Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/xtaRutnyRd4mh9x86c1ts6JXGnE.roa
File: xtaRutnyRd4mh9x86c1ts6JXGnE.roa (raw, json)
Hash identifier: 3I9iIznwkrnQsAnrYaz6wbZu9mZKY464xH7lrSkyWZg=
Subject key identifier: C6:D6:91:BA:D9:F2:45:DE:26:87:DC:7C:E9:CD:6D:B3:A2:57:1A:71
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018620C1FE6742DFDEFBD41DF228A3AFF858
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/xtaRutnyRd4mh9x86c1ts6JXGnE.roa
Signing time: Sun 05 Feb 2023 08:47:09 +0000
ROA not before: Sun 05 Feb 2023 08:47:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.120.0/23 maxlen: 23
46.37.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:20:c1:fe:67:42:df:de:fb:d4:1d:f2:28:a3:af:f8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 5 08:47:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6d691bad9f245de2687dc7ce9cd6db3a2571a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:6b:de:e0:8d:88:57:ca:c5:33:24:19:b8:
f2:e0:91:63:f3:94:a1:df:e9:b5:00:b6:e7:9f:fd:
24:95:58:d6:18:39:43:07:31:f6:60:0e:cc:17:8f:
21:b5:83:42:70:72:57:86:bf:f9:30:e5:22:ab:78:
5e:b1:95:d3:33:b0:53:94:c1:80:a8:a7:04:83:71:
b8:be:3f:48:b5:99:23:e9:0d:0e:74:67:d7:07:61:
8e:fb:9b:92:1f:06:14:67:ca:63:c2:05:ed:20:76:
a2:8a:1a:35:ad:46:3f:17:bc:79:0d:20:c5:86:7d:
28:ef:1e:02:5b:6a:05:24:b3:4f:ee:17:aa:3b:56:
9d:14:3d:4b:ec:63:17:cb:b2:45:c0:6d:15:0f:19:
a9:f9:1c:25:05:e1:1e:69:16:44:8b:2f:65:df:df:
20:7d:f6:ba:bf:10:2f:bd:e4:d8:44:cc:81:49:20:
2c:0d:de:36:7b:33:64:36:7e:8a:50:2d:94:14:88:
99:b1:76:46:14:48:c5:7a:92:0e:81:ce:b5:7f:a5:
0e:7a:ba:42:33:a6:ed:b1:04:6a:5f:93:b4:5a:5e:
76:d3:34:32:11:00:d2:e8:f7:e9:02:2f:8a:52:55:
f3:eb:29:f8:95:b6:61:4b:7d:64:41:77:3a:ac:d2:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D6:91:BA:D9:F2:45:DE:26:87:DC:7C:E9:CD:6D:B3:A2:57:1A:71
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/xtaRutnyRd4mh9x86c1ts6JXGnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/24
46.37.113.0/24
46.37.118.0/24
46.37.120.0/23
Signature Algorithm: sha256WithRSAEncryption
09:1c:12:33:ad:59:d4:03:40:1b:e1:ff:26:34:f5:e5:ea:99:
06:fd:f8:88:e6:37:4c:35:73:78:6b:8c:6e:bb:75:6a:1c:7c:
ae:b7:f5:04:60:5e:73:b3:38:1f:17:f4:27:d3:50:0e:9d:b3:
61:78:50:ff:9c:d3:2c:03:e6:64:8d:16:a2:33:d4:86:48:08:
f1:e2:9d:cb:88:03:6c:b4:9e:71:fb:c7:b8:f3:cf:a7:8d:86:
c2:57:e5:5c:d6:4b:9a:2e:fd:aa:ee:2d:99:22:36:e5:b0:a5:
80:14:35:dd:ec:48:b6:7e:ef:6c:c0:b8:79:74:8d:ac:f3:cb:
e5:f0:14:0a:75:b6:71:78:b9:f2:4a:c5:97:b2:f9:cc:b2:76:
f6:2b:bf:0e:44:3b:ea:f4:34:42:f1:d9:49:30:19:43:ff:d0:
64:1f:86:52:38:24:e4:56:e1:63:3d:04:4e:91:18:1a:f4:ab:
76:03:3b:c4:8f:42:93:2a:64:37:4f:74:64:d3:57:ae:7e:ca:
b8:68:42:26:ea:dd:7c:c2:c8:94:20:eb:35:f2:f5:9f:e4:f6:
ef:54:08:20:f4:81:1d:ff:19:47:64:69:af:e7:08:dd:a2:6b:
93:c9:fc:49:e6:59:15:d2:36:3c:1b:9f:79:2d:9d:84:f0:23:
79:05:09:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org