Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WfaqIUP7fwK8DZ2wZXIvbLqjGk0.roa
File: WfaqIUP7fwK8DZ2wZXIvbLqjGk0.roa (raw, json)
Hash identifier: aPuHUjUzj9lzagUaHO3WuGASVd/d8dEc9zOSnorWieU=
Subject key identifier: 59:F6:AA:21:43:FB:7F:02:BC:0D:9D:B0:65:72:2F:6C:BA:A3:1A:4D
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019329A1326E3524A03FBB89702B8DC157D6
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WfaqIUP7fwK8DZ2wZXIvbLqjGk0.roa
Signing time: Thu 14 Nov 2024 07:44:10 +0000
ROA not before: Thu 14 Nov 2024 07:44:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 12:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:a1:32:6e:35:24:a0:3f:bb:89:70:2b:8d:c1:57:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Nov 14 07:44:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59f6aa2143fb7f02bc0d9db065722f6cbaa31a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:e5:b9:da:b1:74:15:ba:d5:10:02:f0:d6:
6c:76:68:95:c8:85:f1:a6:d1:92:00:ba:c2:68:4b:
0b:a1:24:c6:e1:f4:bb:98:fe:0f:5a:91:a6:71:85:
80:f4:20:6b:67:54:88:18:88:14:a3:cb:ec:41:1c:
d2:da:fb:87:f1:97:8d:d0:d7:d6:00:2f:6f:09:3c:
0a:3a:16:66:2f:96:ea:72:4d:ec:00:78:ba:ba:f9:
4e:32:62:81:38:d0:94:b5:e3:81:ec:0c:e8:11:a0:
d2:76:3a:39:de:0c:31:74:14:de:e0:4b:62:27:7a:
9b:37:f6:0e:92:2d:da:cb:bd:2a:83:03:e7:65:d4:
f5:0b:cf:e2:ff:91:a4:29:63:bf:47:e8:ab:cd:41:
49:d4:7d:1e:b1:e5:17:b4:eb:88:c2:9c:9a:3e:61:
bc:6d:ee:26:dd:8f:d8:a1:51:7c:99:11:c3:8a:74:
3f:a9:06:8b:1b:2d:29:34:cd:c8:18:8d:fb:9d:7c:
c5:85:ef:48:1d:33:f0:fc:0c:90:f9:02:f9:21:3b:
8b:76:ab:89:d9:08:9e:9e:bb:0c:2c:a9:34:a9:6e:
10:86:63:d4:fa:cf:40:b3:4b:cc:fa:75:90:b5:1b:
d7:96:4d:39:75:4c:58:53:8c:51:e6:ff:58:a1:60:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:AA:21:43:FB:7F:02:BC:0D:9D:B0:65:72:2F:6C:BA:A3:1A:4D
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WfaqIUP7fwK8DZ2wZXIvbLqjGk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.122.0/24
Signature Algorithm: sha256WithRSAEncryption
56:af:f1:e7:fc:ec:f6:b3:01:f3:b5:99:29:42:88:30:04:3f:
15:22:07:1f:38:c4:1c:4f:04:f9:78:49:60:9b:b7:9e:a3:2e:
4f:a7:34:57:eb:1d:4a:ba:ae:3f:91:cf:6f:e8:b4:d2:d1:ab:
4d:30:fa:c6:e7:67:07:dc:ed:36:3a:8b:cf:f8:27:6d:27:fe:
e1:dc:56:86:b7:79:a3:b7:d0:92:b7:df:61:d7:b7:95:22:23:
a2:73:a6:a4:1c:08:9c:cc:e5:9c:b6:bd:e9:9b:41:eb:93:aa:
dd:df:68:6e:3b:5b:6d:71:16:a1:4c:38:a8:bb:c1:52:01:f3:
2c:32:ef:9e:2d:92:c0:ae:17:f1:b5:e5:c8:7d:8e:b8:ff:f3:
4c:9a:7b:1a:1e:9c:a9:3a:10:89:45:c1:c8:fa:77:6f:57:2d:
1b:08:6d:81:1d:12:c1:c7:bb:f3:08:6c:d3:60:e0:f7:91:d6:
1e:69:e2:2c:e0:7f:72:55:cf:8f:e2:be:7a:d4:ba:20:99:a8:
02:f4:09:86:97:38:85:e0:0f:11:f2:4d:ee:ed:13:87:30:9c:
8a:d2:dd:6e:d6:01:d9:01:64:77:53:ed:42:af:37:db:47:94:
c9:03:12:08:3f:43:6c:f6:2c:f0:3d:10:6d:5b:d3:7b:83:dd:
f1:ff:03:fa
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZMpoTJuNSSgP7uJcCuNwVfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjQxMTE0MDc0NDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWY2YWEyMTQzZmI3ZjAyYmMwZDlkYjA2NTcyMmY2Y2JhYTMxYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8rludqxdBW61RAC8NZsdmiVyIXx
ptGSALrCaEsLoSTG4fS7mP4PWpGmcYWA9CBrZ1SIGIgUo8vsQRzS2vuH8ZeN0NfW
AC9vCTwKOhZmL5bqck3sAHi6uvlOMmKBONCUteOB7AzoEaDSdjo53gwxdBTe4Eti
J3qbN/YOki3ay70qgwPnZdT1C8/i/5GkKWO/R+irzUFJ1H0eseUXtOuIwpyaPmG8
be4m3Y/YoVF8mRHDinQ/qQaLGy0pNM3IGI37nXzFhe9IHTPw/AyQ+QL5ITuLdquJ
2QienrsMLKk0qW4QhmPU+s9As0vM+nWQtRvXlk05dUxYU4xR5v9YoWCn3QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFn2qiFD+38CvA2dsGVyL2y6oxpNMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvV2ZhcUlVUDdmd0s4RFoyd1pYSXZiTHFqR2swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiViAwQA
LiVxAwQALiV6MA0GCSqGSIb3DQEBCwUAA4IBAQBWr/Hn/Oz2swHztZkpQogwBD8V
IgcfOMQcTwT5eElgm7eeoy5PpzRX6x1Kuq4/kc9v6LTS0atNMPrG52cH3O02OovP
+CdtJ/7h3FaGt3mjt9CSt99h17eVIiOic6akHAiczOWctr3pm0Hrk6rd32huO1tt
cRahTDiou8FSAfMsMu+eLZLArhfxteXIfY64//NMmnsaHpypOhCJRcHI+ndvVy0b
CG2BHRLBx7vzCGzTYOD3kdYeaeIs4H9yVc+P4r561LogmagC9AmGlziF4A8R8k3u
7ROHMJyK0t1u1gHZAWR3U+1CrzfbR5TJAxIIP0Ns9izwPRBtW9N7g93x/wP6
-----END CERTIFICATE-----
Generated at Sun Nov 17 15:03:10 2024 by rpki-client on console-ams.rpki-client.org