Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/k6fYYlvXDDYgIMtBJvd236gDKhw.roa
File: k6fYYlvXDDYgIMtBJvd236gDKhw.roa (raw, json)
Hash identifier: n9PiE7wWr8GAKwvYPTsQwDF9lPiiAdMCgFbdVPAfcY0=
Subject key identifier: 93:A7:D8:62:5B:D7:0C:36:20:20:CB:41:26:F7:76:DF:A8:03:2A:1C
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AF497027ECD7EC83FFEE43F4CADF49A2F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/k6fYYlvXDDYgIMtBJvd236gDKhw.roa
Signing time: Tue 03 Oct 2023 08:10:51 +0000
ROA not before: Tue 03 Oct 2023 08:10:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42055
IP address blocks: 46.37.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:97:02:7e:cd:7e:c8:3f:fe:e4:3f:4c:ad:f4:9a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 3 08:10:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93a7d8625bd70c362020cb4126f776dfa8032a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:31:bd:83:f4:64:8b:24:dc:cd:35:46:6e:
c4:eb:cf:1c:1f:93:37:6b:a6:67:89:5e:ee:32:0d:
9a:b3:3f:95:3a:fa:94:b3:79:5a:5c:06:f6:ea:04:
f6:cb:86:3b:78:4f:85:13:01:a0:e1:77:bc:85:89:
ff:84:60:1e:96:4a:6e:c4:b6:83:5f:c5:6e:49:2f:
ab:ae:0a:4d:1d:f4:a5:23:23:4c:86:7f:60:ad:0e:
3b:36:5e:ef:51:f6:f2:35:75:92:d6:b8:6f:48:ab:
17:93:0e:bc:1a:96:9d:f5:58:9d:40:df:16:70:67:
88:3a:ab:20:8d:68:9e:a9:17:04:f8:22:3c:5f:27:
b0:01:52:fb:a2:a1:f0:52:04:75:5c:4c:c8:8c:e9:
ea:4f:25:1f:ae:cb:b8:df:99:9c:d5:34:7e:4e:4e:
65:d2:95:bd:c4:ae:9e:4c:78:53:3a:76:b6:de:f9:
1d:81:16:bd:4a:92:7a:f4:f5:2a:25:a0:c6:d1:a8:
62:6c:7f:81:56:72:77:67:05:04:7e:30:d8:9d:11:
f8:61:b9:d5:53:99:95:ec:b9:6c:0d:ab:cb:c5:d2:
04:56:c1:4e:a6:98:85:57:12:30:71:7a:8c:f3:4f:
bb:90:ce:07:e5:b9:a8:a7:0d:4a:d0:dd:ce:9d:8a:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A7:D8:62:5B:D7:0C:36:20:20:CB:41:26:F7:76:DF:A8:03:2A:1C
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/k6fYYlvXDDYgIMtBJvd236gDKhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.123.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ed:96:24:67:87:3e:2a:8f:7a:dc:52:8d:23:d6:13:9b:61:
f0:60:ef:e0:82:6c:c4:ee:59:a7:03:a1:79:f7:83:9a:48:56:
2a:42:f1:c0:99:a8:6b:4d:5c:78:4e:8c:33:99:1d:29:04:3b:
3a:15:18:3f:fd:db:72:cc:64:69:74:e9:9c:17:3e:83:89:03:
b7:10:61:ce:9b:32:37:a8:11:a9:04:6a:42:dc:b9:a5:3c:18:
36:14:6e:06:a0:0a:e7:86:d0:e0:d2:d0:28:0c:25:45:e0:23:
43:d7:d8:70:bb:28:a2:9d:4c:ac:c1:ea:15:c0:f3:fd:29:35:
01:1d:73:f4:1b:ee:ae:cc:ba:6a:01:f3:d6:77:08:fc:26:4d:
3e:4f:f5:b0:d7:3d:a4:27:0a:73:db:bf:20:4e:a1:1f:bc:e6:
04:ce:dc:3d:20:c8:42:32:e3:c9:d3:df:16:9d:37:d0:8d:46:
f7:73:63:62:dd:a9:49:2c:31:14:59:70:45:c4:15:56:aa:7f:
01:50:d7:c4:68:98:5d:ae:9b:21:4b:5c:f7:b4:a0:00:f1:e2:
2c:03:c6:5e:74:a9:f3:72:82:bd:5c:81:f8:f6:ce:7e:0c:40:
af:91:ae:21:73:06:45:f2:75:e7:64:06:42:36:8e:56:c1:42:
21:8f:e5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 16:55:33 2023 by rpki-client on console-ams.rpki-client.org