Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/uqpO-ooNgsESdg_FQp4ndNk7Fxg.roa
File: uqpO-ooNgsESdg_FQp4ndNk7Fxg.roa (raw, json)
Hash identifier: gxrDKSITvZJePgNKDtw9seGxGLq0G/GC/cR7H1XK/k4=
Subject key identifier: BA:AA:4E:FA:8A:0D:82:C1:12:76:0F:C5:42:9E:27:74:D9:3B:17:18
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0187A7893B338D2B0C076593D4A1ED97BB9D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/uqpO-ooNgsESdg_FQp4ndNk7Fxg.roa
Signing time: Sat 22 Apr 2023 05:56:41 +0000
ROA not before: Sat 22 Apr 2023 05:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 May 2023 06:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a7:89:3b:33:8d:2b:0c:07:65:93:d4:a1:ed:97:bb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 22 05:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baaa4efa8a0d82c112760fc5429e2774d93b1718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:73:b0:dd:86:a7:62:c5:06:53:a3:0b:f7:
88:19:3d:b6:2d:e8:6e:30:7f:0e:08:f0:4f:df:4a:
2b:c7:12:ac:5b:28:c9:46:70:f3:da:ac:14:97:b1:
ae:24:c0:2b:00:79:05:fc:d5:b0:da:2e:52:72:18:
35:20:a2:fb:64:18:2c:2a:b8:3e:cc:e6:4a:d3:38:
d6:08:0f:f7:91:c9:6e:2f:24:cd:a6:62:10:4e:db:
8f:2b:bf:c2:20:7c:d1:b6:05:c5:1a:eb:e0:f7:f9:
75:78:f6:43:4f:59:93:40:39:e1:9b:46:d3:ce:0c:
df:3c:e4:4f:18:14:f5:6b:4a:59:f5:d6:f6:8f:11:
0e:a6:96:2c:e6:57:69:62:e9:0d:5d:b9:b7:19:dc:
df:7c:25:81:25:5c:8a:bc:65:b7:2d:8c:88:5c:fc:
88:e0:ee:9f:aa:66:2d:e0:f8:58:36:13:25:84:db:
cc:10:97:75:0a:45:31:76:fb:2a:a2:2f:43:11:c6:
50:d4:54:81:a0:4f:77:26:87:3f:52:b7:27:05:93:
e2:40:dc:eb:35:86:eb:85:1c:25:88:1b:af:b7:a8:
1c:23:4e:b0:ca:c1:56:03:49:7c:07:b4:76:2e:a7:
3e:99:6e:9b:c1:f3:f5:e0:c6:04:48:5e:8d:b0:3a:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:4E:FA:8A:0D:82:C1:12:76:0F:C5:42:9E:27:74:D9:3B:17:18
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/uqpO-ooNgsESdg_FQp4ndNk7Fxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
47:20:37:e3:71:2d:a0:3f:ee:8e:14:38:c5:fd:60:bc:d5:6c:
65:cd:e4:bd:9f:f8:9d:f9:11:f4:ad:e2:20:eb:53:44:99:a7:
27:18:46:45:91:20:3f:f2:03:b0:db:69:6d:2f:2d:cb:ad:20:
2f:1a:ce:7d:91:2e:1a:c3:17:0b:92:57:a7:00:64:3f:d5:9c:
49:3c:e3:65:80:a8:ed:75:a1:c5:db:fc:76:48:0d:97:bc:0f:
24:ac:a8:52:90:ac:8b:5f:da:fb:02:92:16:1e:dd:e3:b8:8b:
e6:07:34:e5:06:73:60:2a:8c:8f:8a:63:1f:30:69:33:3a:b3:
a6:d5:5f:02:0e:2f:9c:b1:5f:60:27:c9:00:d9:79:6a:56:09:
d1:19:40:b5:0d:4a:5b:51:9d:c2:b6:f7:fc:01:be:5a:21:5b:
ef:6a:cd:f3:8f:0a:78:fd:9f:18:ec:61:b4:b7:52:56:08:6f:
0f:50:5c:a5:84:84:c1:1b:f7:26:5e:1e:9c:b3:fe:7b:46:8c:
0c:3b:52:31:a9:be:ae:24:de:d1:5d:d2:a0:f8:21:8b:88:11:
c3:8f:e7:89:92:18:c6:54:25:cd:56:22:6d:ab:7e:35:de:f2:
bb:05:66:f4:b2:e6:ab:8b:94:e2:9b:2b:30:2d:d2:10:50:ab:
1a:d5:15:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:07 2024 by rpki-client on console-ams.rpki-client.org