Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/t4yHeQecEVwA4D31TFrr1TyeEso.roa
File: t4yHeQecEVwA4D31TFrr1TyeEso.roa (raw, json)
Hash identifier: k8+wgcti04OvTigHCuG0l7ERLroKYYsVXiuwypPEcCs=
Subject key identifier: B7:8C:87:79:07:9C:11:5C:00:E0:3D:F5:4C:5A:EB:D5:3C:9E:12:CA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0AE4BECD72477B6EA59C044150DD9A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/t4yHeQecEVwA4D31TFrr1TyeEso.roa
Signing time: Sun 01 Jan 2023 11:15:08 +0000
ROA not before: Sun 01 Jan 2023 11:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e4:be:cd:72:47:7b:6e:a5:9c:04:41:50:dd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b78c8779079c115c00e03df54c5aebd53c9e12ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:63:8e:c8:63:ce:13:12:66:a7:e0:58:39:0b:
80:13:64:98:02:38:75:61:11:53:30:c5:b8:bf:73:
ea:2a:52:f7:91:3c:a1:5f:2a:f0:7c:ae:4e:59:e3:
df:16:db:3e:91:ee:6a:e0:be:90:f2:05:b8:f0:10:
63:3e:8f:84:46:35:b3:0c:77:b4:2e:13:96:a0:a9:
cb:d1:9f:8d:56:b7:56:14:1a:57:66:2d:40:2b:88:
f8:16:e1:40:30:2c:cd:36:ab:f2:17:55:02:11:d0:
51:04:5f:e3:64:6c:4a:a0:27:a0:1f:52:b2:97:bb:
91:18:23:dc:3c:d2:63:02:4b:75:46:cc:b1:a4:52:
4d:54:04:02:42:0e:8b:ad:60:cc:35:35:f4:18:1b:
99:01:f3:2e:26:4e:12:6b:d4:1a:9f:fc:4b:19:e6:
56:56:9a:7d:f8:ca:63:f4:07:76:05:9a:b4:2a:98:
38:0e:84:95:49:1b:e8:83:b0:91:19:f8:d9:d2:e6:
9b:11:26:f3:bc:20:36:a1:4d:6f:77:17:3b:c7:81:
bf:b5:a2:3a:07:45:87:43:dd:e1:61:7e:fc:0b:6d:
9b:0b:ff:07:0d:cb:63:82:61:38:e6:d4:8f:b6:02:
7a:56:01:b1:fd:56:e7:af:49:97:16:dc:b2:a8:ee:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:87:79:07:9C:11:5C:00:E0:3D:F5:4C:5A:EB:D5:3C:9E:12:CA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/t4yHeQecEVwA4D31TFrr1TyeEso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a9:70:62:15:c8:48:81:e2:06:40:74:e9:99:f4:f2:98:a5:
bb:18:d4:0a:f6:a5:43:53:b0:3b:73:2d:90:48:21:ee:2e:b6:
91:e2:07:69:0b:6c:4f:fa:df:3e:de:18:2c:2f:ef:d2:fc:01:
99:6b:ab:8b:51:d1:e2:dd:95:89:d8:63:07:07:21:8e:15:e3:
1e:8a:00:6b:d7:05:ce:24:74:6c:26:b9:bc:b6:72:2c:5b:79:
b6:e6:06:7a:8f:bf:4b:d2:c9:1c:7d:c4:08:cf:6f:c1:1e:d3:
a6:44:14:93:cf:a3:8b:30:42:16:11:56:38:a9:ec:77:80:c1:
4a:1e:f0:25:1f:b6:5b:25:fe:47:69:58:6f:75:a5:9a:e5:2f:
60:e7:f8:62:a2:f1:0c:95:3b:df:91:c6:a2:88:93:36:54:2e:
02:ee:6a:57:0f:8c:a6:01:d0:5d:b9:54:d6:aa:60:21:2f:8e:
0a:ba:a6:ab:f5:5e:8c:e4:8c:48:f5:31:78:f6:dc:ee:a3:63:
57:d6:79:18:9d:f0:28:13:1d:a5:d9:f9:b3:db:4b:c5:55:fb:
be:ec:4e:98:ab:74:85:a6:8e:20:de:3d:31:6b:c7:67:fe:a5:
93:22:de:b1:a1:0f:7c:69:58:47:c2:20:f5:68:00:7b:8d:ff:
72:fd:b4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org