Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/YLv3CkeXxaWijin8d94LCfLR7zI.roa
File: YLv3CkeXxaWijin8d94LCfLR7zI.roa (raw, json)
Hash identifier: Zukf61MrHFBHY3KUte8hIKAvgod77p6XjHrJFDXwg6Q=
Subject key identifier: 60:BB:F7:0A:47:97:C5:A5:A2:8E:29:FC:77:DE:0B:09:F2:D1:EF:32
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018E0300335E1DC4A401728912DE2B873D07
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/YLv3CkeXxaWijin8d94LCfLR7zI.roa
Signing time: Sun 03 Mar 2024 06:28:48 +0000
ROA not before: Sun 03 Mar 2024 06:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 46.37.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 14:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:03:00:33:5e:1d:c4:a4:01:72:89:12:de:2b:87:3d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Mar 3 06:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60bbf70a4797c5a5a28e29fc77de0b09f2d1ef32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:5b:ed:c4:60:2d:85:ea:31:1b:78:b6:b8:
b4:cd:50:ab:91:c6:25:c7:f4:01:8b:a6:0f:35:fb:
7a:8a:20:ce:f9:eb:43:6e:51:f9:76:52:e7:27:0c:
9b:45:2a:57:bd:80:70:5c:4e:ff:5b:6a:a1:6e:3d:
5f:5f:68:26:55:cc:5d:5e:7c:5b:c4:0e:74:70:4b:
f2:bd:41:32:64:71:da:54:16:dd:a6:aa:16:c1:b2:
35:2c:61:2c:89:58:0f:3e:c4:1a:d8:8c:96:8e:1b:
fa:50:79:4c:1f:3d:a7:b3:9b:f7:74:b6:6b:76:13:
ce:97:2f:b4:e4:a1:b0:3b:ce:f7:05:2a:83:41:f1:
ec:ba:af:01:ed:f7:5e:e1:86:75:6e:93:ab:5b:46:
de:6d:b4:d7:a5:c5:a3:ce:b2:1d:48:a8:73:e1:09:
55:3e:98:4f:39:b2:31:ad:32:85:0e:7a:e1:e4:c3:
1f:2b:7a:f5:f4:0b:a7:73:ce:19:7f:d4:18:27:98:
2b:5e:fe:16:bb:37:99:e9:90:95:e5:35:35:5b:2a:
44:fc:1e:2b:61:87:73:d2:ff:84:88:e5:a3:b6:53:
e9:9e:7b:a2:4c:28:a5:6c:dc:82:5f:b7:15:e6:c0:
32:63:d3:91:69:12:59:a0:fc:b8:15:92:e2:34:80:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BB:F7:0A:47:97:C5:A5:A2:8E:29:FC:77:DE:0B:09:F2:D1:EF:32
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/YLv3CkeXxaWijin8d94LCfLR7zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ed:39:20:f4:7b:02:cd:5c:28:f4:e6:47:a8:1a:fa:42:68:
00:95:5d:6e:21:d6:29:4b:eb:57:05:69:3c:3d:de:2a:97:ad:
c4:59:a7:58:7d:d3:85:7c:52:88:84:d1:8f:b4:57:a9:52:c3:
00:9e:fd:94:d5:4e:c3:70:53:60:69:00:af:8c:21:60:2c:1e:
51:12:b2:e9:05:e9:6d:dc:e0:f5:ab:17:a1:78:80:09:53:b8:
6a:04:be:3f:f1:53:4c:d6:24:f8:a0:c0:4f:14:a5:d1:5f:f1:
08:87:e3:65:a7:ac:4c:13:0f:75:09:a2:5a:18:31:03:d0:a8:
8e:41:7e:c0:45:ce:bb:a5:d2:f5:1d:89:c5:3e:62:ff:b2:1e:
7c:64:1a:32:28:61:90:8b:e4:06:f8:5c:69:a0:0f:0e:15:1f:
ef:55:9f:b0:23:36:f1:7c:ea:75:2a:32:18:3c:33:c6:5c:fa:
3c:a8:0b:5b:ef:46:0f:9f:da:7f:1b:2c:94:e3:30:7f:d6:2b:
83:56:dd:90:56:f9:83:be:e3:0f:3c:ca:5b:5b:e4:a4:f1:e8:
ab:ca:d1:0f:36:4e:02:8d:f6:54:05:e6:6d:8c:e0:28:46:c4:
1b:64:a6:2f:04:7b:e7:ff:82:36:68:f4:73:6b:07:e3:28:dd:
e8:4f:2e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 19:04:46 2024 by rpki-client on console-ams.rpki-client.org