Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rl4iaQbBsAsRzUQQKJejkr5heqc.roa
File: rl4iaQbBsAsRzUQQKJejkr5heqc.roa (raw, json)
Hash identifier: gRXfj26287PA9ilOOhNJp7dNOTAYONF90niZyUtQ3es=
Subject key identifier: AE:5E:22:69:06:C1:B0:0B:11:CD:44:10:28:97:A3:92:BE:61:7A:A7
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01885DB775E9C4598250FD7CEDB008E6FA88
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rl4iaQbBsAsRzUQQKJejkr5heqc.roa
Signing time: Sat 27 May 2023 14:58:04 +0000
ROA not before: Sat 27 May 2023 14:58:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:b7:75:e9:c4:59:82:50:fd:7c:ed:b0:08:e6:fa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 27 14:58:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae5e226906c1b00b11cd44102897a392be617aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:61:08:f8:7b:a1:a1:9e:37:44:d8:c4:54:e1:
e4:20:80:76:83:89:ce:4e:d5:a7:3e:6d:88:88:fa:
98:e5:d2:f8:21:76:d9:ad:fb:72:9d:0a:fb:0d:91:
75:57:f1:1a:cc:8f:a3:b7:fd:67:14:52:55:64:41:
b8:c6:72:78:6c:c8:9b:ab:6f:03:a0:42:9a:31:fe:
69:e2:1a:62:32:fe:79:3c:0b:05:c8:11:3d:b2:cf:
82:17:c7:aa:bb:75:ae:98:c7:b8:dc:0b:5b:59:21:
2d:9f:be:46:8a:c0:0b:85:99:6e:f2:87:0c:26:37:
a2:68:df:08:00:95:c1:9a:1e:5a:34:0c:19:45:ff:
de:6d:29:65:60:5f:a1:f0:f4:b0:95:34:ed:9c:ee:
cd:86:1b:fa:c3:31:c1:f9:f4:23:22:b6:6e:9f:f1:
22:d6:1c:d2:39:a0:54:ad:cd:a1:2e:e7:b1:75:6b:
30:4f:20:d6:2e:51:0e:17:8b:cd:93:e4:3b:a6:5a:
4c:c0:a9:b9:72:cd:a6:d9:fd:73:99:fa:7e:06:e8:
e6:8c:05:ff:50:bb:65:da:99:0f:d1:1e:e9:f6:85:
63:a4:29:5e:5b:3f:7e:bf:79:38:d1:3c:d3:b2:5e:
f1:4c:25:4b:b6:3c:bc:6d:63:96:26:06:f6:44:5b:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5E:22:69:06:C1:B0:0B:11:CD:44:10:28:97:A3:92:BE:61:7A:A7
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rl4iaQbBsAsRzUQQKJejkr5heqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
58:92:14:63:ef:92:e7:4f:61:5c:36:66:09:5c:a1:f4:ca:cb:
97:1b:c6:90:89:77:85:4d:9d:a2:81:5e:00:e8:56:40:b0:6b:
8d:fa:ee:d7:f1:0d:ce:45:97:68:bf:81:19:71:c2:ad:bb:30:
e0:b4:c7:fe:45:ac:c4:f2:33:8e:04:38:5d:d4:e8:f6:39:fc:
e6:ca:f9:31:f4:22:43:5c:e9:33:d7:29:19:31:a8:34:f6:df:
a5:b7:c5:c6:57:25:32:ca:03:2c:a6:07:02:82:28:76:67:e8:
ab:a8:8c:b2:58:28:a7:26:9f:e5:93:af:75:3a:f4:94:d5:cc:
b5:56:91:a4:2d:8c:a3:7a:e7:0c:5b:47:0c:dd:bc:6a:a8:22:
39:36:f7:fa:aa:2a:74:68:39:e9:78:d8:b8:d9:44:de:b2:e6:
ed:7c:11:a2:57:75:d7:24:f4:03:46:4c:8d:8a:19:20:6e:1d:
80:1e:6d:66:3e:20:a7:5b:11:9e:3a:07:2e:ee:92:a5:20:ac:
f1:a9:f1:80:a8:f1:83:14:0e:18:ea:8c:c7:68:af:2a:8c:4b:
00:68:39:78:92:16:c9:ce:a6:aa:2b:8a:86:45:67:d7:be:7d:
8c:20:e6:6b:9c:f6:d1:90:71:c0:e2:d4:b5:5c:b6:c0:cd:84:
9f:04:e2:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org