Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/bh-sOSh9eARL0BVtgcFnPRU6cyo.roa
File: bh-sOSh9eARL0BVtgcFnPRU6cyo.roa (raw, json)
Hash identifier: OGUdBLH8zKapT7TgbbxqN7xDE+zQIOBGGtPcaF0iVrw=
Subject key identifier: 6E:1F:AC:39:28:7D:78:04:4B:D0:15:6D:81:C1:67:3D:15:3A:73:2A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0187E1EA04FF7E58E4C993BB91F73637DACC
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/bh-sOSh9eARL0BVtgcFnPRU6cyo.roa
Signing time: Wed 03 May 2023 14:00:22 +0000
ROA not before: Wed 03 May 2023 14:00:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.97.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 17:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:ea:04:ff:7e:58:e4:c9:93:bb:91:f7:36:37:da:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 3 14:00:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e1fac39287d78044bd0156d81c1673d153a732a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:a9:06:2c:f9:a6:b2:06:60:13:79:82:2f:
bd:6c:16:52:1e:00:e4:a3:f2:69:11:40:7b:c1:ad:
73:4d:68:de:77:46:cf:b9:22:cd:e9:3f:95:75:4f:
f4:25:46:95:7b:dd:83:bc:c3:93:f5:51:e2:14:bb:
64:43:09:d4:87:62:7b:bd:68:ed:9d:c5:10:8c:5d:
7c:6c:05:a7:c7:ea:49:4e:ba:fb:f7:d3:c8:c4:00:
bb:08:29:f0:df:41:2d:94:7a:8e:6e:b0:77:ca:dd:
43:24:b7:ba:73:83:37:47:63:d7:a9:d1:4c:ea:e5:
a5:3b:b4:85:1a:ce:7b:a6:a7:17:ee:88:21:46:11:
f6:69:fc:b4:a4:0b:d3:55:95:1c:1e:3b:dd:79:ae:
ec:cf:08:83:45:79:ff:76:bd:54:75:65:c7:ae:71:
88:ff:62:62:84:0a:b5:5b:0f:ff:c5:01:a7:1b:71:
e7:a5:29:8d:2c:a0:c2:ef:dd:59:e3:0e:ea:52:16:
2e:1d:99:15:bd:67:07:04:03:95:1f:6b:d9:ff:63:
72:92:bb:27:ad:f4:45:49:7c:d1:99:cd:f7:5b:36:
38:bb:87:1b:4f:7a:97:3f:fa:30:91:f3:02:87:fe:
37:8b:92:b0:74:db:f0:23:19:82:16:72:8a:de:0c:
00:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1F:AC:39:28:7D:78:04:4B:D0:15:6D:81:C1:67:3D:15:3A:73:2A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/bh-sOSh9eARL0BVtgcFnPRU6cyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0-46.37.98.255
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
2d:5b:d6:f1:73:5f:ea:8e:5d:66:f8:8d:f9:91:8c:43:ec:15:
7d:c4:48:db:25:03:57:2e:fd:74:09:0a:c7:3b:32:ba:f7:a6:
eb:9a:1d:e0:42:57:b2:36:6b:04:1e:1c:bd:27:96:fa:61:bd:
dc:d7:86:5b:43:3e:33:fe:42:97:9b:49:8e:6a:43:95:b4:c0:
c6:b6:18:41:f1:6a:62:ac:ff:0e:4b:89:eb:29:dd:35:77:0a:
3d:0a:e3:6e:75:b0:6f:54:0c:a0:47:95:03:eb:b7:31:69:2d:
52:ca:cf:4c:81:82:e2:c6:79:f3:21:33:16:f7:87:a0:e0:cf:
0d:1c:0a:0a:f4:f0:63:21:77:dd:72:95:f8:a8:36:1f:88:20:
e2:6e:cd:cd:d5:d2:84:5c:1d:ed:87:fe:42:e8:88:b4:41:55:
72:14:75:11:7f:5a:55:48:99:ce:04:84:b2:6a:79:2e:89:dc:
f6:39:ee:b3:28:76:3d:fb:8d:c7:9e:f3:dd:3c:79:b6:fe:dd:
34:62:0f:0d:ae:1e:9d:32:77:ab:b6:cc:dc:2e:63:23:00:3e:
8f:a7:38:d6:4b:72:21:96:a7:e9:21:5f:b8:7a:9c:a0:68:c5:
01:45:d1:5a:e0:42:b7:fe:7f:3c:1f:a9:84:37:f9:4a:d1:5c:
d4:41:9b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org