Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mD-WsE-BNuwJ4jl2WmH16AhSFCY.roa
File: mD-WsE-BNuwJ4jl2WmH16AhSFCY.roa (raw, json)
Hash identifier: 07YAujRtEq6NwrCHIKG99vVbrhbwSSwIDLMBRM8VngY=
Subject key identifier: 98:3F:96:B0:4F:81:36:EC:09:E2:39:76:5A:61:F5:E8:08:52:14:26
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018C9FB48BA024A54585052914956556EA58
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mD-WsE-BNuwJ4jl2WmH16AhSFCY.roa
Signing time: Mon 25 Dec 2023 06:40:58 +0000
ROA not before: Mon 25 Dec 2023 06:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
185.92.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9f:b4:8b:a0:24:a5:45:85:05:29:14:95:65:56:ea:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 25 06:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=983f96b04f8136ec09e239765a61f5e808521426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:c4:38:d7:2c:8a:27:b1:07:db:d3:80:95:
c9:3a:bb:dc:78:d9:90:d9:d2:4f:e5:ab:8a:7d:89:
71:70:60:32:60:21:b3:dc:83:94:ac:7f:f1:9b:c2:
f4:2e:e8:3e:b8:64:9e:3a:6d:71:09:57:a0:7b:03:
b4:fd:fa:56:67:8a:f3:f4:29:f2:81:9e:ba:7e:c7:
1c:65:63:ba:a1:64:8e:f4:91:59:7c:d2:6c:02:9f:
53:23:ed:3b:5f:2d:81:66:31:70:11:37:2f:2e:55:
5b:68:eb:46:19:6d:05:4b:22:bc:e0:09:53:1e:1a:
70:cd:0e:5e:2f:80:b2:89:22:f7:37:09:3d:7f:37:
ad:1a:ef:82:19:b6:c7:fc:09:ba:b8:65:5f:fd:cb:
29:03:61:e0:be:44:b6:b9:ee:96:b1:29:63:a5:04:
b7:72:d1:9a:25:15:a0:70:0f:65:1b:67:39:24:0a:
e6:09:5f:52:57:d6:d1:52:c6:99:32:54:56:45:f9:
b6:61:09:40:ff:25:61:20:04:37:e7:5c:ff:d0:6f:
bc:85:a0:f7:8d:c5:c6:92:6c:43:53:b0:4d:f0:df:
52:8d:dc:1a:7e:05:7c:68:93:17:2e:31:60:8a:51:
57:fb:2b:0f:2e:26:32:dc:18:c8:96:e1:44:24:5a:
39:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3F:96:B0:4F:81:36:EC:09:E2:39:76:5A:61:F5:E8:08:52:14:26
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mD-WsE-BNuwJ4jl2WmH16AhSFCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d4:c9:06:72:47:1a:65:e5:96:d1:3d:b0:71:2c:08:f5:65:
8c:f8:07:a0:a9:73:20:85:f7:74:08:a6:2a:ce:74:68:4f:25:
12:ae:f4:66:c6:f2:5e:e8:f6:4e:ca:04:c4:4c:42:cc:1e:7c:
f9:91:27:d7:b1:75:06:26:6e:f2:38:f5:c0:35:03:f7:20:e4:
4c:f3:0f:2f:9d:82:26:99:59:35:52:51:47:1b:a6:1f:e5:d0:
2d:1f:e8:aa:5b:94:04:d2:e8:27:39:47:52:d7:85:02:6e:21:
43:22:5f:65:95:5d:ab:da:14:37:4c:a2:f2:c7:b8:0b:18:bb:
4d:89:35:eb:7e:3b:a9:73:4e:52:1a:d7:c0:3d:c4:5e:92:52:
8b:de:01:c8:7a:8c:1a:d7:4c:19:61:cf:21:4c:18:15:dc:f6:
e7:de:7b:8d:0f:06:b1:65:98:12:dd:b3:79:dd:92:26:99:7f:
68:d3:38:d8:83:2a:2f:20:9a:52:1c:3e:a2:28:8d:13:df:c4:
47:11:ac:aa:4e:3a:17:53:77:29:ee:d8:22:18:88:76:56:b3:
d5:e8:c9:d9:fe:32:44:aa:90:e5:36:4c:8a:9a:cd:e2:1d:0c:
b6:3c:58:dd:8f:75:4b:39:23:e4:71:69:93:c6:9c:72:99:56:
ee:0a:03:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 10:26:02 2023 by rpki-client on console-ams.rpki-client.org