Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mmCMahOVcOjjRIUNl7jasdn5_zc.roa
File: mmCMahOVcOjjRIUNl7jasdn5_zc.roa (raw, json)
Hash identifier: bonX197bqChSg3JrjSXoCRx6FZpvopP1egy9vrbtCKo=
Subject key identifier: 9A:60:8C:6A:13:95:70:E8:E3:44:85:0D:97:B8:DA:B1:D9:F9:FF:37
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0ADA6C05525CDEB1FB043A8147BA57
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mmCMahOVcOjjRIUNl7jasdn5_zc.roa
Signing time: Sun 01 Jan 2023 11:15:05 +0000
ROA not before: Sun 01 Jan 2023 11:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 46.37.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:da:6c:05:52:5c:de:b1:fb:04:3a:81:47:ba:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a608c6a139570e8e344850d97b8dab1d9f9ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:4d:3d:8f:bf:fa:66:30:10:4f:f6:a3:87:
38:a8:2b:21:25:8a:14:e4:0f:aa:df:be:7a:60:d3:
82:8f:59:9e:5d:80:bc:07:8d:b0:f5:11:9c:ce:d3:
a8:03:21:14:85:17:9c:53:43:2a:ee:b6:1d:f8:37:
9b:ae:1b:c5:67:76:8f:27:60:ff:c1:44:08:bf:ce:
73:64:fa:3f:5b:05:39:ac:10:cf:e1:69:70:a6:a3:
8c:34:1e:c7:9b:08:cf:46:c1:b0:98:6f:ba:ff:54:
fd:0c:b9:a0:7d:5e:4a:09:f4:c5:3f:73:a6:a7:b3:
03:c2:ec:f5:f2:a3:fc:e2:9b:26:97:b7:f0:bc:b9:
a4:01:31:75:52:e8:8d:42:f2:ff:38:60:b8:cc:34:
20:93:bd:2c:d6:51:db:4e:de:c1:f6:64:71:1f:3f:
b7:78:cf:e1:01:62:d4:f1:32:24:4e:25:ed:3d:93:
19:8d:aa:9c:fe:f8:f8:87:55:f7:f1:7c:f0:e4:c1:
e0:c5:25:ed:34:ab:b7:37:50:e1:08:d5:de:ce:9b:
49:00:d5:5f:72:bd:c0:52:80:e7:f2:53:b8:91:7c:
6f:cd:91:21:12:11:44:b3:67:47:26:be:b3:38:79:
fa:23:f2:b4:c6:dd:c5:4c:cb:6b:d5:28:09:b8:2d:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:60:8C:6A:13:95:70:E8:E3:44:85:0D:97:B8:DA:B1:D9:F9:FF:37
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mmCMahOVcOjjRIUNl7jasdn5_zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.107.0/24
Signature Algorithm: sha256WithRSAEncryption
37:82:0c:07:35:a6:76:92:fd:56:c2:40:ae:a0:80:87:10:3d:
e1:4d:34:6c:2d:f0:5b:b4:66:66:7e:a4:ba:77:55:33:9f:0d:
68:d2:34:8e:5f:70:d9:b3:16:33:16:b9:19:a7:bd:80:ef:f9:
1b:71:ed:f4:f9:0b:86:64:1a:ba:9f:58:62:a4:5c:44:97:db:
ee:17:11:77:ec:cc:ca:41:c0:4d:89:56:18:aa:1c:c0:3a:26:
2b:ec:68:bf:7e:6d:9e:6a:81:4e:7d:94:61:b2:10:28:24:f2:
7a:3b:0d:3c:e5:01:aa:f8:05:9e:56:77:14:08:82:06:69:93:
c4:0b:f0:9a:09:e1:98:81:74:56:16:d7:12:a3:d6:64:be:38:
2a:ad:47:06:a7:b5:7d:84:00:63:3e:c6:b0:0d:ba:55:12:9b:
6b:b6:55:98:10:25:7f:8e:eb:31:3e:3d:42:c5:62:cb:34:ee:
88:3a:67:e0:0d:21:11:62:68:6f:5d:7a:58:e8:22:fb:59:b4:
52:e6:4b:9a:69:3e:e0:81:44:5f:c5:b8:61:2a:52:4d:0e:a5:
66:66:b5:aa:82:df:26:e8:20:ce:1d:d1:f9:2d:13:40:54:6a:
f6:9a:f6:02:92:bd:3a:d8:15:6b:5e:27:34:a7:5d:4f:70:9e:
f7:3f:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org