Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rY11MwHxM5lCTKU9OWD0Zn2pySo.roa
File: rY11MwHxM5lCTKU9OWD0Zn2pySo.roa (raw, json)
Hash identifier: 7e6D5Hlf2rq7xw3fsjFYej9WT36nJiX2Th9+YJQ8fs0=
Subject key identifier: AD:8D:75:33:01:F1:33:99:42:4C:A5:3D:39:60:F4:66:7D:A9:C9:2A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348BF1204046102C155B8CCE02F16C7
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rY11MwHxM5lCTKU9OWD0Zn2pySo.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210574
IP address blocks: 46.37.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 07:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bf:12:04:04:61:02:c1:55:b8:cc:e0:2f:16:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad8d753301f13399424ca53d3960f4667da9c92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:33:22:4a:85:07:fe:68:43:1c:52:2e:05:34:
cf:61:f0:0d:70:a7:57:ef:d1:56:69:97:84:d4:3c:
a9:e3:4d:a3:17:d3:1a:5f:bd:63:cf:0b:d6:05:c6:
bc:c1:89:5b:d0:3a:08:0f:ec:62:2d:f6:79:21:13:
82:10:e3:09:da:fc:5a:7f:db:63:bf:8e:d1:57:5f:
08:9b:f0:7f:45:a6:bb:a5:46:b9:87:d9:f4:d2:5d:
b4:6e:e3:47:5e:d8:1d:76:ed:84:2b:76:27:47:34:
ed:4e:57:b8:0d:d9:f6:b4:11:0c:93:3b:f6:62:69:
29:5d:03:76:2d:b3:f6:10:f4:71:79:34:af:e2:b3:
65:1f:07:e8:89:45:eb:ef:03:7c:62:4c:04:31:ca:
b4:9e:ec:1a:9c:b0:a1:10:21:9e:3e:ad:4b:d1:0d:
b2:27:98:04:77:68:90:51:4b:c4:3d:a5:15:a2:e7:
54:ec:38:d9:c8:cb:de:17:c1:fb:b8:6b:b3:bc:8a:
a1:54:ad:7a:44:6c:43:5c:a8:e0:80:82:8d:cf:e8:
e4:51:e0:03:82:b2:b0:1c:ee:ea:68:a2:50:87:3d:
c0:e9:19:c9:90:da:3b:8d:73:24:73:79:70:1f:74:
9c:77:9f:82:4d:35:f6:33:d7:9a:26:38:54:b6:4d:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8D:75:33:01:F1:33:99:42:4C:A5:3D:39:60:F4:66:7D:A9:C9:2A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rY11MwHxM5lCTKU9OWD0Zn2pySo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:8a:2d:15:6e:d5:86:ec:41:b3:f1:ed:58:34:7e:30:21:4c:
89:fe:55:71:85:e3:85:fe:c6:36:c6:9a:50:1b:c8:c9:a5:a7:
75:f2:c7:15:21:73:3b:ac:14:11:cd:42:d2:76:5b:2c:4d:1a:
8e:ac:41:61:a0:c9:73:8f:98:e1:e0:5f:43:7b:7c:f2:59:8f:
00:1f:2a:9a:67:51:2f:45:00:ae:ce:0e:73:a8:0e:58:37:b9:
e1:f0:f8:ae:df:8a:b4:63:3c:a9:fb:e8:69:15:6a:6e:38:90:
1c:33:6f:de:df:9d:b8:f6:bf:6a:23:7c:26:85:cb:72:ae:a9:
ac:b6:2d:0d:58:34:2a:e5:76:9a:a1:42:e6:f6:e2:1f:fe:eb:
b0:37:0a:5d:6a:9e:36:46:49:44:23:47:b1:b4:14:cf:71:1a:
57:94:89:a2:7f:c5:17:0a:ba:a8:a2:07:fa:78:f9:0e:98:ff:
3e:ab:7b:06:be:20:0c:83:b8:de:7f:c4:5e:f3:9f:a7:0c:e3:
2b:15:19:5a:d8:f9:c9:2d:50:84:56:65:0a:1b:df:2d:8f:58:
6d:1d:21:11:05:56:69:9b:e1:6c:ce:81:66:40:dc:1f:0f:f0:
62:8c:3d:d7:66:2d:af:97:88:64:97:c7:cd:ab:57:f9:1a:40:
4d:d3:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 12:11:42 2024 by rpki-client on console-ams.rpki-client.org