Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fki0Mf2wAAafj5XNt954h1je4Cw.roa
File: fki0Mf2wAAafj5XNt954h1je4Cw.roa (raw, json)
Hash identifier: X7RrwqzlihozNpc/VkrB1JLyC0F9Flhwwi6j0ypYwTQ=
Subject key identifier: 7E:48:B4:31:FD:B0:00:06:9F:8F:95:CD:B7:DE:78:87:58:DE:E0:2C
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0188DD1337FC53FC28D6F2E195838871B041
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fki0Mf2wAAafj5XNt954h1je4Cw.roa
Signing time: Wed 21 Jun 2023 08:30:04 +0000
ROA not before: Wed 21 Jun 2023 08:30:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:13:37:fc:53:fc:28:d6:f2:e1:95:83:88:71:b0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 21 08:30:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e48b431fdb000069f8f95cdb7de788758dee02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:8e:9d:d1:cc:99:3e:a5:8e:8b:d0:8d:ab:
c7:a4:05:91:b1:ce:d8:56:d6:cd:cf:8f:30:af:ae:
8f:62:58:22:31:fc:51:f9:9a:c4:54:8d:c5:5b:90:
a3:fd:d7:d0:4d:48:d3:99:79:d1:e8:54:7f:1f:e6:
27:41:ef:83:db:32:23:79:fa:8b:43:ca:eb:d4:73:
ba:d3:15:b7:45:0c:b5:af:ea:22:4a:0a:d7:63:c3:
40:e6:1b:d6:13:b9:62:31:7d:8c:82:ab:c4:cf:64:
84:d1:89:fe:5e:4d:12:08:6d:b7:6c:00:54:ce:75:
25:94:a1:c5:c0:bd:e1:e3:74:ff:8a:49:40:c0:27:
77:ce:8e:48:1d:f3:5f:b1:19:df:17:87:e4:41:05:
99:66:7d:f4:61:83:99:8a:60:88:a1:70:40:25:2c:
8d:48:be:c2:67:4d:53:20:85:0a:c2:ba:67:76:3f:
50:7c:de:88:c8:f1:bd:70:4c:37:61:cb:e2:15:9a:
f7:99:7d:ba:e3:0e:e3:7a:d3:84:93:55:a8:1e:ec:
9e:75:72:c4:56:5b:88:11:e2:38:b0:01:a7:03:46:
e6:c4:d3:96:39:88:ea:5c:d4:3e:54:c8:2f:7f:eb:
1f:7a:71:29:67:d6:b8:b8:2c:b3:ee:d7:7e:e0:be:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:48:B4:31:FD:B0:00:06:9F:8F:95:CD:B7:DE:78:87:58:DE:E0:2C
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fki0Mf2wAAafj5XNt954h1je4Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
5c:a0:63:fc:d2:34:e4:1d:2e:9d:98:94:de:a7:3e:35:ce:6d:
3c:80:c8:14:84:0c:40:7f:7d:cb:51:72:af:9f:03:da:31:e4:
a5:33:dc:44:a6:51:eb:8f:d7:da:f9:27:62:b9:2e:5d:2f:1e:
23:12:27:aa:80:c6:fd:e8:08:a9:50:39:e9:6f:94:c1:ae:52:
84:db:e2:f4:69:87:2b:3d:26:12:00:c3:3e:96:5e:bf:13:af:
da:31:c9:cd:05:e2:a6:53:11:e7:e8:95:87:3a:db:a1:d2:7c:
e3:a7:f8:e3:33:d8:e2:78:c4:12:80:0f:5d:fa:86:92:a8:22:
9a:71:21:c0:91:71:fe:85:08:0f:c0:4e:b3:9f:da:fd:bb:88:
e9:23:18:16:a4:c3:73:fa:31:e8:f0:4d:22:9c:61:3a:db:fe:
2c:31:9c:58:57:f0:f5:d0:ec:0c:4f:e4:4d:4c:62:bd:1c:07:
90:5d:4b:65:be:5c:18:63:af:22:a4:07:ac:6b:c5:9d:97:fa:
df:3b:9d:52:a5:16:ed:9f:61:e4:a5:2a:c0:8d:81:8c:26:3c:
9e:c2:2c:8c:22:b0:a1:25:28:ed:61:2b:a7:78:c2:db:bb:09:
d7:a4:06:4e:82:d2:18:6a:2a:cf:28:62:6d:fc:ea:a3:aa:5a:
9f:2f:f8:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org