Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/me1guiMzXRKPI1LsFd1sw3ib7zQ.roa
File: me1guiMzXRKPI1LsFd1sw3ib7zQ.roa (raw, json)
Hash identifier: tmkumuZWLDR55GeEV1/eTYF10wk+9YImZJDqD4wevxw=
Subject key identifier: 99:ED:60:BA:23:33:5D:12:8F:23:52:EC:15:DD:6C:C3:78:9B:EF:34
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01928C0949795AAB0A465BA02D2C136B43D1
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/me1guiMzXRKPI1LsFd1sw3ib7zQ.roa
Signing time: Mon 14 Oct 2024 17:17:51 +0000
ROA not before: Mon 14 Oct 2024 17:17:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 06:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8c:09:49:79:5a:ab:0a:46:5b:a0:2d:2c:13:6b:43:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 14 17:17:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ed60ba23335d128f2352ec15dd6cc3789bef34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:92:bf:08:20:8e:7d:7f:e8:93:27:42:d2:
84:26:1a:91:a4:68:c1:9b:21:1c:8a:3c:27:6b:17:
d4:57:2e:ec:13:c9:a8:9a:cb:5d:76:6f:fa:b9:d0:
e4:9b:cb:da:ce:a4:81:fb:58:a0:cd:21:91:6f:39:
95:52:e5:32:12:4c:3b:29:40:b2:bb:2e:17:f1:62:
7d:03:b6:d5:b2:7b:b1:eb:e6:73:fe:99:46:9b:a2:
e4:ce:ba:4b:dd:fe:56:45:1f:d1:cf:0b:eb:90:dd:
f7:1f:63:81:3b:46:30:6e:da:a6:50:35:e7:e2:e8:
ae:ac:13:07:10:fc:7e:f7:bc:6d:74:d6:c7:ce:e3:
40:e6:37:fb:18:d9:16:b7:7d:23:92:f6:e0:c4:3c:
6c:55:fe:1f:61:b1:74:14:cd:b3:64:0d:8d:cd:84:
7a:b6:ae:90:66:70:de:43:3a:3a:c2:f8:e5:e4:ef:
af:98:0e:88:b1:1a:ed:aa:1a:12:d0:ad:1a:f4:6b:
d7:c2:75:6f:97:e0:18:e7:49:18:7f:40:20:f5:cf:
71:86:15:1b:83:87:9d:6e:cf:ba:e8:18:c0:4e:4c:
2f:8b:84:a5:c4:48:21:de:ea:36:05:5d:a3:ab:f2:
03:4b:c9:72:3c:31:25:d6:44:8c:75:f2:4e:47:44:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:60:BA:23:33:5D:12:8F:23:52:EC:15:DD:6C:C3:78:9B:EF:34
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/me1guiMzXRKPI1LsFd1sw3ib7zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
67:3b:82:d0:04:1b:f3:34:b7:ad:4f:e8:fa:0b:ca:83:96:4d:
cd:91:32:9d:9d:65:83:45:75:e9:ab:a1:61:1f:d1:f9:bd:fc:
57:1f:fb:01:c0:fc:8f:ea:d5:86:0f:e8:e7:10:e5:06:91:61:
b1:ca:06:cd:13:e7:70:a9:3f:54:94:1b:48:6b:72:ab:a6:8a:
1d:39:48:5d:cc:57:03:80:2a:cd:4c:26:9d:dc:71:08:55:36:
4d:50:66:ba:58:4d:85:bf:87:f3:d4:24:d3:1f:60:5e:77:9c:
aa:2d:58:f9:30:f3:f3:eb:8a:5e:f1:9f:23:a3:7e:07:6a:66:
48:9f:52:9e:a8:fe:7c:ae:d1:b3:d3:2d:2b:14:1b:63:67:33:
4e:dd:b0:b6:a8:46:58:6e:8f:9f:97:7d:7f:87:c3:2f:73:65:
e3:4e:e5:1b:af:d7:31:df:c2:6f:85:6b:6b:bc:92:8d:f3:40:
5a:cc:a7:77:bd:93:c1:8a:c7:f7:e3:c5:fa:cb:73:08:08:0d:
7e:b1:b5:89:14:b3:2f:9e:3c:be:5e:74:2f:43:4e:a3:ac:6c:
5c:13:55:d5:4e:89:53:19:cc:ac:07:72:f5:e1:a8:2b:6a:41:
31:6a:85:23:ef:28:24:cd:ec:2d:5f:25:e0:9d:24:b9:a9:74:
46:6c:db:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 08:36:25 2024 by rpki-client on console-fra.rpki-client.org