Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/no_guspDpcedC8r6XnJQUUYdvg8.roa
File: no_guspDpcedC8r6XnJQUUYdvg8.roa (raw, json)
Hash identifier: iostBdobVLqkNqk4qZB11TDQAT9upwTBNdCHAWFYONc=
Subject key identifier: 9E:8F:E0:BA:CA:43:A5:C7:9D:0B:CA:FA:5E:72:50:51:46:1D:BE:0F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018837CF2DEA2DBB114F125784B251FC5DE9
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/no_guspDpcedC8r6XnJQUUYdvg8.roa
Signing time: Sat 20 May 2023 06:18:24 +0000
ROA not before: Sat 20 May 2023 06:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:37:cf:2d:ea:2d:bb:11:4f:12:57:84:b2:51:fc:5d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 20 06:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e8fe0baca43a5c79d0bcafa5e725051461dbe0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:63:9f:4c:d5:a8:18:38:bc:39:7d:8c:15:
d7:24:60:e8:e9:c1:50:cf:d0:8d:91:dd:72:b6:17:
e7:98:61:97:83:5b:52:14:77:d6:28:4f:d8:5f:d7:
c7:67:1f:4f:19:88:ed:34:d7:4f:78:fb:74:ad:be:
cc:45:a2:fe:b9:9f:5c:b6:fc:ce:9a:83:04:8d:0d:
34:aa:89:25:60:63:eb:c1:b6:95:08:e9:6b:2a:4b:
07:d2:93:f0:3f:84:45:68:ba:e1:1a:46:46:8b:cd:
4e:00:25:4f:86:89:62:0d:b0:80:f9:6e:b2:dd:be:
24:92:9b:2e:de:37:34:35:b0:fc:80:4a:c9:a5:75:
d0:50:86:07:6b:51:e1:b4:71:c5:fc:28:bf:84:ed:
05:3f:11:b4:33:32:d0:dd:99:3a:36:5d:5a:af:7d:
86:7c:b2:f5:a9:75:a8:95:8d:9a:c9:d1:da:a3:ab:
ca:cf:85:4a:c6:56:ed:ae:c7:41:f3:07:63:7f:98:
f9:e6:89:24:b6:5e:03:8f:7b:10:9f:f6:0a:ea:bc:
02:2f:6d:f3:93:5b:e5:d4:cc:5d:2b:74:b5:82:b9:
1f:a0:f2:55:e0:86:36:6b:67:29:07:7d:f6:02:1f:
c2:1e:b9:a9:28:63:04:fc:9e:a6:60:45:83:fa:b8:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:E0:BA:CA:43:A5:C7:9D:0B:CA:FA:5E:72:50:51:46:1D:BE:0F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/no_guspDpcedC8r6XnJQUUYdvg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
03:73:63:ac:3b:bb:67:12:5b:4b:2e:d9:3d:84:ef:93:a9:a7:
84:6a:09:17:92:58:64:84:78:37:9a:ea:7e:72:44:5f:eb:cb:
bd:9b:82:5d:06:71:d0:25:5a:26:14:27:e3:d6:63:6c:90:df:
c1:3e:3a:4d:01:fa:57:11:e7:e1:6d:33:39:7d:ec:34:fc:6a:
6b:d2:25:f2:a3:e3:4d:5d:dd:1e:6c:d3:ea:e9:03:db:48:7c:
63:d6:c5:a7:29:93:26:10:54:c0:15:4a:b0:0e:ee:3f:44:95:
bb:14:9e:a5:9a:04:53:88:2c:1d:fb:98:f0:f8:2a:9a:76:ad:
3d:a5:fb:59:86:00:92:14:47:31:db:78:ef:7a:32:2a:d5:60:
da:21:d6:99:4a:cf:b9:11:c8:2d:e2:ae:a7:1b:da:0d:6e:28:
7f:04:a7:71:62:34:e6:21:92:da:b9:e0:05:60:ff:8d:6b:9d:
5a:3a:e9:ad:7c:67:3d:f3:be:03:41:ce:2e:48:d5:b1:5c:fb:
66:d4:ee:ea:30:f9:da:96:98:ac:d3:ab:ef:5d:c7:90:2a:ea:
e9:19:0d:81:f0:8f:06:fb:f4:61:0e:f0:11:d7:dd:85:b1:ca:
f9:0c:d8:4d:3e:5f:7a:9a:a2:3d:d0:8a:af:e2:1e:05:30:e3:
78:23:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org