Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Xi4jC7KM7iQWoNNMC5Ir7BYnlLw.roa
File: Xi4jC7KM7iQWoNNMC5Ir7BYnlLw.roa (raw, json)
Hash identifier: KcVMjRloopFVgrajHGDi2EDBSYI/tIUbmkDnilGsjRY=
Subject key identifier: 5E:2E:23:0B:B2:8C:EE:24:16:A0:D3:4C:0B:92:2B:EC:16:27:94:BC
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0187A0AB6B5E326687671C842521FD0FE7B5
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Xi4jC7KM7iQWoNNMC5Ir7BYnlLw.roa
Signing time: Thu 20 Apr 2023 21:56:41 +0000
ROA not before: Thu 20 Apr 2023 21:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a0:ab:6b:5e:32:66:87:67:1c:84:25:21:fd:0f:e7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 20 21:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e2e230bb28cee2416a0d34c0b922bec162794bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:7a:d1:cd:43:c7:0b:b3:e6:0b:e2:c9:27:
a8:ae:87:02:b4:f3:07:58:7d:f6:c3:47:3b:9f:7b:
02:61:97:a3:f7:05:3a:5c:28:b5:e9:21:d8:89:28:
ff:30:09:23:07:40:0b:87:91:05:90:af:bd:f6:5b:
17:8c:7f:5c:bf:11:f5:4b:e2:c0:c5:36:34:bc:44:
4f:a0:3e:53:7a:17:cb:88:33:01:42:64:87:dc:63:
d8:7d:59:94:3e:89:1e:1d:c5:04:91:c4:46:17:37:
ff:9d:7a:e6:82:b9:47:9e:5a:df:2d:a2:30:a6:d7:
60:43:70:ce:47:a8:7d:a7:c1:9c:77:d6:c9:22:80:
25:57:27:3e:aa:06:38:dc:68:3d:a2:97:38:79:8b:
b5:b1:22:d3:ef:8f:68:4a:9b:8f:3a:e9:f8:10:7e:
ee:ac:7c:f4:ae:a0:99:8e:0c:02:2a:dc:ca:9c:d6:
34:32:66:e7:95:ee:22:19:e6:25:39:fc:35:e5:3c:
fe:e8:4c:65:f2:45:04:36:e1:3e:e6:7f:3f:e1:7b:
28:cd:e6:9b:c0:26:72:47:89:05:7f:12:76:a3:9a:
5c:3a:81:dd:b2:d0:55:0b:a9:47:b9:0f:32:38:0f:
35:84:ba:ae:ca:91:40:9f:14:99:84:4e:47:0a:97:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2E:23:0B:B2:8C:EE:24:16:A0:D3:4C:0B:92:2B:EC:16:27:94:BC
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Xi4jC7KM7iQWoNNMC5Ir7BYnlLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1a:6a:2e:c7:e1:4b:2d:87:4c:59:ac:e8:a2:10:35:0e:60:
27:3b:40:f8:1d:fa:80:e4:fb:bd:f2:a6:10:72:92:d5:0c:d6:
56:6a:ee:b4:92:5a:9d:90:9a:48:95:5e:22:7c:5f:b4:52:5a:
ca:ae:23:1a:21:c7:1a:57:da:8d:51:4f:83:4a:38:4e:87:f5:
ac:79:00:90:90:2b:83:bd:6e:93:60:d0:10:56:2c:11:68:ff:
7d:c0:e1:b9:9b:bc:75:3f:7b:cc:91:47:08:8b:86:d1:a2:d1:
34:d7:56:5d:91:4f:bb:0c:cf:a7:be:ba:46:dc:a3:53:31:68:
2d:c2:e8:29:06:6d:c5:bf:02:64:06:60:a6:08:32:5a:ca:cc:
ba:75:49:d5:c9:f9:54:b0:0a:15:78:67:e2:96:7d:08:e1:44:
93:d6:4d:de:a1:3a:50:09:14:7b:54:20:92:7d:c9:99:13:34:
77:94:f4:ee:10:ff:6a:64:ba:b6:fd:98:fe:c8:3b:3d:44:a5:
d4:d4:cc:a1:6a:0e:bf:09:79:7c:dc:4d:ef:b3:4e:57:bf:d3:
2c:21:f4:a4:49:d7:db:73:52:9f:2a:80:0f:c0:15:96:6e:11:
5b:25:ac:f7:8c:7f:71:18:24:ab:9e:36:41:34:87:a8:b7:ba:
3a:f1:7e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org