Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/tbCA7oA95Ls5c0WWF7r1Qzo0ypk.roa
File: tbCA7oA95Ls5c0WWF7r1Qzo0ypk.roa (raw, json)
Hash identifier: 1L9I1NhgsMK3egeO5WsXGF0nJg6vGGVZc3FXkVB+ESY=
Subject key identifier: B5:B0:80:EE:80:3D:E4:BB:39:73:45:96:17:BA:F5:43:3A:34:CA:99
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0188D735207650E292C0291BB0A56B76425E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/tbCA7oA95Ls5c0WWF7r1Qzo0ypk.roa
Signing time: Tue 20 Jun 2023 05:09:23 +0000
ROA not before: Tue 20 Jun 2023 05:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:35:20:76:50:e2:92:c0:29:1b:b0:a5:6b:76:42:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 20 05:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5b080ee803de4bb3973459617baf5433a34ca99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:44:a2:07:20:12:ff:9b:68:06:04:70:85:
41:3b:dc:d7:d7:5b:ed:44:6e:33:5e:63:9d:19:cb:
fa:e0:3e:95:76:f6:87:f3:9a:82:26:37:42:9f:d6:
bd:8e:d8:ca:5c:f2:4a:f7:3a:0c:55:13:70:20:5c:
7a:93:a7:ed:50:38:e6:3d:34:67:71:57:da:17:c7:
e9:c8:08:d4:76:80:41:4f:68:e6:3a:6f:78:47:54:
07:5d:d2:5a:91:2b:48:35:54:80:47:ee:f8:89:f3:
a2:42:64:b9:9e:91:34:bb:31:b7:50:6c:98:93:59:
85:48:fe:41:e5:eb:ac:a9:14:59:3c:f7:9e:5f:14:
2c:69:a6:5e:60:03:ce:1a:a9:e8:cd:32:33:85:dc:
a7:ef:bd:be:c5:d3:43:e0:67:e9:3e:f5:d5:e6:37:
f7:dc:72:0c:df:b2:a5:0a:29:25:e9:d5:28:e3:b1:
03:57:f0:39:d3:35:e9:c6:08:c0:f6:5d:88:12:05:
bf:40:51:ad:53:63:eb:ab:0e:2d:7d:20:23:47:08:
ae:b3:ac:3a:31:ee:0a:ad:85:f6:f9:0a:af:bb:a1:
73:97:23:b8:82:f8:f0:e9:79:da:e6:ae:e6:2d:d1:
5c:09:e5:b6:2e:fe:03:92:dd:84:c7:af:d2:08:c9:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B0:80:EE:80:3D:E4:BB:39:73:45:96:17:BA:F5:43:3A:34:CA:99
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/tbCA7oA95Ls5c0WWF7r1Qzo0ypk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:62:08:3d:d5:5a:6a:5d:14:5c:ab:9c:18:44:12:68:60:b9:
06:aa:40:32:30:fd:cf:32:77:10:2d:b7:b7:77:34:4e:89:fe:
97:6b:de:86:0a:98:b1:59:55:b3:4a:3e:7d:06:c7:84:3a:77:
97:0c:c9:75:0c:72:0f:d9:64:fd:40:98:8b:ed:5a:38:ee:5c:
18:ac:87:8e:32:b7:06:86:90:8a:9c:83:8b:24:48:2b:56:e0:
f0:35:3e:19:bc:9d:66:77:6f:48:a8:79:ba:66:94:e3:cf:e6:
ac:c6:a3:57:3e:92:ad:01:a1:d8:ce:2f:16:a9:24:2c:dc:de:
8f:f8:af:d3:91:0d:25:50:9d:18:65:c4:23:c8:1b:59:8a:b0:
44:40:dc:d5:81:e9:54:4a:05:e2:30:7b:50:8a:a3:71:bd:ad:
29:cc:41:9b:b9:1b:c1:5e:a0:29:67:fc:40:c9:38:4e:81:1f:
06:82:f0:97:71:e3:f1:87:18:e7:3a:1f:4b:c2:b6:52:6d:96:
cf:60:5f:e2:e1:b2:40:c4:70:08:d5:d1:66:a5:f6:ed:f5:1a:
21:d9:2e:67:e0:f6:da:88:44:de:eb:a6:01:dd:74:2f:cd:1e:
64:c5:83:d4:03:1c:2e:9a:50:d8:ef:43:af:a8:a5:be:94:23:
b6:fd:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org