Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/umprgZFyT8rm21CmrBz-oW01IRg.roa
File: umprgZFyT8rm21CmrBz-oW01IRg.roa (raw, json)
Hash identifier: rafE88118TqAOanOv7ABDWxYXW8g1Voy9yf7qlZHIGA=
Subject key identifier: BA:6A:6B:81:91:72:4F:CA:E6:DB:50:A6:AC:1C:FE:A1:6D:35:21:18
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0187A7867C5D5DBD6D9A961238F45739002B
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/umprgZFyT8rm21CmrBz-oW01IRg.roa
Signing time: Sat 22 Apr 2023 05:53:41 +0000
ROA not before: Sat 22 Apr 2023 05:53:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a7:86:7c:5d:5d:bd:6d:9a:96:12:38:f4:57:39:00:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 22 05:53:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba6a6b8191724fcae6db50a6ac1cfea16d352118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1f:6e:b1:fc:40:be:40:39:ef:71:50:42:44:
c2:df:44:88:9d:42:02:cc:48:a8:00:0a:a1:38:b6:
eb:c9:e8:d3:5b:c5:af:cb:45:ca:dd:23:ab:7e:06:
c3:aa:33:9c:59:15:67:41:1d:74:30:d4:48:a0:8a:
9f:db:96:2d:e7:b8:d9:20:d2:8e:f2:e5:53:21:01:
fc:58:16:5e:13:e5:8f:f2:d7:f9:18:98:79:df:44:
13:2e:b4:27:6e:03:76:7b:39:14:36:b1:e7:49:80:
bd:a7:b2:85:0e:bf:2d:ac:e2:40:2c:62:06:3e:d0:
4d:72:cd:67:2f:71:58:29:62:93:52:40:80:dc:fc:
1b:d8:20:5a:d7:85:82:bc:b9:36:b2:f9:4a:36:09:
bb:90:d6:30:af:ad:b2:71:87:c3:9c:8c:ea:66:52:
e3:a4:40:39:41:c4:82:46:28:f0:cb:f1:56:8a:7c:
04:d7:66:74:e2:52:6d:73:2b:5c:60:8c:a8:d2:e5:
e9:50:5e:07:64:dd:9e:bd:a5:10:56:3b:7c:8a:17:
68:22:9f:88:62:ff:02:66:25:81:b9:9f:4c:25:dc:
99:05:f4:e2:d8:b9:12:21:78:6b:d8:3b:b1:35:82:
ff:4a:54:b2:60:d1:fa:42:1f:1e:31:cb:db:e5:64:
f7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6A:6B:81:91:72:4F:CA:E6:DB:50:A6:AC:1C:FE:A1:6D:35:21:18
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/umprgZFyT8rm21CmrBz-oW01IRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
23:68:77:d8:a5:67:7b:78:44:3d:77:a4:3b:3d:da:6d:96:23:
e0:d9:34:d1:79:a3:be:37:6b:dd:8e:78:10:84:b7:bc:6b:0f:
f4:17:df:34:3f:64:99:5f:6b:d9:cc:55:bd:db:7f:c8:97:7b:
4d:8a:46:1c:28:bb:c7:d1:95:1a:35:c4:af:e6:51:4f:bf:e3:
70:a3:2a:3a:2b:71:45:a1:92:96:54:77:b5:9f:5b:5f:ff:69:
b4:64:f8:0e:c5:fe:b5:09:a2:80:2c:13:80:d8:94:dd:a5:4c:
a5:ac:e5:94:08:1c:a4:c7:3e:a6:b0:2d:09:0e:60:b2:d7:89:
3b:e0:17:1f:14:45:48:53:5d:22:3e:9f:7e:c7:b9:bf:0d:e5:
0e:ed:4d:45:07:b9:c1:11:84:c8:d3:6c:bf:f5:48:4d:61:57:
56:a0:16:aa:df:ed:11:cf:67:25:f0:85:8a:37:e5:51:4a:2d:
45:f2:59:63:3a:85:af:27:b5:a9:2a:2c:b1:37:f7:69:06:65:
4a:ad:f5:cf:af:1a:ee:bc:e6:ac:78:d1:9f:0c:57:51:86:ca:
c7:21:e9:4a:0c:ac:f2:c3:2d:ad:02:99:f1:76:a8:ff:f4:64:
07:2f:fe:66:d7:2e:8b:b2:31:d3:e4:96:6b:3e:a8:36:9f:9e:
35:9a:70:0d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYenhnxdXb1tmpYSOPRXOQArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwNDIyMDU1MzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTZhNmI4MTkxNzI0ZmNhZTZkYjUwYTZhYzFjZmVhMTZkMzUyMTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix9usfxAvkA573FQQkTC30SInUIC
zEioAAqhOLbryejTW8Wvy0XK3SOrfgbDqjOcWRVnQR10MNRIoIqf25Yt57jZINKO
8uVTIQH8WBZeE+WP8tf5GJh530QTLrQnbgN2ezkUNrHnSYC9p7KFDr8trOJALGIG
PtBNcs1nL3FYKWKTUkCA3Pwb2CBa14WCvLk2svlKNgm7kNYwr62ycYfDnIzqZlLj
pEA5QcSCRijwy/FWinwE12Z04lJtcytcYIyo0uXpUF4HZN2evaUQVjt8ihdoIp+I
Yv8CZiWBuZ9MJdyZBfTi2LkSIXhr2DuxNYL/SlSyYNH6Qh8eMcvb5WT3jQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFLpqa4GRck/K5ttQpqwc/qFtNSEYMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvdW1wcmdaRnlUOHJtMjFDbXJCei1vVzAxSVJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALiViMAwD
BAAuJXEDBAAuJXIwDQYJKoZIhvcNAQELBQADggEBACNod9ilZ3t4RD13pDs92m2W
I+DZNNF5o743a92OeBCEt7xrD/QX3zQ/ZJlfa9nMVb3bf8iXe02KRhwou8fRlRo1
xK/mUU+/43CjKjorcUWhkpZUd7WfW1//abRk+A7F/rUJooAsE4DYlN2lTKWs5ZQI
HKTHPqawLQkOYLLXiTvgFx8URUhTXSI+n37Hub8N5Q7tTUUHucERhMjTbL/1SE1h
V1agFqrf7RHPZyXwhYo35VFKLUXyWWM6ha8ntakqLLE392kGZUqt9c+vGu685qx4
0Z8MV1GGysch6UoMrPLDLa0CmfF2qP/0ZAcv/mbXLouyMdPklms+qDafnjWacA0=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org