Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/gF7StynW26MGccK17nswTHwbBNk.roa
File: gF7StynW26MGccK17nswTHwbBNk.roa (raw, json)
Hash identifier: ojQ/3Ocm9piacjnJm5EMPF4u2dLGV15BFUe74xRoZRI=
Subject key identifier: 80:5E:D2:B7:29:D6:DB:A3:06:71:C2:B5:EE:7B:30:4C:7C:1B:04:D9
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC732B550ADB527D907F3674D90374632
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/gF7StynW26MGccK17nswTHwbBNk.roa
Signing time: Mon 01 Jan 2024 22:43:58 +0000
ROA not before: Mon 01 Jan 2024 22:43:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:32:b5:50:ad:b5:27:d9:07:f3:67:4d:90:37:46:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 22:43:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=805ed2b729d6dba30671c2b5ee7b304c7c1b04d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:17:34:ff:c6:50:28:c3:fd:48:a3:a7:f1:6b:
d3:1c:9e:8e:a3:35:91:09:72:19:58:47:c2:bc:39:
64:12:b8:c0:ee:79:35:83:1f:02:66:b3:cb:a3:68:
95:f6:ab:c1:0c:18:64:7f:73:e0:1f:de:6b:19:c3:
ce:b2:79:1a:26:2a:ea:6c:34:47:50:11:11:0b:b0:
9e:54:2f:3b:d8:ea:2a:e5:47:89:2d:6d:89:9b:fe:
b6:d3:62:2f:47:c9:8d:7e:56:7c:d3:98:ae:d0:c5:
8f:47:2a:86:43:90:a4:db:b7:50:05:c3:44:93:4b:
c2:94:86:b5:e7:8e:74:1c:ec:cb:9d:d3:f2:dd:96:
e1:89:c2:b1:9d:ba:b1:b0:5e:f4:75:d7:59:3a:19:
bb:c9:a0:b8:e7:97:fe:aa:c2:bc:54:3b:2d:9c:5c:
8d:b2:5c:ea:10:2e:40:dd:96:b3:0d:14:e6:0e:5d:
1a:84:6f:8e:f2:62:b0:23:b7:5b:90:4e:fd:00:f8:
97:2e:fb:ae:9d:24:88:5b:01:62:0a:dd:c9:cb:90:
3d:fb:49:fa:6b:d8:7d:fe:e9:20:65:23:d7:ec:f7:
90:2b:9e:f0:19:78:5b:b2:a7:b8:68:4e:c3:48:ca:
a1:78:4e:d5:d7:70:bb:67:69:31:0e:38:ef:bb:1f:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5E:D2:B7:29:D6:DB:A3:06:71:C2:B5:EE:7B:30:4C:7C:1B:04:D9
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/gF7StynW26MGccK17nswTHwbBNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5c:9c:2c:03:56:60:d8:66:90:fb:d1:3a:29:71:b9:f1:d7:
a6:01:09:5e:c2:09:7a:27:64:de:29:91:57:e5:ac:75:b8:b7:
b8:5b:ca:5b:e6:9c:d3:91:52:eb:6d:2a:75:28:eb:66:c0:0a:
a0:83:2e:c2:df:94:00:db:23:47:fe:06:33:9b:25:76:3a:b2:
a4:36:4a:39:42:41:e1:1f:c6:20:99:56:b1:ee:65:24:a4:55:
d8:87:31:25:4c:75:ca:6d:7b:30:ce:a6:da:37:ac:97:b3:e3:
d8:73:38:5b:e4:1a:37:a2:61:c0:4d:cf:52:70:3c:37:2e:1b:
be:90:e1:ac:95:66:02:ca:45:0e:76:56:6a:42:db:17:13:c5:
82:7f:06:11:09:2c:ac:57:2f:8a:ab:75:75:d6:9c:26:ce:6a:
f6:82:fe:61:48:c6:04:4d:b5:96:7a:9a:d4:20:ec:35:0d:c5:
15:4e:fc:7a:62:6b:92:07:81:7d:12:52:b9:2f:1f:d1:6e:8a:
4a:63:e8:c6:74:a5:cc:2d:2e:75:ac:16:47:1d:c1:58:3c:18:
ed:90:e9:0d:02:8d:ec:51:e8:9d:7b:e0:9d:c1:a4:b6:b2:c2:
a8:9b:5b:8c:18:6e:41:85:b7:db:82:75:fe:b7:37:10:06:50:
5e:e6:f8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 00:22:33 2024 by rpki-client on console-ams.rpki-client.org