Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/qVsA9J15E64xujnHpyI89RgwjVw.roa
File: qVsA9J15E64xujnHpyI89RgwjVw.roa (raw, json)
Hash identifier: pSiGiMULuDqhpgLjJdmVYqR8cvAv0bBWRMBbiTYf7TI=
Subject key identifier: A9:5B:00:F4:9D:79:13:AE:31:BA:39:C7:A7:22:3C:F5:18:30:8D:5C
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01882B8B5FA6B127AD9599BBBB83E7B61C4A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/qVsA9J15E64xujnHpyI89RgwjVw.roa
Signing time: Wed 17 May 2023 21:08:54 +0000
ROA not before: Wed 17 May 2023 21:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2b:8b:5f:a6:b1:27:ad:95:99:bb:bb:83:e7:b6:1c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 17 21:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a95b00f49d7913ae31ba39c7a7223cf518308d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:88:8e:b4:0e:c5:88:0f:f0:6d:5f:62:3c:ad:
57:8e:e5:17:d6:f5:d0:c0:e2:b0:88:5f:4c:a6:83:
8e:4f:90:98:9e:f4:9e:2a:2f:e7:32:33:79:4e:52:
16:0d:88:82:d9:26:9e:ad:8c:a6:f5:8d:c2:f5:f7:
78:f4:cc:b6:d0:bf:2c:69:d3:06:cd:65:43:3f:4e:
91:13:6c:d8:de:63:c7:58:7c:fe:9b:49:5f:73:58:
6c:b1:8c:02:a4:f9:71:95:9a:e1:9a:94:07:0b:32:
ef:9c:de:b4:33:b2:15:4a:1b:36:7f:e4:d2:4a:e6:
99:b1:f5:a5:ee:8b:e4:48:3b:da:77:6a:04:09:c3:
a3:e5:2a:fc:63:54:d5:d6:c1:5c:2b:a4:ef:80:9f:
09:db:f0:42:d9:ec:45:ac:8b:68:97:f0:05:2e:bd:
c4:15:2a:04:7f:91:82:7a:ee:7c:f7:38:0d:6a:52:
ec:39:30:51:50:6d:dd:46:40:52:c1:70:91:b0:b5:
30:15:4b:3e:7a:4d:b9:a2:f3:7c:fe:2c:1d:3b:84:
f4:c4:9d:ff:98:05:86:1a:88:99:23:a4:98:56:99:
dd:9a:f3:e1:e0:8a:7c:fe:ea:9c:07:86:89:80:72:
54:6f:f8:55:c9:31:49:96:bb:7b:b7:e9:91:27:40:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:00:F4:9D:79:13:AE:31:BA:39:C7:A7:22:3C:F5:18:30:8D:5C
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/qVsA9J15E64xujnHpyI89RgwjVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
83:02:21:28:d5:c0:d9:8a:47:55:ad:92:b4:e3:91:42:65:91:
15:13:69:fe:bb:ab:3c:97:a4:2e:f1:bd:24:40:2d:8b:42:d3:
71:df:15:20:29:5d:12:c3:8f:0d:ec:67:67:4d:5c:59:9a:3a:
fb:9c:9b:f1:67:52:09:47:e7:fb:25:c4:53:71:15:db:13:c5:
86:52:92:be:1b:9b:29:6c:fc:23:21:df:60:71:ca:7e:cb:a0:
02:25:42:24:7f:6e:fa:bc:f0:6f:48:ab:e9:80:28:b0:fe:84:
e7:34:5f:1d:07:bb:bc:1f:97:a9:90:ce:f2:98:7a:d7:5d:82:
52:4a:4f:2a:9a:99:5c:f1:1f:61:f8:bd:f6:28:ab:c3:a6:2f:
96:93:d8:a9:5a:81:83:d7:e5:81:56:43:c2:01:ff:c2:65:9c:
a8:10:d7:4e:df:0c:5c:ff:b6:00:82:88:25:fb:58:72:5f:a9:
fe:a0:df:28:64:94:b1:fe:50:25:c5:4a:8a:94:a9:77:e5:eb:
36:d4:39:ba:06:ed:a7:0c:4c:f1:25:51:e5:d2:0e:69:b8:e7:
10:85:f7:65:f2:1d:4d:0e:f7:99:2c:6f:9f:7e:09:4b:7d:ff:
c0:c2:5d:25:a3:2f:c6:2a:28:7a:94:d5:11:05:6e:1d:de:3a:
ed:1f:f9:f1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYgri1+msSetlZm7u4PnthxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwNTE3MjEwODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTViMDBmNDlkNzkxM2FlMzFiYTM5YzdhNzIyM2NmNTE4MzA4ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYiOtA7FiA/wbV9iPK1XjuUX1vXQ
wOKwiF9MpoOOT5CYnvSeKi/nMjN5TlIWDYiC2SaerYym9Y3C9fd49My20L8sadMG
zWVDP06RE2zY3mPHWHz+m0lfc1hssYwCpPlxlZrhmpQHCzLvnN60M7IVShs2f+TS
SuaZsfWl7ovkSDvad2oECcOj5Sr8Y1TV1sFcK6TvgJ8J2/BC2exFrItol/AFLr3E
FSoEf5GCeu589zgNalLsOTBRUG3dRkBSwXCRsLUwFUs+ek25ovN8/iwdO4T0xJ3/
mAWGGoiZI6SYVpndmvPh4Ip8/uqcB4aJgHJUb/hVyTFJlrt7t+mRJ0BP9QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKlbAPSdeROuMbo5x6ciPPUYMI1cMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvcVZzQTlKMTVFNjR4dWpuSHB5STg5Umd3alZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALiViMAwD
BAAuJXEDBAAuJXIwDQYJKoZIhvcNAQELBQADggEBAIMCISjVwNmKR1WtkrTjkUJl
kRUTaf67qzyXpC7xvSRALYtC03HfFSApXRLDjw3sZ2dNXFmaOvucm/FnUglH5/sl
xFNxFdsTxYZSkr4bmyls/CMh32Bxyn7LoAIlQiR/bvq88G9Iq+mAKLD+hOc0Xx0H
u7wfl6mQzvKYetddglJKTyqamVzxH2H4vfYoq8OmL5aT2KlagYPX5YFWQ8IB/8Jl
nKgQ107fDFz/tgCCiCX7WHJfqf6g3yhklLH+UCXFSoqUqXfl6zbUOboG7acMTPEl
UeXSDmm45xCF92XyHU0O95ksb59+CUt9/8DCXSWjL8YqKHqU1REFbh3eOu0f+fE=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org