Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nftfAoI5M6kbY_VJ41gZmMfpAZQ.roa
File: nftfAoI5M6kbY_VJ41gZmMfpAZQ.roa (raw, json)
Hash identifier: 1GYddvhmAKiZETRumao8SEPY5ek75mnmuiLg5z/hJV0=
Subject key identifier: 9D:FB:5F:02:82:39:33:A9:1B:63:F5:49:E3:58:19:98:C7:E9:01:94
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01877A213FD73EE35FDC8E84AFB491860455
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nftfAoI5M6kbY_VJ41gZmMfpAZQ.roa
Signing time: Thu 13 Apr 2023 10:20:12 +0000
ROA not before: Thu 13 Apr 2023 10:20:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.124.0/24 maxlen: 24
91.205.228.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:21:3f:d7:3e:e3:5f:dc:8e:84:af:b4:91:86:04:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 13 10:20:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dfb5f02823933a91b63f549e3581998c7e90194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:d2:a9:2c:5d:a4:1c:a4:92:77:8c:74:cc:
57:bc:c9:ee:4f:2f:99:54:fe:8f:c4:be:76:fc:ec:
e9:e9:b3:7d:df:f6:bc:f9:d0:3c:a0:30:ae:df:dd:
77:2f:cf:d2:1d:61:e4:59:b3:da:45:95:59:84:57:
c6:61:28:0a:de:53:75:ec:c3:fa:7e:b6:32:2d:35:
07:ee:f6:c9:6b:a9:e4:13:66:58:4b:5d:3e:ec:f8:
d6:79:3f:67:cd:e7:66:f0:7b:4b:9d:91:c4:54:c9:
c8:48:a0:db:93:c1:49:49:b0:07:c1:57:a2:fb:23:
14:5c:70:0e:8e:a1:91:84:29:bd:f2:62:3b:9c:87:
07:26:c2:8a:86:6d:f7:b0:00:d0:27:21:29:7f:1a:
cb:09:89:b4:95:63:bc:e8:d4:69:37:e5:11:10:e4:
74:7f:c6:b8:e4:e5:0f:1c:14:bd:f9:bd:12:17:0b:
b2:08:e3:0e:b9:21:ff:c4:40:f1:fe:66:0c:cb:ca:
fa:5b:58:b0:30:18:14:ef:32:37:8d:5e:69:51:cb:
cb:67:c5:78:c5:ee:72:6a:65:5c:96:4d:88:8b:b5:
ac:a3:1c:14:d7:2b:de:3b:2e:2f:81:91:c7:69:ef:
78:8e:ef:96:9c:55:b7:49:47:97:fb:a5:5a:1a:de:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FB:5F:02:82:39:33:A9:1B:63:F5:49:E3:58:19:98:C7:E9:01:94
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nftfAoI5M6kbY_VJ41gZmMfpAZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.123.0-46.37.124.255
46.37.127.0/24
91.205.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:ac:60:12:f3:6b:8a:ce:e9:64:ee:5c:90:76:31:15:82:e4:
23:7e:b7:85:6a:9a:28:f9:3c:85:99:45:a5:a1:8f:a1:34:fe:
7d:38:4c:7c:78:5d:ad:99:7a:5e:f1:eb:9f:61:40:b6:bb:76:
d0:ae:32:bb:9d:8b:51:cd:94:e6:7f:f2:fa:f6:15:d2:f3:29:
87:4d:8e:60:c5:ed:da:5b:04:d5:39:4b:8c:ca:30:ff:be:3a:
e6:63:62:a8:60:c5:35:2f:b2:12:1c:cb:3f:8f:2e:94:fa:9a:
1c:dd:07:19:a6:4e:0f:4c:57:9e:1b:1e:c1:dd:ed:b5:32:ca:
91:e2:80:a5:12:03:bc:4d:16:6a:b3:09:d8:27:14:56:c0:f6:
d4:7e:69:2b:c2:cf:34:4b:07:17:9a:33:85:25:8e:39:fb:4a:
e5:42:69:5c:99:ec:be:a0:03:85:50:65:6c:b2:53:1e:9f:a3:
32:f4:09:2a:88:5d:34:e3:d0:ab:6b:93:d8:a8:dd:f0:1a:56:
27:9a:7e:18:ad:a0:59:91:63:15:68:02:21:45:2e:d0:c7:31:
32:98:a7:1f:45:49:7d:28:6d:c1:9e:8c:28:d4:42:13:49:11:
80:46:c3:bb:25:4e:e6:07:4b:b6:7f:ca:12:af:5c:97:0b:e0:
fd:e7:86:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:44 2023 by rpki-client on console-fra.rpki-client.org