Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hOuQ5kdoh2PfQkeGSNjY_xDRx60.roa
File: hOuQ5kdoh2PfQkeGSNjY_xDRx60.roa (raw, json)
Hash identifier: 1mwTfx4k9dtqbZUbMJcI8IY2P/ClqBFL3BBRmyL8tcE=
Subject key identifier: 84:EB:90:E6:47:68:87:63:DF:42:47:86:48:D8:D8:FF:10:D1:C7:AD
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0189E25091B0082582972C356A2CD2E45A96
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hOuQ5kdoh2PfQkeGSNjY_xDRx60.roa
Signing time: Fri 11 Aug 2023 01:57:58 +0000
ROA not before: Fri 11 Aug 2023 01:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e2:50:91:b0:08:25:82:97:2c:35:6a:2c:d2:e4:5a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 11 01:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84eb90e647688763df42478648d8d8ff10d1c7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:32:2d:5d:1b:8d:b9:53:dd:c3:78:f4:51:45:
12:26:34:44:9a:a8:a0:9d:12:24:fb:98:0d:fd:6c:
bf:d9:aa:02:3b:4c:34:d5:02:8a:65:65:6d:83:37:
d8:8d:e0:ab:5b:5f:a2:22:c8:4f:8f:bd:21:ab:0f:
c3:4c:83:e8:2e:3a:5a:31:73:01:ed:69:7a:cd:98:
5f:21:9b:89:7f:b4:23:99:47:b6:2d:e8:08:97:98:
10:32:96:eb:a8:56:0c:af:a0:94:97:48:cb:34:56:
0b:52:57:96:08:37:c1:d2:6b:83:2d:b0:46:51:e4:
67:3a:eb:d8:49:ae:14:ea:4c:90:72:94:c5:cb:d2:
70:86:b4:d7:b4:54:64:68:b9:f2:f4:97:c7:6d:cb:
1a:7b:1c:4e:3b:cb:83:ef:75:68:f3:91:da:f4:89:
dd:a6:06:45:fb:20:a8:ae:74:3a:f2:5c:c5:a8:b7:
00:bf:06:de:ce:30:8d:5e:58:03:9b:e8:a2:39:b2:
c2:80:72:86:39:a1:87:5a:c1:02:ae:fc:54:3d:f8:
74:0a:b5:88:f1:e6:5e:ca:1a:f9:8d:1f:f0:f6:05:
2d:91:53:48:fe:a9:30:4b:ab:25:86:d1:cc:85:f8:
90:b0:48:24:aa:21:69:24:d5:9b:98:61:52:d7:6d:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EB:90:E6:47:68:87:63:DF:42:47:86:48:D8:D8:FF:10:D1:C7:AD
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hOuQ5kdoh2PfQkeGSNjY_xDRx60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.127.0/24
185.92.47.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:11:e1:1a:1c:6c:4e:49:8b:81:15:cd:ed:92:8c:17:1e:57:
ff:95:a6:40:47:cd:2a:09:a0:4d:4c:4e:e2:5c:47:4f:ca:13:
a6:21:44:4c:0a:e9:2c:23:d4:7e:f4:2b:e5:b6:88:c2:1d:27:
e7:97:54:56:ae:10:2f:2b:3d:73:44:0b:a2:23:76:3f:34:79:
ac:03:f7:5f:34:c0:4b:d2:e0:31:47:6e:b4:ac:e9:c5:4c:c0:
44:63:72:3f:07:b5:a3:4a:0f:b1:fd:d6:ad:15:f6:65:8a:1a:
70:6c:67:ec:52:a0:ad:56:16:3f:26:ff:c1:a4:f2:19:33:df:
6d:d8:a7:e9:86:47:50:f7:04:26:7f:9e:2d:4c:25:df:be:6c:
39:96:63:09:99:bb:81:b9:ff:7c:d6:ca:9c:c7:53:3e:a1:24:
4e:84:fe:9f:f5:e3:d6:67:3e:8a:bc:fe:ae:cf:97:51:03:7f:
ec:1f:de:18:01:d0:b5:8b:60:36:ec:ce:5d:37:a8:f3:50:08:
56:06:4d:7c:24:6f:12:54:b9:a1:52:02:9d:85:d1:5e:b3:77:
f8:1d:e4:07:cf:1c:17:6e:b4:ec:53:82:e4:f9:c0:4d:84:22:
53:51:a3:bd:d7:b3:1f:3c:45:e5:d7:de:ed:3f:39:93:5d:44:
91:05:73:36
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 15 22:08:38 2023 by rpki-client on console-ams.rpki-client.org