Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/d4QplvWZcqPHgB6O3z1nztCl59o.roa
File: d4QplvWZcqPHgB6O3z1nztCl59o.roa (raw, json)
Hash identifier: o7xGGQXA5Di5XLgaVMhgylgi/S4CUA/VfjdyS/gJek8=
Subject key identifier: 77:84:29:96:F5:99:72:A3:C7:80:1E:8E:DF:3D:67:CE:D0:A5:E7:DA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018B6719A602FD0120D8213C48C99280A056
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/d4QplvWZcqPHgB6O3z1nztCl59o.roa
Signing time: Wed 25 Oct 2023 13:50:15 +0000
ROA not before: Wed 25 Oct 2023 13:50:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:19:a6:02:fd:01:20:d8:21:3c:48:c9:92:80:a0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 25 13:50:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77842996f59972a3c7801e8edf3d67ced0a5e7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:39:82:13:b9:85:db:84:38:09:33:46:bf:
60:71:52:39:1d:b7:a8:51:26:e7:90:02:6e:ab:c7:
c4:24:db:ce:cb:35:26:45:d2:a2:eb:7a:f7:70:c7:
e3:7c:2d:2b:af:07:2d:0b:fe:d9:ee:30:58:69:9a:
8e:0c:0f:c5:a2:8e:70:f5:c5:f7:a8:eb:fa:db:f8:
5a:92:2e:bb:5e:2a:8a:f1:62:16:cc:c2:7f:ef:f2:
08:03:cb:d9:21:19:e4:3c:92:55:2e:40:e3:2f:46:
01:9c:b9:03:76:b7:6e:94:e1:b0:16:ed:a0:74:b8:
59:21:28:c4:4d:9f:6a:e1:1f:df:ea:99:bb:5f:b8:
ae:23:ee:73:30:d2:1a:69:f5:77:a8:49:8a:f1:05:
f6:c4:9a:9b:67:f0:3e:a9:31:58:be:59:ac:17:9c:
ea:bb:a3:8b:2d:2d:ed:ca:25:18:e7:d0:06:c3:83:
ea:86:c3:38:cd:7b:d7:e0:60:01:f0:e1:e4:88:19:
8a:0b:4f:dc:06:41:d1:d5:07:45:73:ab:c3:f2:d8:
39:46:ca:cc:a0:4b:a6:db:fc:20:3b:69:0c:f2:82:
67:e6:5e:c3:ff:a7:cf:1b:33:24:03:83:be:ac:7f:
74:6d:34:9c:ef:64:99:51:3e:0e:76:b1:de:45:75:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:84:29:96:F5:99:72:A3:C7:80:1E:8E:DF:3D:67:CE:D0:A5:E7:DA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/d4QplvWZcqPHgB6O3z1nztCl59o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
77:eb:64:a4:32:05:28:ac:7a:bb:db:1e:59:72:02:6f:57:9b:
cc:f1:91:bd:7d:57:63:ab:c5:2e:11:29:ad:3f:d4:5f:14:d2:
ee:1b:8f:87:c1:31:92:f4:56:27:3a:a1:e2:0c:e4:2b:80:f1:
8b:20:29:da:56:0a:0e:1a:72:2c:5e:84:8f:81:30:3c:d7:74:
d6:4b:9c:0e:b3:fb:82:e1:34:ab:36:57:36:95:a4:55:ae:92:
70:a9:37:1a:30:13:af:1b:32:7a:ca:27:b3:57:3d:43:c0:87:
57:85:ae:bb:4a:30:54:0b:10:6b:8b:e0:9e:87:fd:da:58:d8:
98:1f:a6:1e:20:72:cc:e2:73:de:b4:ed:45:48:24:fe:2b:58:
44:0e:e8:f1:74:13:2d:8f:bd:fb:fc:1b:8e:e7:6e:e2:98:51:
2c:5d:27:e0:58:5b:58:f6:f6:0a:4b:06:e5:d5:81:20:3e:96:
30:30:56:ed:34:a9:78:79:90:45:48:a3:37:da:4f:17:b2:66:
b9:66:53:f5:09:24:58:f7:b3:43:cb:14:13:6f:dc:95:de:9d:
1a:7c:fc:5c:5d:89:7f:33:49:50:fc:16:97:8f:ed:0d:a7:95:
7e:3a:f8:21:a1:a6:33:0f:67:41:67:b7:ab:dd:29:98:5b:38:
cf:bc:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 09:42:27 2023 by rpki-client on console-ams.rpki-client.org