Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/iqu6Ggww-hFkx98niv5kqySPfKg.roa
File: iqu6Ggww-hFkx98niv5kqySPfKg.roa (raw, json)
Hash identifier: g3TKeviNmj9PFzN7vBSpK8kW0b3f1qcvVLNPi4MQ/ko=
Subject key identifier: 8A:AB:BA:1A:0C:30:FA:11:64:C7:DF:27:8A:FE:64:AB:24:8F:7C:A8
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0186368E1C17108B01ACB775040CE1A3E8C9
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/iqu6Ggww-hFkx98niv5kqySPfKg.roa
Signing time: Thu 09 Feb 2023 14:22:08 +0000
ROA not before: Thu 09 Feb 2023 14:22:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:8e:1c:17:10:8b:01:ac:b7:75:04:0c:e1:a3:e8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 9 14:22:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aabba1a0c30fa1164c7df278afe64ab248f7ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:4e:da:ea:d9:1b:81:7f:69:59:75:1f:a2:
89:75:9a:b8:27:23:bf:a7:ac:1f:f4:90:36:b7:0c:
66:73:5e:a9:cb:7a:7a:8d:82:01:6e:ba:63:50:7a:
c5:14:6c:15:c2:56:03:04:48:4d:7e:62:b3:ea:8f:
72:90:ea:a7:5c:27:42:ef:9b:d9:69:ce:74:3c:31:
dc:20:39:4d:d7:94:64:10:66:49:97:62:99:aa:6e:
70:d3:22:99:26:bf:b1:6f:37:3d:42:69:93:8f:f2:
4f:83:8c:25:4e:76:f7:33:34:c7:c8:6f:db:81:6f:
37:e4:bf:e1:7b:dd:65:a6:2a:61:69:ed:5e:2e:8b:
f7:dd:e9:a0:a0:fe:d0:f0:af:ea:62:d4:56:8f:37:
b3:b2:c1:61:8e:6c:0d:8b:99:f1:8c:c4:28:b1:f5:
0f:0c:77:2b:54:d1:cd:6a:37:20:cb:b9:94:c8:4b:
fd:e7:4f:33:fd:4a:5e:b0:47:89:55:73:da:57:dd:
64:95:0e:ca:32:c4:74:d1:06:31:56:ef:38:00:72:
06:2b:9f:fe:05:64:eb:a5:31:b4:ee:14:64:7f:91:
c2:53:49:42:af:be:3b:2a:8b:ad:08:d5:ae:a4:95:
a2:85:a9:31:4d:7b:9a:50:9e:ca:a6:2d:69:7f:2f:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AB:BA:1A:0C:30:FA:11:64:C7:DF:27:8A:FE:64:AB:24:8F:7C:A8
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/iqu6Ggww-hFkx98niv5kqySPfKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
39:55:69:a1:26:82:3b:90:46:db:99:a1:e8:a9:57:ec:f4:ce:
e1:4c:7e:5b:60:d7:9f:c6:6c:1e:20:1c:58:a2:f5:9e:7e:98:
24:9c:8e:30:1d:2b:03:c3:06:f0:4a:e8:70:df:67:90:be:1c:
da:e2:21:80:77:fc:1f:7c:fb:a2:e7:db:8b:f9:ef:8f:43:f2:
8a:a2:75:c1:ad:b4:fb:a3:29:29:15:7e:aa:bf:ba:f0:bb:43:
e8:b4:b3:aa:eb:cc:45:2a:4c:d4:66:21:d3:0a:bd:92:01:35:
c0:65:e0:d9:ec:b3:d3:42:fc:b4:af:fd:1d:63:47:26:4b:13:
cd:62:91:1c:7a:6f:85:73:55:b2:50:1d:01:9d:fb:a4:29:3d:
cf:e4:9e:85:c0:de:13:41:87:3c:12:94:44:7e:ae:b3:10:fa:
5e:dc:b2:56:c9:6b:9e:93:f5:66:da:0a:75:c1:3d:13:f3:1a:
99:bc:41:61:90:27:cc:7e:bf:b8:58:5a:92:fc:ab:46:b0:ef:
13:2e:b8:6c:ae:7f:3e:c9:dc:89:7f:2f:59:4a:3f:bc:2e:bf:
75:4a:3a:7b:06:fa:5b:55:ef:ba:fd:e1:8d:71:d0:8d:b6:08:
d1:4b:0e:58:d5:c6:d8:6f:6a:3e:d6:7a:93:3e:0a:eb:bb:14:
df:58:f2:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org