Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/quMlTUTUQjmN-Rnw7VsFGfqX9hM.roa
File: quMlTUTUQjmN-Rnw7VsFGfqX9hM.roa (raw, json)
Hash identifier: 1+SX5QIh1sXd7jms7CWMIWkYT5YX8eIyCMimUBOw948=
Subject key identifier: AA:E3:25:4D:44:D4:42:39:8D:F9:19:F0:ED:5B:05:19:FA:97:F6:13
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0ADBA337455FBAE781D876BF5ACA37
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/quMlTUTUQjmN-Rnw7VsFGfqX9hM.roa
Signing time: Sun 01 Jan 2023 11:15:06 +0000
ROA not before: Sun 01 Jan 2023 11:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 46.37.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:db:a3:37:45:5f:ba:e7:81:d8:76:bf:5a:ca:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aae3254d44d442398df919f0ed5b0519fa97f613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:ef:89:2a:e3:a0:c0:17:45:22:a6:e6:03:
95:e1:2c:c2:2c:49:c2:98:6a:2a:c5:f3:bd:73:51:
0e:d1:ab:bc:20:7a:79:ff:c8:dc:c2:77:9b:ae:69:
e5:6e:48:00:93:aa:02:81:34:fa:2c:ba:ef:5b:a9:
f2:94:c5:ee:de:42:b6:0a:72:28:d0:2e:7a:4b:7e:
5f:48:12:d9:5b:1e:0c:7d:fe:9a:e3:21:a7:5e:f5:
c9:3b:59:e9:f2:a0:76:ae:d4:b2:48:c2:fc:0a:d9:
6d:ff:b1:1c:e5:92:7c:16:64:3f:06:54:cc:b6:3c:
da:21:90:19:37:dd:39:98:a3:1c:8d:b5:e9:e7:f7:
62:d8:f1:57:a9:ca:e4:19:5f:ec:5e:ed:a9:51:1c:
a9:88:99:ec:a1:35:05:eb:25:fd:44:88:cf:13:06:
ef:35:8f:83:39:df:10:ad:af:c8:cf:44:b5:a9:67:
f7:ac:fb:2d:82:6f:8a:eb:83:ac:f5:8a:cd:a8:00:
75:e5:8a:c7:6a:a0:a6:2a:7d:9b:5f:c5:38:10:b3:
3f:e0:4d:46:b7:bb:30:d4:3c:4c:a9:3c:86:e9:f2:
b5:e7:f2:60:b6:38:3c:f0:b3:6f:69:94:4a:95:d2:
4a:9c:81:39:e2:10:44:ed:8b:cc:da:13:53:59:e0:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E3:25:4D:44:D4:42:39:8D:F9:19:F0:ED:5B:05:19:FA:97:F6:13
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/quMlTUTUQjmN-Rnw7VsFGfqX9hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.116.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6f:dc:3a:8a:87:36:46:d6:da:7e:2a:b1:57:5d:4d:d0:8f:
e0:4f:a8:2a:1b:cb:9f:ea:53:56:27:00:c2:05:90:2a:87:89:
d2:63:90:a2:e3:33:f9:e0:fc:f7:de:75:6f:db:c3:a2:15:fb:
47:e6:b3:3d:cd:2c:f9:99:89:fb:75:c4:16:f5:19:d7:ba:7a:
12:2e:72:49:56:41:d4:f5:3b:bb:ab:f9:4b:d0:2d:4a:7b:0b:
32:6c:f9:b4:a2:a4:39:78:61:4a:20:4b:71:71:88:6f:c8:99:
2f:be:91:1b:e1:c3:95:3b:e1:52:a9:99:a0:d9:92:38:b4:be:
a5:6c:8f:fe:3b:2d:58:86:f1:d2:c4:a4:8b:d9:1a:ee:41:0a:
5c:75:2a:86:96:f8:74:0d:1d:9f:fd:35:cb:e3:e5:2b:12:98:
96:61:3c:91:00:4a:e8:bc:dd:64:2c:b6:33:59:58:63:24:70:
59:35:bf:62:55:8e:fd:59:48:74:a0:59:d8:ad:c3:a7:11:f3:
4e:30:0f:86:36:11:ee:20:47:7f:06:a4:9d:91:74:77:2e:77:
d2:7a:20:f2:0b:cc:1d:9e:bb:92:ec:41:86:82:80:45:d6:9f:
f3:10:b3:7d:35:cf:44:94:5d:f8:88:f6:21:9b:84:93:63:b4:
b2:57:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:05 2024 by rpki-client on console-ams.rpki-client.org