Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hSS-UlmmUt0rKKqwKLMMMONKn50.roa
File: hSS-UlmmUt0rKKqwKLMMMONKn50.roa (raw, json)
Hash identifier: M3UxIr9UgaPeKyHKAZzfPQ2UtamA+K/jm7nadChK9HE=
Subject key identifier: 85:24:BE:52:59:A6:52:DD:2B:28:AA:B0:28:B3:0C:30:E3:4A:9F:9D
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0185C8E57BC125FC47A12012F3B7ADA94482
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hSS-UlmmUt0rKKqwKLMMMONKn50.roa
Signing time: Thu 19 Jan 2023 07:19:20 +0000
ROA not before: Thu 19 Jan 2023 07:19:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 46.37.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c8:e5:7b:c1:25:fc:47:a1:20:12:f3:b7:ad:a9:44:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 19 07:19:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8524be5259a652dd2b28aab028b30c30e34a9f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:fe:96:ed:de:7d:8c:9a:a7:87:9f:c3:c1:
38:84:40:87:07:89:3b:4a:c2:f0:4e:7c:65:08:bc:
85:b6:5d:74:7d:e4:fa:d0:6f:67:f5:80:0e:58:68:
d8:f2:ab:3f:ba:01:68:9f:a7:22:8d:27:2d:11:ff:
13:71:41:6d:c9:0f:ec:b6:46:7c:04:f4:1f:6e:88:
b5:64:2d:86:f6:8f:7a:36:c4:ab:d5:be:72:ee:e8:
39:f1:2b:ab:ac:c7:91:28:d9:9d:11:77:af:76:e6:
6d:ae:2d:33:81:ea:e2:f7:66:46:bf:cd:07:3d:64:
30:93:9d:0d:04:fe:4c:cc:17:03:93:b2:e6:2f:f1:
f4:b7:d0:e4:c1:12:4f:50:f6:31:de:7e:85:06:9e:
5c:dd:d1:99:31:c7:07:65:9c:4b:d5:19:f7:fa:26:
d9:9b:8f:73:85:da:4d:3e:39:52:3d:48:2b:d1:ca:
d0:e1:fe:99:e3:9f:21:3a:a7:c4:d9:63:0f:54:5a:
66:d4:b4:d2:39:51:ea:c0:9a:48:1d:7e:c0:c8:b8:
cf:8d:f6:4a:90:6a:a4:3a:de:ef:37:eb:de:77:86:
7b:c9:84:e9:5b:47:0c:b8:fd:34:e5:6a:54:ae:1d:
5e:78:f6:4f:eb:ab:9f:14:1f:ab:d7:0e:eb:ab:15:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:24:BE:52:59:A6:52:DD:2B:28:AA:B0:28:B3:0C:30:E3:4A:9F:9D
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hSS-UlmmUt0rKKqwKLMMMONKn50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:82:19:61:78:4a:9d:41:3a:63:53:83:16:eb:83:a2:51:a8:
bc:dc:18:d9:bc:8b:4b:46:72:12:3c:af:27:20:fc:07:c9:4e:
75:43:2b:16:81:8e:66:d5:2e:98:a0:18:c7:8c:f8:f2:a0:db:
e0:4c:67:ac:ae:1e:b2:55:3a:4d:f7:2a:d8:96:a8:50:df:2c:
2d:5a:3e:97:fe:c8:21:8d:21:38:06:43:5b:40:e4:60:0d:12:
a5:3a:62:e8:d0:ba:88:25:e2:82:0e:90:aa:53:54:aa:fc:5b:
26:d4:7d:a8:3c:13:c3:06:38:01:ad:d8:e6:fc:29:84:e1:7d:
50:21:00:94:dd:f6:31:77:f9:30:be:90:04:49:43:59:10:1e:
67:7f:df:36:6a:e2:13:12:f5:f6:13:98:21:20:47:fd:e2:f4:
a2:10:85:c4:4b:5d:a8:64:11:9a:74:93:d9:f0:bb:c9:db:9a:
12:47:18:98:fb:f5:84:e9:4e:14:12:a0:d2:9b:45:5a:e6:88:
02:02:f8:03:65:5d:19:f1:82:56:95:af:d1:23:fa:df:dd:3c:
5f:67:6f:12:cf:5b:da:1f:67:b0:f8:9a:1e:d3:66:8b:59:a9:
83:5c:06:c5:73:bf:ae:f2:be:1a:90:71:0b:87:3d:09:34:88:
8b:1f:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org