Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/d7nJ17imN_2IP_L0ScAi2Vuo4jE.roa
File: d7nJ17imN_2IP_L0ScAi2Vuo4jE.roa (raw, json)
Hash identifier: WVjkKx1XkipRhmTVfZ6HHEbUNAkX1jfdbdjTgynySG0=
Subject key identifier: 77:B9:C9:D7:B8:A6:37:FD:88:3F:F2:F4:49:C0:22:D9:5B:A8:E2:31
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0AE5E6E7B4E12F0D32EC7AB5F0A3B1
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/d7nJ17imN_2IP_L0ScAi2Vuo4jE.roa
Signing time: Sun 01 Jan 2023 11:15:08 +0000
ROA not before: Sun 01 Jan 2023 11:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210703
IP address blocks: 46.37.124.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e5:e6:e7:b4:e1:2f:0d:32:ec:7a:b5:f0:a3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77b9c9d7b8a637fd883ff2f449c022d95ba8e231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:48:f0:75:d5:e0:12:2e:e3:85:2d:ab:46:
99:18:e3:fb:c1:7c:0b:1b:26:42:b9:ec:be:8b:6f:
70:94:5c:0f:fa:c4:c8:b3:52:2b:94:b6:f4:a6:33:
50:79:46:39:d8:5e:80:48:f5:54:43:ee:34:cf:e0:
01:ce:c9:f8:a6:be:38:d6:28:7c:d0:a4:8a:9d:7d:
87:fa:0d:1c:02:85:b2:13:b8:8f:c7:b0:5b:98:71:
a9:96:43:2d:a8:d9:bc:58:63:0c:c2:ef:f9:7d:b2:
41:5c:61:48:4e:6f:80:71:91:cc:ba:73:5c:4e:17:
f6:06:03:d7:bf:dc:61:14:58:a0:19:0a:49:fe:06:
79:bb:93:55:13:b0:7f:2e:0a:8d:9f:20:80:5d:23:
da:8e:c3:a6:58:64:44:09:db:0b:2c:ca:9b:00:63:
9e:ef:e6:e9:fa:25:c6:a4:0c:4e:fa:41:9d:ce:4a:
35:e0:f6:3e:78:8c:f5:f1:fa:a4:12:a5:f0:dd:4c:
9c:9a:91:27:91:5c:f2:49:e9:3e:5c:c8:9a:72:40:
63:41:f0:3f:3a:8b:03:7d:4f:72:3f:dd:5a:f8:ab:
fa:7d:95:aa:8b:21:07:59:28:5f:9c:41:b2:0f:78:
f5:95:08:a3:a2:c5:ff:71:0f:d2:2d:2e:ca:dd:d3:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:C9:D7:B8:A6:37:FD:88:3F:F2:F4:49:C0:22:D9:5B:A8:E2:31
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/d7nJ17imN_2IP_L0ScAi2Vuo4jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.123.0-46.37.124.255
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:83:c4:97:1a:f0:60:e7:50:2e:92:83:5b:61:6f:4f:3b:4f:
a1:b5:f2:bf:8e:fa:f0:84:ed:8e:4c:4e:44:cc:f3:69:27:9c:
81:4c:a0:ee:35:50:3a:39:a3:97:ee:7b:51:a9:14:97:25:1f:
a3:d9:78:ca:e7:26:c4:af:7f:dc:c2:50:47:3d:ef:aa:8b:07:
96:9c:10:30:36:6d:0a:4a:9b:07:7a:76:d7:4a:8c:96:81:97:
bb:ec:5e:a2:28:27:cc:e5:4d:50:a3:f9:24:69:55:2b:bb:9b:
a2:af:38:9f:ea:eb:e8:47:53:25:47:cd:6d:2b:68:20:9f:4d:
eb:6a:75:3b:5e:f4:8e:19:fd:c5:50:0a:ab:42:1c:65:4a:bd:
9f:57:70:30:04:56:af:ef:98:2d:9c:31:a7:b2:8a:8e:28:8d:
47:c5:2f:5f:ca:e0:11:87:57:91:4d:c7:34:6f:5f:04:22:9c:
8f:16:22:73:fb:7e:1b:bf:5b:11:cc:fa:91:1d:23:98:7e:7d:
6b:ec:78:4b:d5:ff:5b:56:5d:ab:17:af:2b:df:43:f4:99:4c:
21:fd:5a:a8:83:e8:8c:d7:f7:de:ce:d8:d7:5b:c9:6f:2e:d1:
fe:6b:af:b2:26:4e:36:75:74:90:65:a7:06:f0:57:b1:62:af:
6b:8a:ea:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org