Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/q1e812La6Yku6krs2OL_qKwvD48.roa
File: q1e812La6Yku6krs2OL_qKwvD48.roa (raw, json)
Hash identifier: 2rAGnIREkdWUlrKatyIaEw2jaE1IAvHA/BtVpyU0TNs=
Subject key identifier: AB:57:BC:D7:62:DA:E9:89:2E:EA:4A:EC:D8:E2:FF:A8:AC:2F:0F:8F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0187D5DECDE022312DCA7E03DEF074996FB1
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/q1e812La6Yku6krs2OL_qKwvD48.roa
Signing time: Mon 01 May 2023 05:52:41 +0000
ROA not before: Mon 01 May 2023 05:52:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.97.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.104.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d5:de:cd:e0:22:31:2d:ca:7e:03:de:f0:74:99:6f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 1 05:52:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab57bcd762dae9892eea4aecd8e2ffa8ac2f0f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:67:67:2b:49:7c:7b:74:62:6e:67:38:9b:
5d:50:b8:34:b4:fd:5f:7f:84:13:5c:c1:b6:9d:a7:
25:40:2f:4c:ec:5e:92:64:ef:5a:4b:7a:5a:de:89:
8b:48:83:3f:28:94:00:c6:55:85:5d:a0:8f:71:be:
70:23:78:3b:f6:16:80:d7:05:db:b4:49:db:52:0d:
a8:45:08:11:00:2d:2b:11:d4:7f:91:e1:6c:64:3c:
56:a9:c8:f7:12:3a:f5:71:35:03:d7:c0:96:52:52:
1a:a8:ec:81:d7:d1:c7:e9:da:a1:74:57:72:84:f8:
2c:33:5e:74:25:5a:86:3f:34:17:e6:3a:a1:24:54:
4d:1e:7d:86:5a:7b:09:35:af:5a:20:fb:9c:2e:04:
aa:26:99:9e:55:66:8a:0a:8c:00:52:5c:49:e2:d2:
e5:55:65:dc:3a:b1:36:84:7a:53:5d:82:c9:7b:8e:
55:0e:75:64:09:55:27:b2:ea:47:39:d9:c0:8d:14:
5e:e9:b0:11:95:5f:73:d1:6b:9d:83:5c:40:32:ed:
90:7d:35:af:58:39:65:d9:b6:48:14:78:4d:1a:05:
14:33:7e:98:4a:ba:bb:c5:05:0b:61:99:e8:72:14:
11:03:32:8f:ca:1a:b2:8f:6f:ef:56:f7:f4:20:ad:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:57:BC:D7:62:DA:E9:89:2E:EA:4A:EC:D8:E2:FF:A8:AC:2F:0F:8F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/q1e812La6Yku6krs2OL_qKwvD48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0-46.37.98.255
46.37.104.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
33:6f:13:d9:7b:08:1b:78:a9:7b:c7:a1:a3:36:bb:4e:2e:7a:
2c:be:56:1a:84:31:71:59:f1:09:16:81:3f:ad:10:9c:a1:1b:
3a:1b:4a:1f:33:c5:14:2b:93:71:11:09:cb:02:6c:0a:3a:c1:
ee:24:ed:e3:e3:51:0a:f7:d1:8a:28:26:ee:8c:ff:e0:e0:43:
c9:06:f0:d3:75:25:ab:b8:20:24:ec:9d:3a:2a:06:95:c6:45:
4f:21:1f:5e:4d:05:59:f3:d7:ee:cc:89:0d:ff:e4:99:d3:90:
54:c2:a4:2d:eb:d2:3b:30:4a:de:95:29:f1:fb:84:b9:cc:73:
11:e4:64:b0:cc:bf:29:43:61:ad:4e:00:48:e4:d8:e8:37:9d:
bf:b2:4f:99:ab:1a:e1:76:7b:43:ea:76:1a:20:23:bc:ed:1d:
23:0b:c1:aa:b7:b7:00:b3:d1:62:c4:ec:3c:fd:03:50:68:e2:
ea:be:44:88:a3:28:ab:23:30:aa:8b:df:3e:3f:4c:ab:f1:af:
db:de:19:97:3a:ae:d2:0c:62:ee:56:9b:38:a6:ff:ce:2b:6e:
e5:09:c1:f8:06:c3:c4:d5:a6:09:5a:5d:64:58:ae:70:e6:d9:
2f:19:c3:96:46:cf:fd:11:ee:a7:1b:62:1e:ea:b4:05:bf:1a:
31:67:c7:f3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYfV3s3gIjEtyn4D3vB0mW+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwNTAxMDU1MjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjU3YmNkNzYyZGFlOTg5MmVlYTRhZWNkOGUyZmZhOGFjMmYwZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQZnZytJfHt0Ym5nOJtdULg0tP1f
f4QTXMG2naclQC9M7F6SZO9aS3pa3omLSIM/KJQAxlWFXaCPcb5wI3g79haA1wXb
tEnbUg2oRQgRAC0rEdR/keFsZDxWqcj3Ejr1cTUD18CWUlIaqOyB19HH6dqhdFdy
hPgsM150JVqGPzQX5jqhJFRNHn2GWnsJNa9aIPucLgSqJpmeVWaKCowAUlxJ4tLl
VWXcOrE2hHpTXYLJe45VDnVkCVUnsupHOdnAjRRe6bARlV9z0Wudg1xAMu2QfTWv
WDll2bZIFHhNGgUUM36YSrq7xQULYZnochQRAzKPyhqyj2/vVvf0IK0PhQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKtXvNdi2umJLupK7Nji/6isLw+PMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvcTFlODEyTGE2WWt1NmtyczJPTF9xS3d2RDQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAAuJWED
BAAuJWIDBAAuJWgwDAMEAC4lcQMEAC4lcjANBgkqhkiG9w0BAQsFAAOCAQEAM28T
2XsIG3ipe8ehoza7Ti56LL5WGoQxcVnxCRaBP60QnKEbOhtKHzPFFCuTcREJywJs
CjrB7iTt4+NRCvfRiigm7oz/4OBDyQbw03Ulq7ggJOydOioGlcZFTyEfXk0FWfPX
7syJDf/kmdOQVMKkLevSOzBK3pUp8fuEucxzEeRksMy/KUNhrU4ASOTY6Dedv7JP
masa4XZ7Q+p2GiAjvO0dIwvBqre3ALPRYsTsPP0DUGji6r5EiKMoqyMwqovfPj9M
q/Gv294Zlzqu0gxi7labOKb/zitu5QnB+AbDxNWmCVpdZFiucObZLxnDlkbP/RHu
pxtiHuq0Bb8aMWfH8w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org