Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lsN1AdGPWoAmFbt5u9N-Zr6bMe8.roa
File: lsN1AdGPWoAmFbt5u9N-Zr6bMe8.roa (raw, json)
Hash identifier: rSuraqNi2tyX4VN0ZJfEBJ7fpeApVa3jH/ymm/kYqpc=
Subject key identifier: 96:C3:75:01:D1:8F:5A:80:26:15:BB:79:BB:D3:7E:66:BE:9B:31:EF
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0AE576C8124815A24D7E8A97A1B228
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lsN1AdGPWoAmFbt5u9N-Zr6bMe8.roa
Signing time: Sun 01 Jan 2023 11:15:08 +0000
ROA not before: Sun 01 Jan 2023 11:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210574
IP address blocks: 46.37.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e5:76:c8:12:48:15:a2:4d:7e:8a:97:a1:b2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96c37501d18f5a802615bb79bbd37e66be9b31ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4a:b8:03:3c:c6:b4:05:08:c8:d1:33:6a:fa:
09:4c:04:38:17:98:b7:64:f0:cb:d1:19:8e:e0:f3:
ce:2b:91:dd:db:f0:a1:ca:bf:d0:9d:86:1f:f7:08:
c1:47:e2:06:80:dc:56:8d:c1:d5:79:e4:e2:e0:0e:
85:e8:af:2d:c5:1d:0e:ff:3f:98:43:f7:db:8c:a5:
bf:e5:88:c4:81:14:90:3a:9a:01:7c:67:db:48:92:
03:10:3d:34:46:f7:af:8b:1c:78:aa:6b:4a:62:a2:
49:9d:af:01:b3:61:78:37:15:ca:19:14:30:0a:06:
4f:fd:b2:4e:a2:2b:95:3f:55:3f:2b:1a:76:89:57:
81:6c:ac:4e:c4:3d:f2:6d:fc:ad:af:44:36:21:93:
d8:60:35:69:5f:d1:b8:62:1f:ae:69:76:75:56:6d:
85:8e:40:7e:93:45:d5:2f:69:d8:e8:bc:6b:68:fe:
72:b5:9a:5f:06:ee:da:57:78:d9:8f:a8:65:fe:64:
49:7f:53:bb:9f:26:02:76:24:b6:a2:bb:4e:e2:e6:
af:dd:7e:73:5e:b8:28:ec:ce:e5:a3:b0:ba:2f:f9:
03:16:ba:fb:c4:95:ce:ed:6f:34:0c:57:89:dd:aa:
08:22:2a:91:e1:b7:03:09:81:9f:36:2f:91:6a:16:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C3:75:01:D1:8F:5A:80:26:15:BB:79:BB:D3:7E:66:BE:9B:31:EF
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lsN1AdGPWoAmFbt5u9N-Zr6bMe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ef:3f:4f:50:e8:c0:7b:7f:96:da:13:3b:5d:37:ef:59:1e:
35:84:69:3a:d9:dd:43:80:04:be:ff:04:7d:23:18:13:8b:f8:
63:d3:b4:cd:94:ce:4b:37:c2:d4:32:1b:f8:a5:f8:b8:f1:92:
7c:8e:04:01:86:ef:67:ed:ff:90:d1:ab:6c:81:7c:55:92:9d:
85:6a:7e:11:9d:1b:b7:c1:bf:c0:05:8e:ef:a3:21:4c:f6:f4:
c8:7f:23:94:e1:41:f6:37:8a:69:81:be:ca:2f:9b:52:03:d5:
fa:f2:53:cc:b1:36:0d:d0:47:c5:5c:b0:47:97:78:2c:7b:17:
de:20:3e:d3:b8:6d:d6:34:29:b8:65:e4:43:d7:08:da:67:13:
35:6c:62:99:e3:13:40:ec:49:c0:78:ea:3b:55:eb:51:bc:14:
c6:33:da:5e:f1:f5:66:c6:ae:c2:16:8e:a3:26:3e:ab:88:d8:
28:3f:39:99:b2:5d:f7:cc:7c:a2:6c:da:54:b9:f4:4d:a4:43:
b1:04:d4:6a:df:d2:9c:1e:f9:13:59:20:b8:1b:29:5f:1f:bd:
b6:a7:16:58:26:05:67:3c:5b:60:12:ea:82:49:49:d2:ad:87:
65:da:8e:a1:a2:5d:ac:e1:43:f7:4a:5a:6b:ab:04:43:fd:70:
db:eb:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:05 2024 by rpki-client on console-ams.rpki-client.org