Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wl4qmXvUXoyTdmTOBYZZWM9F0tY.roa
File: wl4qmXvUXoyTdmTOBYZZWM9F0tY.roa (raw, json)
Hash identifier: yUZvPTZP6aRxzVtEWP2nMNbwhCHGjY3j9LdGGU9Uqqs=
Subject key identifier: C2:5E:2A:99:7B:D4:5E:8C:93:76:64:CE:05:86:59:58:CF:45:D2:D6
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CAA5491D717C5F023F008B022E1ADC21E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wl4qmXvUXoyTdmTOBYZZWM9F0tY.roa
Signing time: Wed 27 Dec 2023 08:11:58 +0000
ROA not before: Wed 27 Dec 2023 08:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
185.92.45.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:54:91:d7:17:c5:f0:23:f0:08:b0:22:e1:ad:c2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 27 08:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c25e2a997bd45e8c937664ce05865958cf45d2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:39:59:ce:c4:73:01:c3:9c:41:b3:b1:00:
f1:4c:b7:c9:ba:d4:d0:35:7d:13:2f:f0:02:76:1a:
4e:39:1c:4f:1c:05:a2:83:ff:45:98:c1:12:bd:c0:
a6:41:47:ec:d6:33:e6:2c:a5:23:5f:cd:f9:96:00:
42:71:bb:84:0c:ce:72:1f:f4:23:19:9d:32:30:3d:
ed:ec:97:e6:07:bb:bb:04:4a:4f:99:05:dc:83:59:
6f:c1:f1:d5:a4:2f:25:27:17:18:88:d1:a8:d9:ce:
d5:5a:e0:e8:97:00:27:6d:b4:05:07:63:30:a6:d7:
53:1c:36:16:19:ab:48:a4:bf:81:ca:f6:19:3a:03:
48:87:31:46:0e:d8:d0:4c:7d:27:ea:2a:ac:ce:d2:
f1:3b:44:bc:41:92:fc:35:87:7a:e8:f6:1b:12:eb:
a1:e7:d2:1f:d4:47:31:cc:d2:1d:16:27:fd:20:27:
55:37:7c:fd:c5:25:b9:f2:39:f2:9b:b7:fd:8f:d5:
72:7b:0c:8b:75:5d:bd:ef:a9:ce:fb:27:c9:e7:9e:
79:f3:56:3b:cc:19:98:dc:09:65:d1:a5:7b:0a:2c:
aa:f6:07:d2:38:7d:67:f1:5f:07:74:41:48:da:f4:
56:59:bb:2e:0a:eb:e8:6d:08:ab:7d:85:0a:c6:67:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5E:2A:99:7B:D4:5E:8C:93:76:64:CE:05:86:59:58:CF:45:D2:D6
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wl4qmXvUXoyTdmTOBYZZWM9F0tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.121.0/24
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:c9:fd:49:ca:1e:06:1a:f2:22:c1:43:13:cc:92:fc:07:3e:
10:04:af:e0:f1:35:ed:83:42:9c:1e:b5:20:c1:f0:a2:4c:83:
7e:fc:2c:5e:08:48:61:ee:1f:f6:f8:12:c0:7d:a8:aa:19:e8:
70:a4:b5:17:45:1d:23:fc:f1:ab:74:fc:02:09:62:de:f4:1c:
2d:ed:f6:6a:d7:e4:6d:60:8b:da:da:e8:18:d3:64:5e:07:3d:
de:20:05:35:16:4c:75:bc:6c:f8:89:6f:49:36:38:f8:c8:d0:
ca:68:e1:5d:08:73:94:c4:2a:df:ff:a8:0c:cb:a7:9e:07:37:
db:77:eb:44:e3:fb:0b:83:7d:68:81:a7:1a:ea:27:a2:cb:f4:
6e:c6:82:06:b3:d1:23:e0:15:3b:56:87:72:0a:6c:7b:c5:72:
77:b2:92:b8:6f:0c:a2:2a:05:de:fc:cc:be:99:db:df:d9:a8:
4f:11:0e:ff:ba:a4:e6:57:43:8c:e9:52:1c:20:11:59:7e:7f:
68:5f:1b:7a:eb:04:63:34:ac:1f:cd:80:06:99:85:08:62:59:
cb:bd:b8:ea:8c:fb:3c:44:34:f4:a3:9c:a8:e6:d4:56:27:24:
d5:27:7e:a9:5d:64:04:b3:18:ad:4e:b7:c7:21:9e:68:17:3a:
9c:cd:2f:18
-----BEGIN CERTIFICATE-----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Generated at Thu Dec 28 09:45:14 2023 by rpki-client on console-ams.rpki-client.org