7:83:9c:25:91:35:fc:42:b6:3d:94:92:f2:
1d:11:17:ff:43:d5:ad:5b:5b:ec:46:da:96:92:8c:48:b4:c3:
4c:ae:da:2d:30:0b:7d:ae:44:df:e2:d9:51:7c:a5:6a:b2:70:
73:d3:ce:a1:ae:28:ce:31:80:dc:a9:c5:71:de:1c:5b:ed:16:
9c:56:e5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:07 2024 by rpki-client on console-ams.rpki-client.org