Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vx31BJwAA--mMlmlem7AK9L6_-k.roa
File: vx31BJwAA--mMlmlem7AK9L6_-k.roa (raw, json)
Hash identifier: 4lzBWF9AskUyhe3C8VqQR41Si0iILewInPQ8Mo0ACuI=
Subject key identifier: BF:1D:F5:04:9C:00:03:EF:A6:32:59:A5:7A:6E:C0:2B:D2:FA:FF:E9
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01867D5A072FA82CE094C782B06BBD29A547
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vx31BJwAA--mMlmlem7AK9L6_-k.roa
Signing time: Thu 23 Feb 2023 08:18:17 +0000
ROA not before: Thu 23 Feb 2023 08:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 46.37.107.0/24 maxlen: 24
185.92.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:5a:07:2f:a8:2c:e0:94:c7:82:b0:6b:bd:29:a5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 23 08:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf1df5049c0003efa63259a57a6ec02bd2faffe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:c7:d9:e2:a1:c5:0f:55:78:15:8e:90:4b:
37:29:b1:eb:91:5e:5a:28:55:0e:33:22:49:17:f9:
3c:1d:90:06:92:da:e7:05:13:eb:ca:62:1f:b9:f5:
51:06:c9:c3:4c:47:7b:e2:34:c5:b0:1f:dc:48:23:
ac:37:90:64:6c:ca:d4:05:a9:67:68:a8:a0:f8:26:
99:0a:7a:14:fc:57:2c:24:5a:7a:0c:1c:4a:73:df:
fd:1f:ce:09:36:eb:90:5d:ba:33:f2:13:cc:f4:5d:
14:94:b5:ff:c4:95:00:49:76:7e:a6:df:93:5e:fe:
38:cc:8a:3b:d2:d1:12:50:31:c9:03:12:86:37:a1:
8c:d9:24:6e:cd:cb:e7:d6:84:98:76:47:42:fa:bc:
68:71:42:36:4a:9d:48:66:6c:06:3d:6a:27:bf:d5:
69:29:17:2a:d0:e7:33:2d:72:22:09:fd:3f:eb:c3:
e1:05:8a:92:0e:48:ba:61:eb:9f:9d:56:7d:82:17:
4c:52:39:7c:98:8c:22:df:50:b9:ab:a6:10:a2:f5:
b3:46:6f:bd:0c:b6:79:09:6d:c2:48:80:c6:ad:c4:
7e:4d:fb:16:40:41:9e:70:d8:da:11:f1:8a:b3:0a:
58:87:8b:fa:1a:ba:12:00:41:2e:ff:58:d0:d3:d4:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:F5:04:9C:00:03:EF:A6:32:59:A5:7A:6E:C0:2B:D2:FA:FF:E9
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vx31BJwAA--mMlmlem7AK9L6_-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.107.0/24
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
04:61:11:12:cc:e8:0c:3d:e0:86:d9:fc:5a:34:65:f1:bc:b1:
16:cc:ff:34:e2:94:eb:e2:9f:1c:18:9b:cd:37:b9:82:03:13:
48:00:26:ad:6d:06:32:08:3d:2f:fb:78:a4:3e:ea:86:aa:26:
1d:f1:86:d6:78:b8:63:7b:ed:d1:07:05:02:c5:a1:32:10:51:
fe:78:26:27:e8:6b:4e:2a:09:93:a8:0d:c9:d3:36:65:0b:e2:
28:c7:67:29:dd:08:23:70:bb:ad:d0:67:52:93:4e:b4:66:72:
1b:ec:89:9b:ac:c4:e8:58:65:f9:42:cd:4a:63:56:0f:bc:5f:
8e:b4:06:b2:22:e8:36:4d:1f:25:1a:8c:d2:41:03:7e:97:77:
dd:46:39:7c:44:cc:31:16:d8:f0:0c:47:9f:9c:ab:3a:94:b2:
9a:60:37:d9:3b:27:83:95:47:8b:46:eb:02:cc:03:bc:85:7b:
f8:a8:86:43:2b:78:a4:47:7a:25:68:73:e2:6c:03:3a:59:42:
85:f0:69:e6:39:23:6c:1d:2d:e5:5d:ac:c0:1b:f7:7e:ef:36:
61:7a:3c:b6:99:0b:a6:07:0e:d1:ac:e4:d8:f0:a7:2c:66:e6:
a4:7f:79:74:d9:e8:60:ce:3f:43:cc:38:fd:e8:78:5c:8b:fb:
e0:e2:eb:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZ9WgcvqCzglMeCsGu9KaVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwMjIzMDgxODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjFkZjUwNDljMDAwM2VmYTYzMjU5YTU3YTZlYzAyYmQyZmFmZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6LH2eKhxQ9VeBWOkEs3KbHrkV5a
KFUOMyJJF/k8HZAGktrnBRPrymIfufVRBsnDTEd74jTFsB/cSCOsN5BkbMrUBaln
aKig+CaZCnoU/FcsJFp6DBxKc9/9H84JNuuQXboz8hPM9F0UlLX/xJUASXZ+pt+T
Xv44zIo70tESUDHJAxKGN6GM2SRuzcvn1oSYdkdC+rxocUI2Sp1IZmwGPWonv9Vp
KRcq0OczLXIiCf0/68PhBYqSDki6YeufnVZ9ghdMUjl8mIwi31C5q6YQovWzRm+9
DLZ5CW3CSIDGrcR+TfsWQEGecNjaEfGKswpYh4v6GroSAEEu/1jQ09S3GQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL8d9QScAAPvpjJZpXpuwCvS+v/pMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvdngzMUJKd0FBLS1tTWxtbGVtN0FLOUw2Xy1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiVrAwQA
uVwtMA0GCSqGSIb3DQEBCwUAA4IBAQAEYRESzOgMPeCG2fxaNGXxvLEWzP804pTr
4p8cGJvNN7mCAxNIACatbQYyCD0v+3ikPuqGqiYd8YbWeLhje+3RBwUCxaEyEFH+
eCYn6GtOKgmTqA3J0zZlC+Iox2cp3QgjcLut0GdSk060ZnIb7ImbrMToWGX5Qs1K
Y1YPvF+OtAayIug2TR8lGozSQQN+l3fdRjl8RMwxFtjwDEefnKs6lLKaYDfZOyeD
lUeLRusCzAO8hXv4qIZDK3ikR3olaHPibAM6WUKF8GnmOSNsHS3lXazAG/d+7zZh
ejy2mQumBw7RrOTY8KcsZuakf3l02ehgzj9DzDj96Hhci/vg4uud
Generated at Sun Jul 23 11:40:16 2023 by rpki-client on console-ams.rpki-client.org