Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fgqxWLh5_anyDbHda6lPZ6tGc60.roa
File: fgqxWLh5_anyDbHda6lPZ6tGc60.roa (raw, json)
Hash identifier: OjNyvrZ8tIlhKeZzfr+gYG+EO8ClqYyXeqTW9Xe4xkk=
Subject key identifier: 7E:0A:B1:58:B8:79:FD:A9:F2:0D:B1:DD:6B:A9:4F:67:AB:46:73:AD
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01894BC385A1544D948A6C667DDEFB65A367
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fgqxWLh5_anyDbHda6lPZ6tGc60.roa
Signing time: Wed 12 Jul 2023 20:20:52 +0000
ROA not before: Wed 12 Jul 2023 20:20:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:c3:85:a1:54:4d:94:8a:6c:66:7d:de:fb:65:a3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 12 20:20:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e0ab158b879fda9f20db1dd6ba94f67ab4673ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c8:6e:ca:87:93:98:e0:41:7a:89:b9:df:3b:
fb:30:e2:0c:bc:dd:21:1f:c5:3b:87:20:f9:b9:f0:
01:07:d9:1e:96:66:e9:d0:71:2c:9e:09:f4:9c:1c:
ba:85:2a:d5:2a:5d:3f:f7:78:e7:d4:7e:c5:f3:5e:
86:b5:5f:09:9f:6c:4a:d3:6a:16:6e:a8:d7:16:5e:
d6:16:90:6f:b2:c9:2a:eb:26:06:e7:6a:69:60:e1:
04:22:be:2d:a8:7e:ca:91:cb:72:3b:e2:8e:3f:96:
80:74:13:26:05:a2:bb:71:8d:91:3c:43:ee:64:76:
83:2f:09:c3:1a:57:19:43:f9:8e:fa:b1:8d:08:fd:
f6:ac:bb:34:c2:0b:91:54:51:23:f8:82:3e:72:52:
2e:10:71:f2:ff:2b:2d:46:63:ce:7b:69:20:18:e6:
71:4e:ae:2b:85:9f:5c:c6:d1:96:ef:5d:08:07:d4:
34:41:fb:f3:37:33:ac:be:0a:9f:ac:65:bb:a4:07:
3a:92:86:59:9e:5c:d4:d9:c2:91:16:d2:0c:f5:fd:
0a:90:58:a6:8f:c2:3e:fb:ee:65:c3:90:f6:70:8a:
5e:10:63:1d:27:d6:6a:90:e8:af:77:35:a7:f5:86:
67:59:a7:cb:bd:8f:9c:e1:db:24:77:54:fe:12:5b:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0A:B1:58:B8:79:FD:A9:F2:0D:B1:DD:6B:A9:4F:67:AB:46:73:AD
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fgqxWLh5_anyDbHda6lPZ6tGc60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
ba:b5:a5:32:a9:7a:f2:de:7c:e2:be:9c:38:23:74:a3:a2:f9:
c6:a2:18:0f:2b:a0:9b:af:0e:13:0b:b5:6f:17:b9:9f:bb:51:
ae:1c:05:e3:4f:c2:a8:93:95:6d:9c:96:6b:11:5f:20:57:da:
49:d7:f8:96:26:be:4b:a6:33:7f:44:f0:05:24:94:87:6d:1d:
14:db:ed:40:82:68:d7:b8:a7:93:f8:b4:06:13:a5:06:f2:54:
51:ad:fc:95:ff:fe:69:3b:22:73:74:30:60:35:18:bf:57:d8:
1c:42:c3:f6:0c:0c:6a:41:7c:2e:0e:80:67:75:0b:a8:9f:91:
09:86:f9:52:41:77:07:1c:7d:62:1a:26:55:b6:36:fd:4f:60:
e9:9c:29:74:8b:be:2a:bf:f3:74:35:ca:56:d3:49:2c:77:c1:
1d:b7:7c:4f:9d:b1:a7:f8:0d:4e:f8:7e:d2:c6:ac:e9:c1:c5:
b3:e0:76:bd:38:6a:83:8a:01:8c:b2:b7:c2:24:ca:43:16:df:
41:4f:aa:f0:8e:ea:14:15:59:2c:18:16:0f:e5:9b:0c:04:9a:
6e:60:31:9d:df:ba:7a:dd:18:64:f8:1b:2b:00:a6:2b:f7:99:
1c:88:12:b5:48:7d:12:19:06:83:b8:f5:cd:2b:ea:ca:1c:55:
4d:96:d6:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org