Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/YgsCZXnIAq5ult0HxYTuIrUlI2o.roa
File: YgsCZXnIAq5ult0HxYTuIrUlI2o.roa (raw, json)
Hash identifier: GS+z/aQPOrrWNfna4X0CTm0C4Cn7yJ/3sRkwfmy8Wl4=
Subject key identifier: 62:0B:02:65:79:C8:02:AE:6E:96:DD:07:C5:84:EE:22:B5:25:23:6A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0ADEC52842073EE930087F504967D7
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/YgsCZXnIAq5ult0HxYTuIrUlI2o.roa
Signing time: Sun 01 Jan 2023 11:15:07 +0000
ROA not before: Sun 01 Jan 2023 11:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52037
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
46.37.120.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:de:c5:28:42:07:3e:e9:30:08:7f:50:49:67:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=620b026579c802ae6e96dd07c584ee22b525236a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:c7:b1:b0:f8:7a:c3:a6:c1:21:d9:b8:1b:
9d:c0:56:8a:58:21:69:e6:d2:c0:ac:03:8d:a5:dc:
21:81:ba:b1:d0:56:4d:1a:e3:51:b2:a0:29:c8:41:
96:5a:c1:c7:89:e9:3f:64:32:9f:d7:47:d9:1d:98:
1b:9b:9a:be:c8:c3:fc:eb:35:4b:45:7d:93:a4:86:
c5:b3:86:64:62:b5:8d:86:3d:e7:14:18:fb:d3:80:
7c:7b:d5:d0:90:a7:86:9d:6e:de:f5:4c:cb:23:fd:
55:1b:c2:57:29:3e:83:aa:c9:85:a7:54:26:be:c6:
d1:4c:50:7c:f5:7f:d7:e8:98:5a:05:5a:38:4d:c6:
63:c0:eb:bb:88:48:3a:78:d1:a0:19:51:08:11:4e:
09:99:c6:ad:64:a6:8b:4f:2d:ee:84:01:d3:94:24:
8d:78:32:19:21:8b:ff:2b:ba:93:c2:89:52:df:0c:
f5:dd:44:27:33:65:54:dc:0b:9e:01:e6:f9:a5:c7:
f7:5e:22:fa:7a:fd:b7:67:89:06:69:71:53:6d:2b:
67:04:04:14:a9:f5:8c:5f:a3:21:25:4d:0d:30:bd:
08:f5:e5:86:2b:64:e5:0e:ce:bb:17:0d:17:68:9b:
11:04:ea:7a:e4:00:a7:6e:f3:1c:f6:89:46:ac:b4:
73:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0B:02:65:79:C8:02:AE:6E:96:DD:07:C5:84:EE:22:B5:25:23:6A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/YgsCZXnIAq5ult0HxYTuIrUlI2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.118.0/24
46.37.120.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:8a:a3:a1:1e:c6:1c:fc:c4:32:fd:f3:b2:08:3a:c4:9f:d6:
fa:72:95:65:76:64:57:d2:e6:8d:af:e6:49:42:69:45:bb:61:
d9:c5:5f:b8:ea:6d:ed:fc:d5:a4:27:ed:41:d0:6c:af:0d:b0:
57:f5:ec:0e:a4:37:33:49:20:8c:7d:82:9d:c3:52:f0:1c:ce:
80:5e:4d:c5:69:82:f7:7f:78:7a:b4:29:7d:a4:78:80:d5:09:
6e:46:ce:f8:ad:68:f0:7a:30:ae:57:7e:44:5a:dd:49:c8:68:
73:a9:08:e3:81:d9:97:d7:e4:e7:3b:78:1f:b8:a2:06:5b:00:
07:0f:22:52:04:ab:cb:eb:82:e9:b6:e7:de:fc:f6:49:53:0f:
70:7c:5f:12:fa:9b:fe:6d:35:d7:54:24:fa:7a:61:ae:8c:96:
fd:4f:e9:c2:a7:ef:66:1d:18:0f:59:1d:4d:d5:2d:b0:89:6f:
5a:53:56:bf:e8:bd:2d:7c:55:23:26:f3:11:48:72:55:40:73:
35:42:09:8b:dc:92:bc:67:8f:e3:db:5b:c1:4c:a3:17:5c:d6:
f2:ed:9f:46:6f:c6:9e:3f:ac:dd:14:5b:1c:76:0d:7d:b0:8f:
92:df:cf:23:b9:ab:4a:2a:0a:7a:ee:a9:fd:60:a3:1e:d3:83:
de:b7:2e:a4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVtCt7FKEIHPukwCH9QSWfXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwMTAxMTExNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjBiMDI2NTc5YzgwMmFlNmU5NmRkMDdjNTg0ZWUyMmI1MjUyMzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlObHsbD4esOmwSHZuBudwFaKWCFp
5tLArAONpdwhgbqx0FZNGuNRsqApyEGWWsHHiek/ZDKf10fZHZgbm5q+yMP86zVL
RX2TpIbFs4ZkYrWNhj3nFBj704B8e9XQkKeGnW7e9UzLI/1VG8JXKT6DqsmFp1Qm
vsbRTFB89X/X6JhaBVo4TcZjwOu7iEg6eNGgGVEIEU4JmcatZKaLTy3uhAHTlCSN
eDIZIYv/K7qTwolS3wz13UQnM2VU3AueAeb5pcf3XiL6ev23Z4kGaXFTbStnBAQU
qfWMX6MhJU0NML0I9eWGK2TlDs67Fw0XaJsRBOp65ACnbvMc9olGrLRzvQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGILAmV5yAKubpbdB8WE7iK1JSNqMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvWWdzQ1pYbklBcTV1bHQwSHhZVHVJclVsSTJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiVgAwQA
LiV2AwQBLiV4MA0GCSqGSIb3DQEBCwUAA4IBAQAuiqOhHsYc/MQy/fOyCDrEn9b6
cpVldmRX0uaNr+ZJQmlFu2HZxV+46m3t/NWkJ+1B0GyvDbBX9ewOpDczSSCMfYKd
w1LwHM6AXk3FaYL3f3h6tCl9pHiA1QluRs74rWjwejCuV35EWt1JyGhzqQjjgdmX
1+TnO3gfuKIGWwAHDyJSBKvL64Lptufe/PZJUw9wfF8S+pv+bTXXVCT6emGujJb9
T+nCp+9mHRgPWR1N1S2wiW9aU1a/6L0tfFUjJvMRSHJVQHM1QgmL3JK8Z4/j21vB
TKMXXNby7Z9Gb8aeP6zdFFscdg19sI+S388juatKKgp67qn9YKMe04Pety6k
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org