Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/c4N2Gls7ejAGW5kjAZuTF8LjRAs.roa
File: c4N2Gls7ejAGW5kjAZuTF8LjRAs.roa (raw, json)
Hash identifier: zc7+9qIAsIN+aNLlRrSRYkXAAfnX1DS3JX78cXdliTo=
Subject key identifier: 73:83:76:1A:5B:3B:7A:30:06:5B:99:23:01:9B:93:17:C2:E3:44:0B
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01879F055C0068C310D8741CE852279DA685
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/c4N2Gls7ejAGW5kjAZuTF8LjRAs.roa
Signing time: Thu 20 Apr 2023 14:15:41 +0000
ROA not before: Thu 20 Apr 2023 14:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 46.37.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:05:5c:00:68:c3:10:d8:74:1c:e8:52:27:9d:a6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 20 14:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7383761a5b3b7a30065b9923019b9317c2e3440b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6b:28:8d:3f:ad:b4:e9:62:95:6e:57:f7:03:
56:a7:b2:7b:9b:ba:f7:0b:a3:c2:42:73:bd:a2:6d:
8f:08:f1:c5:2f:92:b3:ed:e7:89:ce:ce:dc:79:4c:
cb:6a:0e:81:1d:63:19:27:09:1d:09:d7:7c:05:74:
b5:58:d6:0d:d2:a1:6b:64:2d:59:5b:ea:7a:16:0e:
51:23:11:ea:0e:d8:e5:8a:3a:34:ee:7a:57:fc:f0:
48:9e:ed:d8:56:92:2e:5a:91:0c:ff:6e:78:e2:eb:
28:92:d5:90:3a:97:9a:cb:8e:88:5c:e1:87:f1:d2:
1e:8e:d6:6a:f2:56:2c:44:0d:50:43:3b:18:8a:a9:
bd:68:71:9f:da:e8:71:90:52:11:ac:b4:72:a9:e7:
c0:d5:ad:40:f9:0c:fe:8b:fb:6c:ba:ac:c2:c0:ac:
57:df:e6:ba:51:0e:71:1d:28:c9:a7:d5:1e:07:6f:
ae:94:d8:92:c7:4b:5e:ee:1c:cf:c6:95:13:a9:7c:
0e:40:f9:20:d4:03:64:8b:2f:36:c7:6e:fa:f0:a9:
2a:26:ce:b7:28:1b:c5:de:d3:c0:0a:fa:ee:48:5d:
af:0e:29:b6:72:b8:e5:fd:25:d5:28:ff:c5:1d:69:
af:ec:e6:04:e9:d4:f4:c2:1b:7c:8b:6d:8c:ca:7c:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:83:76:1A:5B:3B:7A:30:06:5B:99:23:01:9B:93:17:C2:E3:44:0B
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/c4N2Gls7ejAGW5kjAZuTF8LjRAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.123.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:3e:20:cd:eb:4d:a7:8a:b8:c1:89:de:9e:e5:4b:7a:ee:bf:
3d:91:de:57:42:bc:9f:e2:ee:64:86:4a:46:a0:9d:0f:32:59:
27:03:b1:8e:c3:f4:37:33:58:c8:db:e6:c0:38:05:77:9c:8c:
6c:1d:ac:41:d4:21:7f:6c:d8:7b:ea:9a:2a:eb:f5:cc:7b:18:
d1:56:a5:3f:38:6e:e5:a2:fc:35:a7:1c:7a:f4:a1:81:5e:08:
e7:30:8a:b6:2c:8a:7a:e6:e0:a3:83:e4:df:a2:55:25:cd:9e:
d1:51:a0:3a:ff:ab:b3:f7:a4:a8:81:2b:13:da:1e:66:dc:6e:
45:ff:00:16:61:ef:26:27:ac:e3:2d:09:22:32:d8:1e:a3:af:
33:85:13:3b:c3:2b:a8:a4:b2:b4:e8:8b:35:f6:38:e2:bb:38:
ac:6e:8a:ea:75:f1:50:91:f6:f4:ab:57:07:1d:39:bb:30:ef:
f0:7c:7a:9a:c9:27:db:a9:c9:2c:2d:18:9c:8b:48:53:33:38:
92:61:5b:58:49:02:8a:39:43:67:4f:4e:98:f1:83:4d:87:dd:
10:54:bf:d7:97:6d:0e:49:af:ce:29:c8:7c:d5:f4:b9:d7:a0:
5e:c0:23:63:e7:37:33:9b:ec:d0:71:25:9d:f9:d0:83:be:4d:
d5:9a:e0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org