Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vmG5hc4hCd6U6zd4iCcaCGIrKYE.roa
File: vmG5hc4hCd6U6zd4iCcaCGIrKYE.roa (raw, json)
Hash identifier: 0bDA5m5mXqVfpJ557W7YXzhB2miSGrBgkg+FUpcrd1Y=
Subject key identifier: BE:61:B9:85:CE:21:09:DE:94:EB:37:78:88:27:1A:08:62:2B:29:81
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0188D3AE22322EA12A5FB0FC9EECB023970F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vmG5hc4hCd6U6zd4iCcaCGIrKYE.roa
Signing time: Mon 19 Jun 2023 12:43:04 +0000
ROA not before: Mon 19 Jun 2023 12:43:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:ae:22:32:2e:a1:2a:5f:b0:fc:9e:ec:b0:23:97:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 19 12:43:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be61b985ce2109de94eb377888271a08622b2981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:7c:8c:5b:cc:4e:d0:eb:84:ce:4a:61:71:
ca:de:3d:e5:26:bf:ba:8d:56:d8:7b:f4:cd:5d:46:
aa:41:bd:47:b1:da:5a:07:e0:54:6d:ae:3d:e6:6c:
e6:a0:99:8d:a4:cb:9b:cf:81:3d:ab:49:88:9d:d4:
12:06:4e:e3:33:27:49:71:3c:d0:cd:26:ca:77:3c:
68:8d:d0:5b:b2:21:9b:54:73:a5:35:4d:96:a6:b7:
05:5a:2c:bf:bc:aa:db:88:ab:52:7c:30:dc:7e:b1:
3a:49:01:9d:7c:dd:ac:e4:a7:f2:d6:73:e2:33:0a:
ef:40:60:fe:43:1f:58:70:41:7a:2b:b3:5a:44:8b:
78:5d:e9:04:28:c2:a1:7c:b5:d5:17:91:02:ea:16:
43:4f:d7:31:e8:c0:53:ed:c3:85:9f:f9:88:8b:ab:
65:c4:46:13:42:91:25:0d:7c:f1:ad:f6:92:9c:71:
e5:1b:d6:b7:45:55:cf:c8:61:f6:bb:d4:6f:58:fa:
73:ae:e4:b2:1b:f5:8a:d7:49:0c:73:67:bb:06:fe:
d9:a0:34:04:26:b3:bc:4f:85:26:0a:49:52:43:f9:
00:7f:8f:5c:1c:14:a1:b9:e9:30:f3:51:be:62:11:
7a:4b:ca:81:e4:98:5b:3a:99:77:7d:7e:75:f2:48:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:B9:85:CE:21:09:DE:94:EB:37:78:88:27:1A:08:62:2B:29:81
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vmG5hc4hCd6U6zd4iCcaCGIrKYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
b0:61:91:5c:7c:d9:b3:64:90:a1:db:93:22:d8:5c:a6:a0:a3:
da:c1:f4:a4:28:26:ce:dd:9a:7f:4e:26:ad:af:d1:14:8c:f7:
e7:03:5b:6d:c7:28:ba:03:6e:2d:4b:9e:08:0c:ac:93:8d:b7:
a6:e2:2a:a4:cf:80:7d:de:8e:dc:76:98:5f:39:06:28:ed:0b:
bb:aa:b5:25:2d:74:26:73:a9:20:cd:a9:24:d7:82:7f:2d:24:
66:fe:41:1d:71:3e:80:10:45:1d:cb:3e:20:df:7b:81:79:2d:
16:7d:18:fa:b1:c1:bb:38:86:ab:77:82:32:d1:16:05:27:3f:
f7:34:e5:2c:df:be:ef:d2:e7:1a:5f:45:77:12:17:2f:dc:07:
cf:6a:e8:b9:e8:d4:fb:fd:b3:e5:af:aa:dc:62:bb:0f:1c:35:
e7:71:35:1d:fb:30:64:06:4b:ef:2a:a8:1d:fe:e3:46:f5:f7:
e6:88:82:cf:75:74:3b:86:7d:6b:3e:fc:df:1f:3a:20:a7:6f:
9f:19:1c:73:6a:37:b6:5f:94:71:67:41:24:bb:c4:70:e1:e2:
7a:4e:41:3e:37:fe:9d:de:66:08:77:a8:1b:c3:3f:9f:38:6c:
9f:e4:dc:88:fb:b7:6f:1f:08:a8:28:60:20:e2:87:da:f2:b0:
ae:bc:4f:c2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYjTriIyLqEqX7D8nuywI5cPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwNjE5MTI0MzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTYxYjk4NWNlMjEwOWRlOTRlYjM3Nzg4ODI3MWEwODYyMmIyOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi918jFvMTtDrhM5KYXHK3j3lJr+6
jVbYe/TNXUaqQb1HsdpaB+BUba495mzmoJmNpMubz4E9q0mIndQSBk7jMydJcTzQ
zSbKdzxojdBbsiGbVHOlNU2WprcFWiy/vKrbiKtSfDDcfrE6SQGdfN2s5Kfy1nPi
MwrvQGD+Qx9YcEF6K7NaRIt4XekEKMKhfLXVF5EC6hZDT9cx6MBT7cOFn/mIi6tl
xEYTQpElDXzxrfaSnHHlG9a3RVXPyGH2u9RvWPpzruSyG/WK10kMc2e7Bv7ZoDQE
JrO8T4UmCklSQ/kAf49cHBShuekw81G+YhF6S8qB5JhbOpl3fX518kj7XQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFL5huYXOIQnelOs3eIgnGghiKymBMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvdm1HNWhjNGhDZDZVNnpkNGlDY2FDR0lyS1lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALiViMAwD
BAAuJXEDBAAuJXIwDQYJKoZIhvcNAQELBQADggEBALBhkVx82bNkkKHbkyLYXKag
o9rB9KQoJs7dmn9OJq2v0RSM9+cDW23HKLoDbi1LnggMrJONt6biKqTPgH3ejtx2
mF85BijtC7uqtSUtdCZzqSDNqSTXgn8tJGb+QR1xPoAQRR3LPiDfe4F5LRZ9GPqx
wbs4hqt3gjLRFgUnP/c05Szfvu/S5xpfRXcSFy/cB89q6Lno1Pv9s+Wvqtxiuw8c
NedxNR37MGQGS+8qqB3+40b19+aIgs91dDuGfWs+/N8fOiCnb58ZHHNqN7ZflHFn
QSS7xHDh4npOQT43/p3eZgh3qBvDP584bJ/k3Ij7t28fCKgoYCDih9rysK68T8I=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org