Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ie0WuSvmdhJo-jEGdU6plbyfgyc.roa
File: ie0WuSvmdhJo-jEGdU6plbyfgyc.roa (raw, json)
Hash identifier: y87LvrVmjk5sNOs/Qo5sNzKyjDS/Pz33kqhh8L2O/nI=
Subject key identifier: 89:ED:16:B9:2B:E6:76:12:68:FA:31:06:75:4E:A9:95:BC:9F:83:27
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01860A6E902DE1A8E1645AF0F72FB0A1683E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ie0WuSvmdhJo-jEGdU6plbyfgyc.roa
Signing time: Wed 01 Feb 2023 00:44:23 +0000
ROA not before: Wed 01 Feb 2023 00:44:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.120.0/23 maxlen: 23
46.37.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0a:6e:90:2d:e1:a8:e1:64:5a:f0:f7:2f:b0:a1:68:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 1 00:44:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89ed16b92be6761268fa3106754ea995bc9f8327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:68:3a:d2:77:83:2a:87:da:2d:14:3a:9e:
b9:68:19:49:29:06:6d:15:b5:92:13:af:ef:57:a0:
b7:77:10:30:b7:17:92:d9:43:b5:65:01:63:c9:07:
cf:5c:02:6a:ae:0a:68:7c:04:c2:93:fc:6e:8e:e5:
b4:be:27:78:75:9e:6a:e2:42:40:ca:e9:37:3c:49:
c5:b6:24:ba:e4:8e:16:cc:b2:96:c9:22:07:a3:57:
77:31:50:6d:ad:79:54:11:f3:8a:ff:48:95:f1:55:
44:55:7b:27:13:1d:7c:e6:b3:3c:16:71:cd:e2:8c:
40:aa:9f:1b:20:eb:c0:16:fc:ba:0e:e1:6f:1a:e2:
d0:27:9f:4c:9b:46:30:f0:e9:d8:49:01:20:e5:56:
b8:cf:88:a6:95:5f:b2:7c:2f:87:3e:64:2a:d9:4c:
53:ef:cf:8f:79:e0:f8:f3:42:93:93:6e:26:57:f0:
fd:3a:5e:78:12:2d:c9:be:f5:59:a5:2a:d2:71:f4:
ff:36:f1:23:a7:9d:a6:14:d6:79:01:9d:0b:84:6c:
98:bf:ca:00:65:46:2a:16:92:46:96:c3:a5:ed:fc:
ce:8f:ac:49:17:03:07:24:c5:c4:1b:18:0b:1b:89:
46:12:8b:1e:f8:e7:ec:24:7a:e8:a3:a8:77:1b:7d:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:ED:16:B9:2B:E6:76:12:68:FA:31:06:75:4E:A9:95:BC:9F:83:27
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ie0WuSvmdhJo-jEGdU6plbyfgyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/24
46.37.113.0/24
46.37.118.0/24
46.37.120.0/23
Signature Algorithm: sha256WithRSAEncryption
27:78:74:df:30:89:f8:59:da:ca:11:8f:1d:13:64:da:1e:c4:
d5:91:7e:4a:65:bb:48:d3:36:42:1c:c5:07:e4:43:64:ba:04:
a7:3a:97:8d:2c:bb:4b:b1:c3:04:62:cb:f9:4f:a3:f8:ca:d5:
6c:33:fb:e0:dd:0e:e9:f8:89:a0:f0:30:74:a6:42:a6:b2:ef:
ba:4b:d4:54:12:65:dd:ce:04:09:59:94:65:85:f4:55:5f:aa:
23:7d:3b:e2:ac:e2:97:9e:7c:54:65:a5:05:39:4d:df:e4:02:
72:7a:78:4e:b3:d6:7f:2e:45:73:a4:3e:cf:72:34:3a:cd:b8:
d7:93:04:bc:08:9d:20:3e:f6:7a:63:f5:d5:5c:1c:11:f6:6e:
f8:94:61:82:08:a3:c3:d6:c1:93:7f:89:cd:57:82:b0:24:a1:
fe:ac:e1:83:49:e9:0d:47:8e:e5:d5:45:d5:80:ab:1a:3a:41:
df:a7:70:4c:ee:04:ee:04:89:c6:1f:af:09:af:59:8a:4f:6d:
38:2e:79:cf:2b:53:28:8f:23:c4:c4:3e:f8:40:f8:35:eb:34:
cd:aa:5b:7d:22:c2:14:c9:7e:39:59:16:52:08:4e:e4:f0:bf:
02:ac:cb:a4:bd:ad:7f:d7:1d:6e:8c:f8:69:23:1f:66:3f:17:
ec:72:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org