Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fkL2A1TWQK0XtdBWY3OjdRiw-o8.roa
File: fkL2A1TWQK0XtdBWY3OjdRiw-o8.roa (raw, json)
Hash identifier: SVfzT70AQBQRmmkzhrjWLjk6KTVUjaan1Fa4jB2wsc4=
Subject key identifier: 7E:42:F6:03:54:D6:40:AD:17:B5:D0:56:63:73:A3:75:18:B0:FA:8F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01879F0472181E6A0528F6F27E1F481907B1
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fkL2A1TWQK0XtdBWY3OjdRiw-o8.roa
Signing time: Thu 20 Apr 2023 14:14:41 +0000
ROA not before: Thu 20 Apr 2023 14:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.124.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9f:04:72:18:1e:6a:05:28:f6:f2:7e:1f:48:19:07:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 20 14:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e42f60354d640ad17b5d0566373a37518b0fa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:43:e6:a4:be:c0:11:1a:2d:98:93:83:14:5b:
4b:cd:17:76:00:f7:bb:b7:69:a0:b8:c4:ee:71:4d:
45:02:4c:4b:2c:6a:3b:12:20:ec:fc:28:5b:37:e7:
42:00:16:88:5a:16:36:01:a4:4b:b0:fe:04:18:00:
1c:df:86:86:70:39:7d:04:1d:ef:a9:31:8a:b1:b4:
af:0d:82:9b:bd:4d:17:ff:e6:46:93:6d:b7:13:47:
8f:f0:15:4a:51:bf:58:b6:46:44:e3:b3:bb:31:ed:
0f:90:ca:7d:6d:c1:14:cd:bd:23:1b:b7:3c:d4:95:
66:f5:28:a5:d8:a2:60:ca:08:e0:e4:5a:5d:9f:60:
63:3d:40:39:71:d2:f6:ba:18:3e:e0:23:0e:47:8e:
e4:71:ce:d1:74:08:5e:7c:6c:b9:19:9e:df:b7:4d:
cb:31:d0:14:5b:d0:2c:6b:64:cd:1d:0e:9a:b5:a1:
3a:11:b0:36:19:91:b9:43:24:bf:db:02:fe:de:3a:
9c:1f:ae:28:ff:a7:24:4d:90:2c:4a:4e:90:3a:0a:
84:78:6c:25:35:b0:67:23:1e:16:7f:60:ab:19:2b:
ea:cf:a8:af:67:19:dd:62:c2:19:25:42:0e:08:00:
2a:28:fd:9f:a3:22:23:54:23:6c:3a:c4:5a:58:f4:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:F6:03:54:D6:40:AD:17:B5:D0:56:63:73:A3:75:18:B0:FA:8F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fkL2A1TWQK0XtdBWY3OjdRiw-o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.124.0/24
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:86:60:43:0a:90:af:0a:38:51:b3:48:7c:f1:83:16:32:f2:
7d:ab:cb:7f:d7:fb:65:f5:e6:9a:04:5a:8f:a0:0e:85:ef:9b:
89:62:d8:4d:0c:72:70:19:5b:52:db:b8:56:3e:18:58:ef:c7:
5b:86:99:42:cf:f7:6e:33:50:5c:5b:ba:8f:aa:d8:39:b0:07:
24:11:5d:cb:87:50:e7:97:93:73:2c:2d:14:c5:f1:8f:6c:2f:
ef:08:fa:50:e9:8a:f9:a9:e1:58:d3:c7:01:32:d0:44:06:fc:
6f:cd:82:bf:95:54:70:6d:86:a4:b6:dc:35:5a:cb:42:f3:24:
b5:d6:06:c7:d2:5c:70:41:c6:c8:5c:26:fe:9d:c6:a9:dd:c3:
3a:e7:a9:70:57:74:c0:ff:15:e8:3a:22:43:8a:8a:2f:a3:1c:
74:e7:6f:ec:38:5f:61:5a:6b:8c:18:7d:be:cd:d4:59:46:be:
e3:2a:c7:5b:b6:cb:f1:e9:88:95:4c:db:c4:c6:7d:ae:a0:2f:
ef:dd:0e:ec:86:f9:eb:ad:af:be:2e:c2:75:9e:1c:06:bb:0e:
38:1d:c6:b2:f4:b7:18:80:3d:8f:fb:42:c7:c5:94:fa:33:30:
10:be:5e:6f:09:f3:31:3e:59:12:68:e8:a6:71:1e:b9:41:40:
62:0f:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org