Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/tKLa72AEhr4BdUXM3OMWFsiCPKs.roa
File: tKLa72AEhr4BdUXM3OMWFsiCPKs.roa (raw, json)
Hash identifier: eclX0flGOnod3KAr87oMZ1yGVE+7W9M3VplrNZ//X4E=
Subject key identifier: B4:A2:DA:EF:60:04:86:BE:01:75:45:CC:DC:E3:16:16:C8:82:3C:AB
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01909E4053E316702A836B481D16050A029B
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/tKLa72AEhr4BdUXM3OMWFsiCPKs.roa
Signing time: Wed 10 Jul 2024 20:05:34 +0000
ROA not before: Wed 10 Jul 2024 20:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.108.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 15:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9e:40:53:e3:16:70:2a:83:6b:48:1d:16:05:0a:02:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 10 20:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4a2daef600486be017545ccdce31616c8823cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:5d:ef:75:83:2b:a1:52:4e:32:15:45:00:
04:f5:3b:f1:9a:54:9c:5c:59:29:76:72:c1:9a:d9:
89:a8:b0:8b:8d:a4:04:33:44:80:b6:d5:3c:50:16:
54:c2:9a:58:3d:3a:49:62:b7:83:53:ae:c3:3e:9f:
e7:0f:99:fd:bf:b0:3d:03:02:32:08:3a:d6:94:43:
8e:77:86:96:5f:5e:78:e5:62:1a:ce:b4:88:32:4a:
b6:86:a9:ac:72:7f:97:4e:fa:84:15:91:69:98:88:
ed:4c:94:02:b3:6e:28:2a:fe:19:50:1b:77:10:70:
2d:23:df:0a:89:14:d8:49:8f:fa:f1:7b:7c:9d:0a:
57:0d:a0:90:fa:96:0a:5e:b6:6b:d1:72:ce:0d:a2:
3e:0a:d9:57:3a:25:e9:0e:06:3f:5b:57:83:0c:75:
4d:f6:1f:bc:d6:5b:93:82:da:88:c4:e5:c8:f6:45:
d5:15:1c:aa:bd:e5:2c:ac:00:0d:d0:9e:01:b4:a8:
82:92:11:01:39:30:90:cb:a8:c0:53:f2:79:6e:29:
bc:93:c0:06:2d:83:53:5a:0e:92:cf:ac:fa:1b:2a:
61:c7:4b:e6:8f:e2:00:2a:c7:22:6c:73:08:30:bf:
ce:eb:5c:ac:09:10:16:6d:7b:b0:15:4c:68:91:f1:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A2:DA:EF:60:04:86:BE:01:75:45:CC:DC:E3:16:16:C8:82:3C:AB
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/tKLa72AEhr4BdUXM3OMWFsiCPKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.108.0/24
46.37.113.0/24
46.37.122.0/24
Signature Algorithm: sha256WithRSAEncryption
60:bc:da:17:34:67:c6:1a:3d:9f:de:54:43:20:cf:96:7d:de:
26:5e:c2:fa:fe:b3:b7:d9:a7:b5:90:1d:f4:8f:ce:df:83:d5:
65:28:99:88:de:71:5a:0f:80:d5:85:9a:c3:46:e1:35:31:d3:
3c:cb:b1:f7:8e:ce:13:2a:3b:28:8d:5b:8b:47:27:eb:95:9c:
49:6d:34:ff:15:c1:6f:65:58:fc:90:00:5a:cf:0c:51:88:f0:
35:04:24:70:a2:1c:8e:da:8a:77:94:6b:e3:1e:c1:99:7b:04:
eb:d4:da:9c:50:42:a8:36:e7:d6:d0:e4:c4:f2:cd:3f:ce:4c:
15:b6:fc:8e:ee:73:d8:fb:77:22:95:da:f4:d7:3f:54:3f:0d:
2e:19:73:ae:f7:97:4a:a4:07:b2:82:a1:06:af:af:73:f4:06:
51:10:f1:39:92:d2:7f:1f:9f:33:3b:ca:bb:50:01:69:e7:b9:
87:fd:4d:ee:d1:f5:9c:d4:50:7a:57:7d:eb:22:88:a1:ce:db:
f0:92:4e:33:f6:9c:10:59:e9:5a:37:b6:ea:50:14:35:84:39:
81:89:fd:fe:62:f7:3e:7f:f3:36:c4:79:ba:79:1d:2c:b8:36:
1b:3d:4d:d6:60:8e:3b:64:2b:8f:8e:f2:b7:c0:1f:a2:92:7b:
d7:02:4c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 19:33:29 2024 by rpki-client on console-fra.rpki-client.org