Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/n5rM3VgGW53BhStDbmo0e358nN4.roa
File: n5rM3VgGW53BhStDbmo0e358nN4.roa (raw, json)
Hash identifier: JlvesfqmH0s0NuSf0fRMhwmiRXRwX84sNpiwhp6HCZA=
Subject key identifier: 9F:9A:CC:DD:58:06:5B:9D:C1:85:2B:43:6E:6A:34:7B:7E:7C:9C:DE
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018A3B5E7071E074606A04638DF18D0E6FB3
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/n5rM3VgGW53BhStDbmo0e358nN4.roa
Signing time: Mon 28 Aug 2023 08:59:19 +0000
ROA not before: Mon 28 Aug 2023 08:59:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 46.37.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Dec 2023 06:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:5e:70:71:e0:74:60:6a:04:63:8d:f1:8d:0e:6f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 28 08:59:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f9accdd58065b9dc1852b436e6a347b7e7c9cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ea:18:35:09:37:cc:09:3c:e2:6a:69:66:53:
ca:cb:e3:2b:4b:22:2d:dd:5d:ff:33:5c:ec:44:c3:
63:d1:a0:84:02:fd:6f:db:6f:f3:59:b9:2c:f5:d9:
fc:a8:f6:a9:52:8b:42:4c:7d:06:8f:bf:c4:aa:18:
0a:d8:51:47:73:f1:04:0b:32:d0:14:ff:ae:51:22:
ff:f2:62:ce:ee:4e:04:71:c1:8b:f2:4f:89:34:2a:
66:2f:0f:e1:1c:75:3f:eb:17:8e:73:5e:87:5b:41:
ae:a6:85:9e:fa:76:be:b0:af:d2:63:9f:ce:2a:ff:
d3:28:89:d3:ab:96:e9:d5:c2:ac:59:e0:cb:4d:b9:
b5:58:e5:cd:23:f0:0c:2e:59:67:f7:23:cd:ab:f4:
fd:98:bc:09:c8:cf:46:eb:91:e1:7e:4f:b5:13:f8:
80:96:8d:e5:66:bc:10:17:e5:ba:40:10:89:04:f2:
e6:ef:f7:45:d7:b2:99:a5:73:ab:9f:77:d1:a1:2f:
d4:91:bd:f5:f3:fe:8c:be:74:91:42:22:f1:cc:8a:
85:11:a8:59:c7:c5:1f:4b:0c:85:8b:47:6c:63:de:
51:a4:c4:41:84:c7:7b:4e:e0:e7:4f:cb:be:10:55:
b7:3d:a5:f4:af:5d:79:af:86:38:db:00:93:67:ae:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9A:CC:DD:58:06:5B:9D:C1:85:2B:43:6E:6A:34:7B:7E:7C:9C:DE
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/n5rM3VgGW53BhStDbmo0e358nN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.115.0/24
Signature Algorithm: sha256WithRSAEncryption
28:30:c6:23:1a:ab:83:a6:24:f8:2e:a7:bb:43:54:74:d1:02:
b0:de:3c:5d:8f:4a:57:35:f5:f1:d9:94:1a:e1:4d:74:d3:b1:
e0:21:9c:a1:41:47:a5:d4:36:62:1e:19:00:ba:2e:eb:80:9d:
78:3c:59:f3:db:67:66:f1:40:27:ed:5d:64:36:41:26:17:b0:
59:8f:e9:0f:e3:2b:f0:90:8f:22:82:b4:d9:5e:15:f3:18:d7:
78:27:1b:56:09:4b:82:2a:95:66:04:13:b9:23:ca:88:71:3f:
a9:c0:c7:a9:f1:b8:a7:86:67:d9:2d:9e:29:3e:82:0e:05:7e:
1c:84:47:c7:38:ad:fc:9a:20:26:99:e6:75:3f:6c:3c:b5:2d:
1a:a9:3d:c7:a4:f1:e7:37:03:7f:89:a9:c7:24:74:fd:9e:6d:
2a:06:93:ba:93:64:44:d9:e6:23:39:8e:b9:a6:b0:86:e9:c2:
21:97:02:55:0f:ea:e7:4d:9f:34:db:48:ff:4c:a6:10:28:38:
f7:4d:35:b0:89:a0:99:8e:00:ec:77:a4:cc:78:b3:8b:15:0c:
c5:ca:37:93:35:c0:49:1a:f5:e2:08:93:88:bb:11:b2:78:cb:
f9:f7:f5:f4:be:2e:cc:21:14:09:ff:38:29:0c:35:db:f4:b1:
e3:16:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:07 2024 by rpki-client on console-ams.rpki-client.org