Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nELlctlIBUilYYPS_IuBj752HMM.roa
File: nELlctlIBUilYYPS_IuBj752HMM.roa (raw, json)
Hash identifier: k2YXClS/VZUqrwrKtsW0WWwVz9/PS0OfYpuq5piRbTo=
Subject key identifier: 9C:42:E5:72:D9:48:05:48:A5:61:83:D2:FC:8B:81:8F:BE:76:1C:C3
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01907CA974E7A06DCD33E4001128E612AB32
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nELlctlIBUilYYPS_IuBj752HMM.roa
Signing time: Thu 04 Jul 2024 07:33:18 +0000
ROA not before: Thu 04 Jul 2024 07:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 20:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7c:a9:74:e7:a0:6d:cd:33:e4:00:11:28:e6:12:ab:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 4 07:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c42e572d9480548a56183d2fc8b818fbe761cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:ac:57:dd:97:71:08:d1:2b:b9:c4:73:6f:
b8:df:49:35:e1:8c:88:a3:65:af:8f:13:0b:04:c0:
3f:9a:05:74:ff:be:a4:70:a8:9d:ef:07:9b:19:bd:
c5:90:6b:1e:c8:b8:35:53:f8:47:8e:dc:3a:e9:b2:
6d:67:27:d4:ec:6b:1a:2d:7c:45:2b:c4:e1:7a:22:
05:d6:52:ad:07:eb:b3:4f:a8:26:14:9c:c6:67:62:
96:cf:ba:ed:dc:5b:32:13:ac:b0:5f:af:49:f3:77:
e7:c0:e7:f5:56:a4:29:8d:9d:d6:33:35:ad:1e:75:
23:04:ee:e9:90:63:ae:ec:8a:d4:be:3e:d1:15:ae:
20:c0:07:bd:75:0b:c7:ae:1b:12:57:22:74:e5:7f:
5a:11:8f:b3:6c:eb:a7:01:66:da:e8:e4:08:61:f5:
e7:8f:14:6e:93:f0:3b:db:b3:54:99:a3:a6:9b:db:
c1:1d:2e:2d:43:74:62:ef:39:a5:c2:56:c1:b4:f8:
dd:c3:c6:d2:82:b4:63:49:f3:ce:53:3b:fb:f2:9b:
94:0b:ac:11:c6:3c:28:26:9b:d4:8a:cd:35:97:75:
f8:5b:7f:56:a7:ae:b8:24:fd:b0:d9:57:a0:78:8c:
82:39:67:37:01:45:99:3c:be:a4:26:dd:bf:26:da:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:42:E5:72:D9:48:05:48:A5:61:83:D2:FC:8B:81:8F:BE:76:1C:C3
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nELlctlIBUilYYPS_IuBj752HMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.122.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:24:fb:02:29:6b:4a:ff:3d:2d:5a:31:ef:f9:ac:4a:f3:f1:
48:5c:ab:aa:5d:15:5b:16:5d:67:a9:99:dc:89:3a:19:e3:75:
76:7f:d0:5c:7c:6f:5e:29:0b:aa:c7:6d:7b:80:16:53:b6:f5:
e2:74:1d:23:52:d5:97:7e:4b:77:4a:7c:65:cf:e2:32:12:65:
42:d7:e4:96:b8:3f:bf:27:bb:04:ba:19:ad:c1:c8:d9:e6:91:
6e:73:99:1c:44:37:bf:10:d1:52:ee:c4:bd:d4:8f:f3:46:9b:
d6:23:4f:a5:0a:7e:7c:31:4b:0d:50:83:f4:96:e5:bf:08:5e:
9a:c3:e4:33:2a:64:26:14:7b:1c:f1:11:36:17:9f:e4:74:c3:
fc:e8:ee:a3:bb:9c:17:bc:44:b6:64:90:1f:48:0b:97:60:7e:
d0:e5:7d:22:82:db:69:f2:b6:77:47:6b:95:a5:c3:27:98:3d:
58:3b:ff:46:1a:ac:41:8d:14:9f:22:b5:f9:c4:74:87:ca:26:
b3:5a:fd:0a:1f:63:f4:f7:c0:47:eb:f6:d2:c3:7e:e0:f2:09:
f4:9d:07:ea:77:df:09:aa:b4:ef:07:50:cd:70:f2:57:b4:1a:
43:f9:40:23:13:29:72:79:40:ee:1b:c6:9c:73:e8:fa:b3:6e:
cb:ec:38:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 22:01:58 2024 by rpki-client on console-ams.rpki-client.org