Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ZkjS0cD2lCQI91Lgk-oGNDgqNdk.roa
File: ZkjS0cD2lCQI91Lgk-oGNDgqNdk.roa (raw, json)
Hash identifier: Eipp6aE+Tz9PME6rVZRNsseCPOHvuu3bnCHxlmjUBF4=
Subject key identifier: 66:48:D2:D1:C0:F6:94:24:08:F7:52:E0:93:EA:06:34:38:2A:35:D9
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0185F521240B823FCE5582CA59B173D93116
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ZkjS0cD2lCQI91Lgk-oGNDgqNdk.roa
Signing time: Fri 27 Jan 2023 21:27:47 +0000
ROA not before: Fri 27 Jan 2023 21:27:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206275
IP address blocks: 46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f5:21:24:0b:82:3f:ce:55:82:ca:59:b1:73:d9:31:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 27 21:27:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6648d2d1c0f6942408f752e093ea0634382a35d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:1a:cc:05:6a:27:46:44:d4:d4:71:82:50:
75:ee:91:65:93:be:ca:3a:65:45:06:89:3b:e8:2f:
3a:98:86:90:f4:65:e0:f9:23:9f:96:70:01:f9:ff:
5b:20:36:fe:d9:c3:44:3b:2b:94:b8:09:7d:4c:49:
aa:55:72:4c:7a:b6:bf:a7:86:45:6e:44:46:ed:29:
bc:c3:5a:27:b3:c0:8f:97:44:da:b7:95:68:1e:c8:
2c:76:40:e5:27:0e:43:09:ef:25:6c:9f:a4:f2:be:
84:53:00:54:d1:12:e8:34:7a:ab:d5:f5:8b:26:52:
38:9f:3c:74:35:a1:6f:b6:aa:2d:99:62:c6:13:6c:
83:dc:2a:ad:44:1b:c4:ad:e0:e9:7d:06:26:e5:45:
a3:41:17:c1:0d:78:5d:fd:fa:93:f3:c2:ed:f4:13:
8a:ab:e5:78:10:79:f7:a8:18:b9:a2:42:1c:de:6b:
a5:e0:df:b4:0a:97:8b:d8:12:40:9d:5a:be:cd:1d:
82:a8:54:24:1f:3e:32:4d:de:01:33:38:2b:e7:70:
eb:67:6a:7f:69:ae:bf:01:ad:aa:07:35:b3:c2:eb:
78:0e:4e:c5:75:e7:6d:08:65:a1:a6:79:f8:3a:a2:
af:45:df:26:28:74:56:4c:4f:3a:c0:6d:4f:6e:03:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:48:D2:D1:C0:F6:94:24:08:F7:52:E0:93:EA:06:34:38:2A:35:D9
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ZkjS0cD2lCQI91Lgk-oGNDgqNdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:27:51:fb:7c:7f:37:a8:c4:3d:2b:9a:78:b0:92:3b:38:32:
d8:8d:8c:ec:9a:51:5f:0a:ca:32:d1:45:20:7a:21:1a:5d:56:
23:ed:7f:bf:19:10:d9:24:4a:78:2e:aa:ce:a3:f1:02:1b:9e:
a9:b0:b7:d4:63:33:8d:ce:2b:88:a9:5f:d8:11:49:fe:fe:a2:
c7:8e:1d:2f:11:09:05:c8:55:a5:dd:e0:9d:0a:06:8d:97:85:
37:0d:41:90:24:d5:ec:cf:3c:32:2a:b7:c8:ce:2e:42:a1:06:
fa:6b:d4:5a:5f:6a:19:0f:ba:a1:bc:85:7b:40:84:74:3b:0b:
29:67:2b:a3:6f:21:00:0a:13:96:1a:68:02:4a:ed:2d:d4:66:
93:35:57:8d:79:c2:68:97:08:9f:d5:ff:87:c1:cf:a0:89:d6:
5c:a9:3a:ce:f7:c1:59:2d:d3:aa:70:20:58:cf:b6:c1:fb:72:
3f:d8:16:01:28:67:1a:a0:6b:7f:e4:80:c1:61:c0:52:f4:fb:
57:1b:59:26:24:9d:1a:67:ed:4d:35:44:4a:0d:b0:9a:44:05:
be:5f:bb:bd:57:76:99:09:98:d2:17:d0:25:fe:79:23:3c:f4:
68:20:30:ec:1e:45:85:5c:df:31:f7:b0:ec:29:27:4c:07:5b:
a2:3e:59:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYX1ISQLgj/OVYLKWbFz2TEWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwMTI3MjEyNzQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjQ4ZDJkMWMwZjY5NDI0MDhmNzUyZTA5M2VhMDYzNDM4MmEzNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYoazAVqJ0ZE1NRxglB17pFlk77K
OmVFBok76C86mIaQ9GXg+SOflnAB+f9bIDb+2cNEOyuUuAl9TEmqVXJMera/p4ZF
bkRG7Sm8w1ons8CPl0Tat5VoHsgsdkDlJw5DCe8lbJ+k8r6EUwBU0RLoNHqr1fWL
JlI4nzx0NaFvtqotmWLGE2yD3CqtRBvEreDpfQYm5UWjQRfBDXhd/fqT88Lt9BOK
q+V4EHn3qBi5okIc3mul4N+0CpeL2BJAnVq+zR2CqFQkHz4yTd4BMzgr53DrZ2p/
aa6/Aa2qBzWzwut4Dk7FdedtCGWhpnn4OqKvRd8mKHRWTE86wG1PbgONAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGZI0tHA9pQkCPdS4JPqBjQ4KjXZMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvWmtqUzBjRDJsQ1FJOTFMZ2stb0dORGdxTmRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVxMA0G
CSqGSIb3DQEBCwUAA4IBAQBKJ1H7fH83qMQ9K5p4sJI7ODLYjYzsmlFfCsoy0UUg
eiEaXVYj7X+/GRDZJEp4LqrOo/ECG56psLfUYzONziuIqV/YEUn+/qLHjh0vEQkF
yFWl3eCdCgaNl4U3DUGQJNXszzwyKrfIzi5CoQb6a9RaX2oZD7qhvIV7QIR0Owsp
ZyujbyEAChOWGmgCSu0t1GaTNVeNecJolwif1f+Hwc+gidZcqTrO98FZLdOqcCBY
z7bB+3I/2BYBKGcaoGt/5IDBYcBS9PtXG1kmJJ0aZ+1NNURKDbCaRAW+X7u9V3aZ
CZjSF9Al/nkjPPRoIDDsHkWFXN8x97DsKSdMB1uiPlmb
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:05 2024 by rpki-client on console-ams.rpki-client.org