Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/x1APr8MV2G8LRno1LMtec9s-08I.roa
File: x1APr8MV2G8LRno1LMtec9s-08I.roa (raw, json)
Hash identifier: EvYqX3h8IK9ZSf7NUAt0PwunFjwXv7ciwyn4oPygdrU=
Subject key identifier: C7:50:0F:AF:C3:15:D8:6F:0B:46:7A:35:2C:CB:5E:73:DB:3E:D3:C2
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018B38AB36CCFB19A88F583D341EEA855921
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/x1APr8MV2G8LRno1LMtec9s-08I.roa
Signing time: Mon 16 Oct 2023 13:27:06 +0000
ROA not before: Mon 16 Oct 2023 13:27:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 21:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:ab:36:cc:fb:19:a8:8f:58:3d:34:1e:ea:85:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 16 13:27:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7500fafc315d86f0b467a352ccb5e73db3ed3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bd:fb:6e:ec:bd:de:ef:49:7f:16:01:ae:fe:
fa:b7:9e:ef:e2:52:6b:af:9e:f1:b5:70:82:62:d0:
4e:22:e0:cc:12:f5:b1:b7:ff:3a:5a:c9:2d:02:83:
2b:56:ff:62:1e:90:2b:20:a5:48:8e:d1:63:83:fd:
7d:b8:a9:5e:fe:6a:54:b8:99:7c:7b:dc:dc:1c:3e:
02:ea:c8:4d:2d:6a:92:73:78:2a:c0:d9:35:00:df:
31:51:4c:36:5f:bc:e4:53:52:e2:02:10:d7:7c:6b:
ec:f2:85:08:20:e1:89:e1:49:c1:eb:f6:b5:e7:d3:
f3:64:f0:ad:5b:98:43:c0:f8:7e:ba:25:0d:e3:3b:
2b:95:54:b2:c1:d6:32:6b:2b:da:ae:31:50:67:04:
05:28:cd:35:81:c0:75:f7:74:81:b9:b2:72:8c:ab:
4d:22:c1:f1:2f:2f:bb:e9:53:bf:ba:74:cf:96:b3:
d6:1a:ba:ca:36:a0:f4:ab:06:0c:73:33:b5:12:7a:
46:96:9d:79:cc:63:e9:55:a8:c1:a0:4f:0a:b4:a9:
db:d2:7d:1e:ea:28:b5:87:80:29:d6:18:90:4f:f4:
f8:2a:f6:df:85:b9:b4:a6:63:27:76:c5:66:24:89:
33:6a:f8:f5:f5:c0:d9:23:cc:71:0f:4e:b9:c9:80:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:50:0F:AF:C3:15:D8:6F:0B:46:7A:35:2C:CB:5E:73:DB:3E:D3:C2
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/x1APr8MV2G8LRno1LMtec9s-08I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
185.92.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1d:4b:80:90:e9:ed:59:d5:ea:b5:2d:f4:1d:52:bc:b0:82:
45:68:08:1a:72:e5:47:7b:ca:3d:d5:08:6c:00:30:37:d8:d2:
c8:13:bc:93:33:23:15:05:87:68:69:2c:c9:50:a0:77:b9:c6:
11:5a:be:a6:40:6f:85:5d:47:db:b5:93:33:ef:16:ba:92:5d:
37:34:39:4e:31:14:d0:ac:be:39:ff:2e:78:84:c2:fb:e3:4c:
df:0d:71:8e:9c:71:88:09:77:de:22:81:6b:58:15:4d:04:4d:
ee:3e:ea:59:05:1e:c5:5c:0c:b6:49:ff:03:8c:0e:58:cc:aa:
13:e4:a7:d1:4a:bb:97:b3:c5:97:11:46:f0:44:64:fd:7b:dc:
c9:ad:18:5f:dc:2b:46:36:20:aa:64:ce:37:6d:66:34:29:95:
92:a2:5a:07:7c:b6:f6:95:07:d4:be:80:27:a2:e5:01:0a:4f:
45:e0:e1:8b:1d:8c:4f:4c:0b:17:8f:8d:b7:8b:a4:e4:22:30:
de:e8:bf:33:41:86:b8:5f:49:25:ca:c3:e7:4a:87:bd:ce:3d:
fb:4b:3e:95:9a:1d:df:93:d4:17:35:1c:cc:09:75:db:a2:a2:
28:ab:50:2f:b7:60:79:ff:53:c4:b2:ba:46:aa:aa:70:e8:0c:
f1:d3:c4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org