Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ZL-JSi4sZKVxBjMQhAy3dr-_f_E.roa
File: ZL-JSi4sZKVxBjMQhAy3dr-_f_E.roa (raw, json)
Hash identifier: SvWkN2fyEsckmaj4GxJTD1DV+xOoAQ32OpbByLp6uow=
Subject key identifier: 64:BF:89:4A:2E:2C:64:A5:71:06:33:10:84:0C:B7:76:BF:BF:7F:F1
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0190CEC1B2C8A52A52945959E8F18DFF9793
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ZL-JSi4sZKVxBjMQhAy3dr-_f_E.roa
Signing time: Sat 20 Jul 2024 06:08:38 +0000
ROA not before: Sat 20 Jul 2024 06:08:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 19:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ce:c1:b2:c8:a5:2a:52:94:59:59:e8:f1:8d:ff:97:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 20 06:08:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64bf894a2e2c64a571063310840cb776bfbf7ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:cb:e6:58:c5:a4:45:d5:67:61:06:bd:81:
7d:73:ca:fa:e5:97:ef:45:ba:c7:37:de:12:72:82:
ff:22:94:d6:46:6f:39:f2:12:b0:0f:29:ba:8a:04:
e2:85:a9:0f:2d:e3:a1:8e:a6:5e:a3:69:13:d3:9f:
e1:4a:94:cc:71:00:88:0a:de:fc:4c:6b:5a:0f:f4:
9d:8a:c9:2e:a8:04:58:9f:4f:18:af:99:7f:0c:41:
9b:50:6c:f8:ae:9d:ab:f4:30:07:95:25:ce:ae:cd:
84:75:12:00:c9:06:a8:18:2f:4a:92:91:12:1e:6f:
da:c7:3d:d4:a6:69:aa:09:64:02:43:df:be:0e:74:
53:f5:9b:5d:28:74:53:cf:c3:39:bc:9d:29:d3:fb:
cc:07:66:a2:f3:5e:f1:79:67:11:b6:c0:53:33:79:
da:b5:73:f0:2f:a8:70:03:75:a3:98:66:61:5f:8d:
c7:01:1e:44:77:f0:ef:da:04:49:a0:4d:62:e6:f6:
7e:7a:7a:5d:27:68:3e:29:a2:d7:de:59:cc:e7:0e:
cd:b0:eb:2d:18:22:e8:b7:a8:c7:51:bd:a6:29:3f:
45:26:c8:3e:a9:e2:bc:4d:69:98:01:d3:75:83:8a:
e7:79:f0:22:05:a2:d0:4b:53:71:f7:65:01:3f:24:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BF:89:4A:2E:2C:64:A5:71:06:33:10:84:0C:B7:76:BF:BF:7F:F1
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ZL-JSi4sZKVxBjMQhAy3dr-_f_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.118.0/24
46.37.122.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c5:b9:f7:c1:a1:79:47:2e:e7:fd:f8:f0:26:db:6f:d9:91:
3d:ef:88:4d:a0:fc:0c:72:a2:63:95:95:a7:aa:cd:12:67:eb:
e2:49:16:19:45:3d:83:11:58:5d:f7:21:a8:e9:7e:34:39:16:
6e:24:89:37:a8:c3:70:50:03:b4:62:74:bd:76:0d:55:9c:e5:
75:4f:92:a7:30:52:ff:25:c2:bb:ff:1a:00:86:8a:d6:37:7b:
53:0f:15:9c:e5:9b:88:d3:2f:e9:0f:b7:7c:ba:f9:f4:a9:88:
5c:9d:98:2b:0f:b7:3f:88:ec:4e:0b:bd:d9:33:87:f9:bb:7f:
e8:fc:0d:bb:3e:37:34:ec:71:32:29:69:07:df:a0:2a:e7:14:
81:90:20:f4:4f:92:90:9e:17:f6:7f:d9:d8:71:a0:58:7b:db:
8c:d4:ef:98:8c:6a:6b:20:07:a2:0f:77:bc:38:46:bc:60:39:
d0:42:0e:8b:a5:34:a2:e7:5f:f2:a7:e4:02:81:5a:7c:ba:b0:
80:2d:12:9e:e8:3d:b1:d4:fd:41:3a:b1:76:85:c8:f2:ad:ab:
90:08:90:1e:56:5d:fd:2e:4d:d0:44:d2:17:c1:3e:90:41:91:
69:27:6f:ad:0d:24:97:db:25:68:1d:0e:07:ce:c9:2a:a6:04:
f1:eb:05:27
-----BEGIN CERTIFICATE-----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Generated at Sun Jul 28 21:46:16 2024 by rpki-client on console-ams.rpki-client.org