Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lPZVZm205wFieukjww7RfQjy8fA.roa
File: lPZVZm205wFieukjww7RfQjy8fA.roa (raw, json)
Hash identifier: A6pd1Rq1egNoWoC5g0RMFUlMomkVxhB5UX4YXTypxZQ=
Subject key identifier: 94:F6:55:66:6D:B4:E7:01:62:7A:E9:23:C3:0E:D1:7D:08:F2:F1:F0
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01864F309A074391D96848089F88BB349A5D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lPZVZm205wFieukjww7RfQjy8fA.roa
Signing time: Tue 14 Feb 2023 09:10:30 +0000
ROA not before: Tue 14 Feb 2023 09:10:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:30:9a:07:43:91:d9:68:48:08:9f:88:bb:34:9a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 14 09:10:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94f655666db4e701627ae923c30ed17d08f2f1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:fc:46:63:07:cf:9e:6c:c8:8a:32:e1:ce:
d8:7a:c8:f0:40:f2:35:4d:6e:f3:f8:0a:bf:3d:b2:
5d:c6:23:2c:cc:54:57:7e:81:28:4a:88:58:37:6f:
d1:e4:59:80:50:68:50:bc:2f:6f:4f:bf:26:38:02:
31:b5:df:09:02:ae:f8:08:a3:82:0b:54:0b:61:56:
91:79:8f:39:32:e8:02:52:6f:f1:f9:a0:80:b1:fc:
31:e1:c8:78:88:c3:5c:5a:35:9c:a8:5a:c8:ba:ef:
9e:90:aa:5d:25:54:0d:ff:b3:3e:0c:20:9a:93:ed:
48:b6:e4:f6:f8:36:54:10:a7:2f:f8:5b:0f:56:16:
db:2c:91:c0:ae:74:1b:51:9b:2e:8b:b4:fe:2a:e2:
15:57:82:d3:2d:b7:26:e8:bd:5c:6f:07:8d:70:10:
f1:14:29:f2:79:2b:a1:68:58:1a:72:80:5e:29:ce:
c9:48:81:40:7b:8d:d1:e2:d1:c0:41:52:51:14:e3:
42:31:95:e3:67:34:62:62:1e:e0:f2:51:65:40:fe:
a8:cc:a4:ae:d5:57:ed:c2:11:2c:5a:8b:1b:81:6d:
c9:c7:5a:f3:b7:d1:ee:35:02:c0:4a:ab:05:57:1c:
88:3f:2b:14:d3:04:e5:59:00:97:53:c6:52:85:4d:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F6:55:66:6D:B4:E7:01:62:7A:E9:23:C3:0E:D1:7D:08:F2:F1:F0
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lPZVZm205wFieukjww7RfQjy8fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.114.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3e:05:ad:eb:06:32:1d:2a:6f:bc:24:f5:64:7e:4a:cd:60:
90:e4:2a:af:17:33:fb:13:42:a8:f4:6b:c5:17:6a:04:1b:54:
49:70:df:a4:94:7c:89:27:5f:b4:91:8d:3e:19:e1:bc:17:74:
ae:88:38:fb:d1:41:b9:16:9e:a1:ce:9e:fe:fc:59:db:01:ed:
0e:80:c3:15:96:f6:83:94:23:2d:a0:16:76:0e:89:c0:3a:ee:
a5:f8:46:c9:4a:81:76:ab:2f:d9:41:57:b7:1c:bf:4c:1c:6b:
55:66:36:57:42:1d:c2:6b:73:d0:9a:6d:e6:8d:d2:64:12:40:
f5:79:74:75:b8:6d:8c:62:ea:d0:11:5c:ca:98:6c:5a:c0:30:
af:82:34:f5:0f:cf:74:91:d6:02:a3:30:46:fb:da:28:cf:a3:
96:dc:6f:6e:c1:5a:1c:bf:a0:c8:73:a4:e7:b4:69:e2:2e:a6:
45:94:74:19:1c:0b:ce:40:93:dd:5d:75:7e:37:b6:9f:38:30:
a0:d1:ff:fe:39:e9:a0:1e:af:9d:ee:63:0c:a2:c6:dc:4d:3f:
a8:ab:9c:cf:22:71:e0:6c:f3:68:39:4b:ab:67:78:f5:33:c9:
65:30:df:27:ab:52:54:f7:d0:80:27:b2:f1:ff:8e:a2:39:dd:
3a:9e:d4:0b
-----BEGIN CERTIFICATE-----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Generated at Sat Oct 14 23:04:23 2023 by rpki-client on console-ams.rpki-client.org