Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Xd0P1tFt6NwwJqRt7_kxI-wMGKI.roa
File: Xd0P1tFt6NwwJqRt7_kxI-wMGKI.roa (raw, json)
Hash identifier: JxOwLpeqlpPqxFNc8J3liHMmpUGHr98FUaCkufK2NtY=
Subject key identifier: 5D:DD:0F:D6:D1:6D:E8:DC:30:26:A4:6D:EF:F9:31:23:EC:0C:18:A2
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0AE8AEC8A8D5464121441008A1BC88
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Xd0P1tFt6NwwJqRt7_kxI-wMGKI.roa
Signing time: Sun 01 Jan 2023 11:15:09 +0000
ROA not before: Sun 01 Jan 2023 11:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 272611
IP address blocks: 46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e8:ae:c8:a8:d5:46:41:21:44:10:08:a1:bc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ddd0fd6d16de8dc3026a46deff93123ec0c18a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:2a:42:af:1b:12:76:97:0f:18:80:6f:a2:
b2:6b:23:d9:a1:a9:a5:d4:3c:f6:cd:07:1a:80:49:
06:ca:b6:7c:4d:6f:0c:66:69:00:fa:9e:f7:f3:99:
fd:c9:d4:41:55:0e:ab:62:44:81:e6:f9:b1:da:71:
d9:2d:7f:e7:72:a3:1a:97:1a:19:fc:11:da:2d:ce:
c7:e6:d0:43:81:78:f3:22:45:d8:a8:51:3f:a5:88:
80:34:dd:ac:e1:e1:34:20:dd:93:f6:bf:b7:52:9b:
88:04:41:d6:a4:fc:7b:67:84:a2:04:27:56:ab:75:
07:35:56:2a:22:4c:65:81:1c:2d:f6:dc:64:80:12:
5a:19:f1:cc:51:84:bb:89:f6:02:7f:f3:61:64:d4:
b9:96:77:ce:55:c6:1f:0f:7b:8e:77:58:a3:24:b8:
a1:d1:35:81:a5:57:9c:52:04:c7:ae:1b:6d:85:cd:
d3:c3:ec:1d:b3:48:27:0b:09:1c:b0:e8:f7:88:ec:
e0:93:36:d1:4f:f9:8c:ee:98:cb:55:df:9a:9f:16:
22:51:fc:75:30:93:39:43:99:3c:e2:19:6c:06:4a:
3f:d2:32:91:b3:95:91:ba:5f:96:3f:1f:c9:90:3a:
00:16:a1:b3:72:4a:63:20:24:75:24:e7:3e:03:7b:
77:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DD:0F:D6:D1:6D:E8:DC:30:26:A4:6D:EF:F9:31:23:EC:0C:18:A2
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Xd0P1tFt6NwwJqRt7_kxI-wMGKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:29:3e:2d:bb:5d:9e:aa:8a:8f:5a:88:ac:3b:d1:24:bc:96:
3b:79:41:14:8a:ab:68:f6:2c:52:f3:1c:b3:22:e7:9f:5f:6a:
8c:02:f0:ff:7c:b2:db:59:e1:3d:f4:2f:75:ef:07:b8:70:72:
3d:e0:27:52:fc:b8:a0:ff:77:67:78:f5:6a:4d:07:25:78:b2:
06:9a:9f:db:bc:96:51:c2:4b:cb:03:7b:43:6d:80:97:ac:f0:
b3:a9:5b:9e:c3:45:61:dc:77:89:be:ef:d5:c6:4f:16:1b:c9:
8d:02:21:a0:ba:cd:75:92:23:f5:e4:30:8d:94:f4:ce:fa:29:
7d:62:60:89:b3:10:fe:62:0c:51:58:e6:6e:7b:a7:89:81:24:
8d:96:b0:8a:72:c4:ee:4c:19:b5:18:08:16:63:26:0d:83:08:
17:e5:fa:f9:73:a2:cd:1f:8e:a9:59:81:02:95:16:83:68:40:
cc:fb:77:34:d8:18:32:28:17:80:3c:91:78:14:7e:ba:54:2f:
99:41:c8:35:1f:d3:fb:b2:ee:8e:0c:32:a6:d7:4f:be:66:14:
ac:31:a6:57:48:fa:43:6d:b9:07:7b:e2:10:34:a7:7e:4b:62:
ec:c6:fc:7c:8c:44:c1:19:83:08:e1:5d:db:2b:5a:b7:0e:ee:
bb:28:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org