Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hw8N69UTid7eaTA6me3QV5pV5Ko.roa
File: hw8N69UTid7eaTA6me3QV5pV5Ko.roa (raw, json)
Hash identifier: 0H2SBQf99dvk+k9vQZJJBVc7wnwFSO7xgiiFrICJJwk=
Subject key identifier: 87:0F:0D:EB:D5:13:89:DE:DE:69:30:3A:99:ED:D0:57:9A:55:E4:AA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01931869B6B9669B3638CB4C2E9F2F5A2072
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hw8N69UTid7eaTA6me3QV5pV5Ko.roa
Signing time: Sun 10 Nov 2024 23:30:01 +0000
ROA not before: Sun 10 Nov 2024 23:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 07:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:18:69:b6:b9:66:9b:36:38:cb:4c:2e:9f:2f:5a:20:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Nov 10 23:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=870f0debd51389dede69303a99edd0579a55e4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:29:55:99:a9:f9:76:be:ec:8b:70:99:55:
e6:04:5c:51:f0:10:1c:17:8f:30:56:54:15:1e:d4:
eb:f2:ab:b3:bd:b5:b4:66:f7:10:e4:23:4f:08:31:
b0:46:1c:d7:c3:cd:b8:1d:90:b7:ff:95:e3:e4:5a:
03:05:75:1b:a9:7a:aa:b2:e5:f3:77:a4:15:59:d2:
e7:c9:be:99:ea:ec:ac:7e:57:72:18:6c:87:8a:42:
1b:5b:c8:6a:8e:f9:cb:92:d6:15:a9:ea:cc:a1:b0:
57:b8:d4:e9:b9:4c:13:20:8b:86:c3:f6:05:06:a8:
f9:1a:7b:e4:8a:5d:51:14:6c:49:5d:73:b3:15:88:
2e:b9:66:d2:56:9c:fd:9d:95:8f:63:e5:ca:eb:41:
90:9e:b9:c2:1f:11:ae:e6:a5:d3:f1:fe:cb:7c:65:
6c:48:79:f6:4a:5e:c8:86:75:46:90:fa:bd:f8:94:
e3:de:13:b6:39:03:1c:f3:52:05:60:e5:1b:c7:f0:
d7:d1:95:8b:0d:3b:6d:6f:12:10:c9:28:1b:00:77:
f7:5c:75:34:55:19:75:17:c1:2b:47:04:52:15:8b:
67:17:29:61:a1:35:47:06:3d:3c:85:5d:8d:00:b3:
e7:04:46:77:c4:29:fc:7f:4e:17:a5:69:fe:8c:03:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0F:0D:EB:D5:13:89:DE:DE:69:30:3A:99:ED:D0:57:9A:55:E4:AA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hw8N69UTid7eaTA6me3QV5pV5Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
02:fd:fb:c9:48:3e:46:08:cd:6d:1b:20:14:b4:0c:ab:b8:f4:
ed:23:3a:f6:1b:ea:b5:8e:54:f6:4c:81:4f:12:5a:7a:e3:80:
c0:52:7f:dd:f9:6e:68:66:00:a2:60:17:9f:b4:21:15:12:16:
7b:ca:18:2a:af:5f:a9:f2:b8:7d:bc:d6:c9:7f:bb:41:33:b4:
c9:b0:4e:7d:6b:89:98:ee:ca:16:74:c5:1c:de:fb:50:14:dd:
fa:69:af:83:09:ef:9d:8d:82:35:4e:40:bb:29:a7:74:f9:07:
6f:96:ba:17:48:85:19:92:d8:5c:8f:c5:dc:a5:17:fd:bc:a6:
f8:9b:df:19:27:ef:63:3f:33:23:5b:1b:5c:ea:7b:5f:5c:72:
84:b4:82:4d:1b:ad:96:4a:0a:fd:d5:14:46:f1:e5:f5:d6:35:
73:39:4c:ca:85:46:20:79:9a:01:c8:56:5d:82:08:b3:6c:7a:
ce:b3:fd:65:f7:98:56:97:fb:0f:16:43:f9:6b:91:ce:fe:68:
f4:47:1c:46:fb:38:f7:97:53:ca:88:7e:96:06:59:b4:70:68:
5a:54:54:d1:e5:ce:f3:09:3e:3e:d9:b2:2e:f3:44:58:d6:50:
50:19:dd:39:25:79:74:53:ab:51:ad:d0:16:51:bf:40:66:03:
0b:5c:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 08:25:35 2024 by rpki-client on console-fra.rpki-client.org