Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fvm12lYZ0q1FBjNrKSAg36KXegY.roa
File: fvm12lYZ0q1FBjNrKSAg36KXegY.roa (raw, json)
Hash identifier: dSNkL5SpAWCLWwgW66/ZuFkajFvfY+NV0sJhombK+2c=
Subject key identifier: 7E:F9:B5:DA:56:19:D2:AD:45:06:33:6B:29:20:20:DF:A2:97:7A:06
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0ADC5BC0CAB8863B541BA3D88409B3
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fvm12lYZ0q1FBjNrKSAg36KXegY.roa
Signing time: Sun 01 Jan 2023 11:15:06 +0000
ROA not before: Sun 01 Jan 2023 11:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10021
IP address blocks: 46.37.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:dc:5b:c0:ca:b8:86:3b:54:1b:a3:d8:84:09:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ef9b5da5619d2ad4506336b292020dfa2977a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:bf:5b:a8:db:64:52:0f:84:2d:be:76:c3:
28:52:dc:ff:a0:63:36:e3:07:cb:a8:42:b3:15:06:
a5:ab:3c:db:a6:50:95:48:10:2a:8c:db:33:04:03:
86:d8:a9:65:cf:93:79:45:35:8f:f8:34:76:c2:56:
af:72:64:c1:f0:5c:7b:0a:35:52:66:a8:ff:96:b1:
1e:cb:58:14:e5:ab:59:44:82:30:dd:49:6c:5b:8a:
10:94:b0:4c:6e:98:3a:b0:6a:99:02:cb:d7:84:38:
d6:77:54:7a:78:88:13:3e:aa:38:ea:ce:98:1d:1c:
4d:ff:ef:ac:af:d8:73:72:9f:f1:6f:2d:24:cb:da:
bd:4e:a6:c7:ea:40:a3:33:4b:67:3f:9e:2f:74:04:
1a:40:89:dd:63:27:f1:9b:80:d9:bb:dd:08:a6:22:
22:88:6c:b5:ba:c8:36:20:f5:c6:09:fa:ca:d1:8a:
45:ed:c2:49:92:e3:bb:5e:e7:d7:48:c4:b0:64:73:
0e:42:7b:32:53:5e:94:61:05:67:83:c7:3e:ce:34:
60:cb:1c:6e:dd:6e:82:11:c3:ce:38:ae:93:55:c0:
01:0e:ca:cd:e6:46:30:36:7b:6c:0b:86:03:b7:ce:
34:fd:84:b9:00:49:4a:f8:73:a5:e0:a5:04:8b:3e:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F9:B5:DA:56:19:D2:AD:45:06:33:6B:29:20:20:DF:A2:97:7A:06
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fvm12lYZ0q1FBjNrKSAg36KXegY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.111.0/24
Signature Algorithm: sha256WithRSAEncryption
75:19:e1:f2:c2:1e:ce:a0:a0:e1:96:cd:06:fd:e3:df:77:33:
4e:a4:89:02:68:42:09:cb:25:7c:4c:e2:1d:11:e9:59:40:cf:
75:6f:1a:43:9d:5d:86:cf:95:ff:37:72:a8:ac:c2:41:a2:dd:
b0:ae:d6:8b:60:76:85:0e:80:27:12:a2:3b:6f:46:ee:71:ba:
d1:4c:ca:6e:bd:9c:05:9e:76:bc:bd:5a:d9:f5:77:c1:5a:1c:
ff:1e:84:d4:80:f5:d7:45:00:49:cd:8b:dc:3f:8e:b0:c0:19:
e0:24:1d:67:57:af:ea:c0:a1:81:8a:53:8f:0b:97:4c:4e:fd:
d1:29:7f:31:52:94:dd:4a:58:9f:44:67:a5:19:1b:c1:82:12:
e2:eb:10:d4:8d:14:62:fe:52:9e:4f:35:dc:9c:5a:d3:0e:2b:
92:3a:74:5d:e5:5e:c4:03:16:6f:41:8b:cd:9f:24:72:c1:05:
32:09:9b:ac:bf:50:3d:17:4b:99:0b:92:4b:7e:ec:42:26:6f:
57:95:ac:b8:18:18:36:08:27:d6:fe:fe:0b:49:07:13:e5:8e:
5c:16:73:e1:6e:33:c1:a1:b5:f8:67:44:d7:93:10:e9:22:50:
70:cf:9d:f1:54:22:1d:52:32:64:4f:44:63:15:23:12:eb:0c:
6b:4f:23:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 14:30:58 2023 by rpki-client on console-ams.rpki-client.org