Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/eVsfcQNM09bPTXB-n2q2W9A-WFI.roa
File: eVsfcQNM09bPTXB-n2q2W9A-WFI.roa (raw, json)
Hash identifier: PSHxi665jemMlh+8bnZ6pNLI3AZY0ATs/BCBW02x2L8=
Subject key identifier: 79:5B:1F:71:03:4C:D3:D6:CF:4D:70:7E:9F:6A:B6:5B:D0:3E:58:52
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018882385D968D1412A803BC51A099EA4179
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/eVsfcQNM09bPTXB-n2q2W9A-WFI.roa
Signing time: Sat 03 Jun 2023 17:05:11 +0000
ROA not before: Sat 03 Jun 2023 17:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.104.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:82:38:5d:96:8d:14:12:a8:03:bc:51:a0:99:ea:41:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 3 17:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=795b1f71034cd3d6cf4d707e9f6ab65bd03e5852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:d8:21:d3:4c:d6:50:d0:b6:71:97:c9:e7:
cd:8f:84:d8:41:64:97:c1:79:e8:04:71:1a:93:ea:
ac:73:74:b4:6f:df:75:60:ec:70:86:09:74:f2:3e:
8a:da:0d:9e:7d:ba:8d:94:1b:19:d9:f7:34:a8:eb:
5e:2a:f3:38:c1:33:91:ed:d8:66:65:c9:ab:da:4b:
93:fd:f6:ea:41:f6:da:30:b6:28:d9:27:c5:ce:22:
b2:a1:c1:58:43:26:30:97:b2:29:70:2c:26:50:52:
7e:19:f9:a5:39:d9:66:b5:34:95:0e:ef:d4:c7:bb:
e5:4e:a9:93:93:00:b8:8d:02:a5:61:89:cd:8f:97:
70:20:e4:f5:4b:24:06:68:bb:f7:c7:30:5b:fe:cf:
f5:22:c3:3f:f0:fd:95:f8:45:33:c6:79:f6:dc:02:
de:74:17:f1:7e:4f:f3:fc:b3:14:58:ea:c8:44:8e:
58:14:66:f9:b8:da:af:e7:5e:80:96:95:b5:5d:ae:
de:59:7d:e7:79:ec:b4:ac:18:ce:a2:51:a8:20:e8:
24:b7:1d:bb:1d:0d:e7:56:81:22:93:fa:71:a3:a4:
b0:af:35:f2:0f:9b:08:7a:b4:60:50:18:6d:c8:1c:
90:c3:f1:98:ce:a2:45:15:41:fe:e5:1b:ab:15:e8:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:1F:71:03:4C:D3:D6:CF:4D:70:7E:9F:6A:B6:5B:D0:3E:58:52
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/eVsfcQNM09bPTXB-n2q2W9A-WFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.104.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
32:66:eb:59:6e:28:fb:d9:a4:49:0e:03:02:6c:7a:3d:df:a4:
03:0f:13:78:b9:29:17:dc:02:e6:37:ee:69:62:ca:59:44:b2:
55:87:af:16:74:45:3a:f9:61:94:83:87:1a:37:63:0d:14:9d:
4b:4d:37:93:00:22:5f:a5:ae:da:4f:f3:a3:e6:57:da:76:c9:
15:32:e9:06:31:25:f3:9b:51:c1:87:a0:00:5f:11:b8:7d:90:
b2:0c:69:fc:ee:65:6e:75:ac:ab:ba:98:60:5b:06:ce:f6:39:
61:b3:95:11:1c:39:01:d4:70:db:b7:3d:39:87:d5:5a:d7:74:
0d:1a:1c:70:2e:7a:28:3d:31:3b:10:78:cd:22:13:60:76:e8:
03:1a:3b:42:e2:75:43:aa:47:37:14:5e:ad:3f:91:6f:96:b0:
3f:6c:e0:8c:35:b1:f4:25:31:ce:ac:51:ea:00:a1:2d:5d:ee:
5c:da:b3:3e:ba:ed:72:46:37:d6:99:66:01:93:f3:94:df:f2:
21:37:24:7a:e8:01:11:47:2a:1d:a1:95:ed:dd:df:80:a3:30:
ff:3d:dd:d4:b3:7f:ff:be:d4:d0:57:ab:47:b5:71:c5:5b:ee:
41:40:35:da:15:cc:22:2d:74:fa:0a:8d:98:a7:6d:e4:84:0c:
64:6c:c5:65
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYiCOF2WjRQSqAO8UaCZ6kF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwNjAzMTcwNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTViMWY3MTAzNGNkM2Q2Y2Y0ZDcwN2U5ZjZhYjY1YmQwM2U1ODUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8bYIdNM1lDQtnGXyefNj4TYQWSX
wXnoBHEak+qsc3S0b991YOxwhgl08j6K2g2efbqNlBsZ2fc0qOteKvM4wTOR7dhm
Zcmr2kuT/fbqQfbaMLYo2SfFziKyocFYQyYwl7IpcCwmUFJ+GfmlOdlmtTSVDu/U
x7vlTqmTkwC4jQKlYYnNj5dwIOT1SyQGaLv3xzBb/s/1IsM/8P2V+EUzxnn23ALe
dBfxfk/z/LMUWOrIRI5YFGb5uNqv516AlpW1Xa7eWX3neey0rBjOolGoIOgktx27
HQ3nVoEik/pxo6SwrzXyD5sIerRgUBhtyByQw/GYzqJFFUH+5RurFeg9TwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHlbH3EDTNPWz01wfp9qtlvQPlhSMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvZVZzZmNRTk0wOWJQVFhCLW4ycTJXOUEtV0ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALiViAwQA
LiVoMAwDBAAuJXEDBAAuJXIwDQYJKoZIhvcNAQELBQADggEBADJm61luKPvZpEkO
AwJsej3fpAMPE3i5KRfcAuY37mliyllEslWHrxZ0RTr5YZSDhxo3Yw0UnUtNN5MA
Il+lrtpP86PmV9p2yRUy6QYxJfObUcGHoABfEbh9kLIMafzuZW51rKu6mGBbBs72
OWGzlREcOQHUcNu3PTmH1VrXdA0aHHAueig9MTsQeM0iE2B26AMaO0LidUOqRzcU
Xq0/kW+WsD9s4Iw1sfQlMc6sUeoAoS1d7lzasz667XJGN9aZZgGT85Tf8iE3JHro
ARFHKh2hle3d34CjMP893dSzf/++1NBXq0e1ccVb7kFANdoVzCItdPoKjZinbeSE
DGRsxWU=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org