Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/s13MfP7uQXQTBy7hMG95Lc875l0.roa
File: s13MfP7uQXQTBy7hMG95Lc875l0.roa (raw, json)
Hash identifier: auLZQ1LABtdcvOnw7953ows5NwHrZec7FTuCxHGGBWY=
Subject key identifier: B3:5D:CC:7C:FE:EE:41:74:13:07:2E:E1:30:6F:79:2D:CF:3B:E6:5D
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018956E76787C67C406906C1D3FD8E52DB13
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/s13MfP7uQXQTBy7hMG95Lc875l0.roa
Signing time: Sat 15 Jul 2023 00:15:53 +0000
ROA not before: Sat 15 Jul 2023 00:15:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:56:e7:67:87:c6:7c:40:69:06:c1:d3:fd:8e:52:db:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 15 00:15:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b35dcc7cfeee417413072ee1306f792dcf3be65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:f8:cb:12:ce:b9:48:a6:7d:43:3d:14:dd:
dc:24:2f:99:90:ab:17:eb:41:8c:ee:7f:3c:02:31:
b0:60:53:87:cc:b0:12:f9:f9:d2:c6:77:0a:79:ae:
f7:b8:3f:74:13:a3:b6:f5:da:60:fb:4e:d7:3e:61:
46:90:87:58:4e:6a:f0:81:12:bc:5d:10:a6:3f:f6:
49:da:6c:8b:72:0d:71:31:8f:ff:e8:64:63:fb:9d:
a8:b5:cc:47:fc:fc:1d:33:58:bf:b8:28:83:a3:d5:
77:b0:80:6d:61:32:1b:c5:19:d6:4d:22:92:50:10:
74:30:61:14:a0:3b:67:fc:16:e1:eb:cc:cb:bf:ad:
ac:47:d8:f7:8d:d2:b8:d8:63:96:d3:c4:48:61:1d:
be:b6:8b:2b:73:ed:5a:ea:65:23:b7:75:ae:3a:85:
2c:5e:f6:9a:08:d1:73:25:5f:04:60:88:40:ee:31:
53:6c:6f:c3:53:87:4f:a6:58:d1:39:e5:3e:b8:2d:
c8:8c:8e:04:e8:67:3a:73:9d:a9:e5:e5:20:d3:e6:
e5:a0:fc:95:4c:8e:0d:11:3d:be:d1:e4:dd:af:40:
e9:81:16:5e:e1:2b:7e:c2:c5:59:0c:af:9b:58:d2:
1d:fa:85:3e:d2:43:b9:c2:77:34:b0:f2:18:23:e2:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5D:CC:7C:FE:EE:41:74:13:07:2E:E1:30:6F:79:2D:CF:3B:E6:5D
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/s13MfP7uQXQTBy7hMG95Lc875l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.119.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3a:2b:ef:0b:80:52:04:f0:73:64:c4:9b:e0:30:1f:70:90:
90:e3:33:53:94:78:99:63:4f:6b:0e:3c:37:c5:57:71:dc:ae:
a9:32:a9:93:b2:94:49:74:f5:90:02:cd:22:5a:e0:50:b3:d0:
04:5a:57:39:7d:70:b1:96:ff:88:9e:08:7f:89:9f:9d:b9:b7:
97:7b:69:34:9d:7b:65:ff:ee:1b:5e:80:ec:d4:46:c8:cf:ad:
b8:1f:8b:3c:71:9d:6a:8d:c3:da:60:23:48:36:38:8c:0e:a1:
29:2d:f5:f5:54:31:e0:d6:67:5f:8f:0d:37:34:08:e1:2f:57:
39:c5:31:a0:84:9a:3c:47:af:af:8b:09:49:e6:7e:b2:e4:51:
7a:eb:a3:72:35:cf:66:e8:9c:68:dc:b6:4d:08:18:9e:20:95:
de:73:c6:7c:7a:22:b1:b2:25:02:21:07:e3:38:01:bd:2e:4b:
87:fc:b6:27:a2:94:86:17:bc:0c:60:38:ea:65:e4:9a:a3:b2:
a6:a1:de:17:a3:46:d6:22:30:4d:10:05:08:a9:2e:7c:42:26:
93:35:a4:12:f2:37:30:80:b2:7a:f5:a9:2c:ec:10:8d:26:46:
40:87:c8:d5:5c:67:89:e8:2b:b0:76:a2:4b:d0:75:ef:d9:8c:
e0:4d:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org