Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WIx4odVYK6oGPk7UwrobPU4C32k.roa
File: WIx4odVYK6oGPk7UwrobPU4C32k.roa (raw, json)
Hash identifier: i76cA84Tg02dIhYo6mkFrnnPvyMm35Yn7bLiAA/Zho8=
Subject key identifier: 58:8C:78:A1:D5:58:2B:AA:06:3E:4E:D4:C2:BA:1B:3D:4E:02:DF:69
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01933F1A049CF45628EA00E85D5295B694D8
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WIx4odVYK6oGPk7UwrobPU4C32k.roa
Signing time: Mon 18 Nov 2024 11:48:09 +0000
ROA not before: Mon 18 Nov 2024 11:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 11:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:1a:04:9c:f4:56:28:ea:00:e8:5d:52:95:b6:94:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Nov 18 11:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=588c78a1d5582baa063e4ed4c2ba1b3d4e02df69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e6:4f:91:69:20:ac:ba:f3:39:a2:9b:45:c4:
55:e1:f8:27:41:bb:49:19:b2:28:b1:d7:f5:65:df:
ff:fd:72:44:56:48:8f:f9:76:65:4d:6f:ba:ca:a9:
0f:f3:ae:7f:99:d5:bc:1a:31:c0:29:10:99:52:52:
51:f3:65:d9:4a:4a:3a:c0:ae:db:c9:cb:08:90:54:
8d:78:6e:77:5a:76:a4:aa:f4:4f:29:a8:56:9d:a2:
8d:97:f8:87:a1:2e:a4:8b:ed:c5:a7:1b:40:21:a5:
db:6d:e5:5a:71:a9:1f:99:00:86:4d:a0:90:ef:d7:
b1:3b:94:ac:e0:ea:53:0d:45:ad:12:68:cd:03:e5:
b9:de:62:5b:7b:8d:99:a0:f9:a0:68:87:22:22:cf:
52:5f:3a:22:bc:f7:24:c3:e3:c3:2c:c9:b5:9d:07:
48:be:d9:03:02:6f:9e:45:8d:53:5a:eb:45:f8:ca:
d0:ce:de:31:52:8a:3c:53:90:2f:ca:1c:bc:33:6e:
5d:c3:34:d1:d0:d1:85:79:81:8b:75:47:37:5b:bc:
ba:e9:c7:56:9d:88:d6:b9:e7:2a:e0:0f:55:e8:db:
b3:1d:b6:ea:c7:24:35:98:97:8e:54:c8:37:35:67:
8f:d8:c0:91:4c:84:cf:3a:f0:62:d4:4d:5d:a0:f1:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8C:78:A1:D5:58:2B:AA:06:3E:4E:D4:C2:BA:1B:3D:4E:02:DF:69
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WIx4odVYK6oGPk7UwrobPU4C32k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
185.92.47.0/24
Signature Algorithm: sha256WithRSAEncryption
44:84:0d:c2:8a:23:8d:31:2a:88:15:c4:ae:49:4d:05:0b:06:
41:93:70:93:23:40:f7:f4:81:a2:1e:e2:ae:cd:5b:43:27:b5:
28:c7:7b:a8:fa:b8:0e:43:0a:79:29:09:f6:20:74:2a:0f:a9:
40:2f:7e:56:d2:57:3a:b2:f9:37:b5:1d:5b:a4:f5:9a:5d:c9:
9f:5d:ee:9b:db:2c:67:2f:e9:aa:91:3b:df:27:07:68:61:ba:
cd:4e:cf:17:df:bd:53:ae:09:97:0d:86:09:06:02:a3:c8:cb:
1c:bd:b6:ca:d6:6f:6e:73:54:ed:f0:2f:12:b2:6f:6d:b9:f9:
1f:f1:27:db:b9:c6:2d:9d:77:f5:95:5e:a1:00:a2:2d:7e:97:
ac:ef:65:fe:4c:1f:3b:03:6c:0f:45:25:9e:8d:95:2a:e1:0f:
a2:bc:66:52:61:19:0d:0e:ce:ee:0b:95:e2:11:69:4b:0c:84:
32:22:89:6b:09:4e:60:54:4d:ed:0c:90:a3:d7:14:69:7f:ef:
c9:c0:7f:e9:b7:9e:fe:b7:e7:78:7f:13:ee:63:f7:a6:1c:76:
3c:90:36:7c:61:ed:18:dd:62:8a:1c:59:35:71:65:d1:29:52:
9a:95:06:16:b2:13:c4:ab:7b:60:21:75:69:6b:a3:02:48:ca:
8a:4a:dc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:48:23 2024 by rpki-client on console-ams.rpki-client.org