Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yGQMITK6oSCJTDqpEsnRU0C9SHc.roa
File: yGQMITK6oSCJTDqpEsnRU0C9SHc.roa (raw, json)
Hash identifier: +Vi3IpnKBZ3rkZoiaGp6dR45r3x9F/ocygi3Txzynec=
Subject key identifier: C8:64:0C:21:32:BA:A1:20:89:4C:3A:A9:12:C9:D1:53:40:BD:48:77
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0187C817470349122F8E3ED7E96FEC046525
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yGQMITK6oSCJTDqpEsnRU0C9SHc.roa
Signing time: Fri 28 Apr 2023 13:39:41 +0000
ROA not before: Fri 28 Apr 2023 13:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.97.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:17:47:03:49:12:2f:8e:3e:d7:e9:6f:ec:04:65:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 28 13:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8640c2132baa120894c3aa912c9d15340bd4877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:cb:e6:51:88:8d:89:3d:2e:59:67:98:72:
81:1c:59:fa:62:ca:59:c4:7c:35:97:2d:1b:3f:08:
da:47:0a:47:8e:b3:2c:f0:cb:14:5d:65:2a:1a:68:
fb:19:e0:80:62:4e:3c:5e:f6:d9:a8:3f:24:cb:f3:
f3:c4:04:cd:c6:9e:58:98:6d:a0:ca:fb:25:8b:9a:
f3:74:55:3f:0b:ac:6b:fb:94:a1:85:da:dd:75:89:
ca:81:64:52:3b:87:ea:64:2a:ce:91:31:d6:bc:75:
c4:bf:57:b7:d2:3c:e1:a1:42:9d:04:a7:06:2e:cb:
56:f0:ee:56:07:40:27:93:c8:57:29:47:84:25:ba:
a4:cf:5e:1c:3f:cd:cd:df:38:af:8f:17:3c:e2:d9:
84:84:c1:b3:14:35:ae:42:6c:33:7e:11:6d:32:9d:
99:28:7c:a6:c7:d6:5d:b7:a5:9d:27:13:0b:90:b0:
b2:dc:e5:94:ce:e0:35:cc:5e:ef:57:6e:91:78:e5:
2d:cd:39:70:d9:1d:45:61:0a:07:5a:01:b2:67:75:
40:d2:bc:7d:ff:54:bb:47:58:bd:32:c2:dc:17:d3:
5c:0e:2f:bc:32:6c:5a:0c:9b:4b:ce:a7:6c:7b:2e:
f0:0e:bf:13:ae:90:0a:3a:72:ec:63:18:2c:41:d8:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:64:0C:21:32:BA:A1:20:89:4C:3A:A9:12:C9:D1:53:40:BD:48:77
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yGQMITK6oSCJTDqpEsnRU0C9SHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0-46.37.98.255
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
bb:ab:3e:cf:ac:9f:f8:c2:a0:2d:1f:67:5d:bf:ed:d6:67:48:
ba:ca:6f:99:b2:3a:36:b2:e6:b4:4f:4d:61:fa:fa:59:6a:f8:
10:59:f7:b0:8a:30:45:e5:fe:f7:27:7b:a0:a4:fc:35:f6:2c:
0e:58:42:b6:0a:50:b0:93:c6:8c:91:42:db:63:37:82:be:b0:
7f:af:75:df:71:f3:e2:6f:fd:e9:b7:2f:08:b9:b2:4a:a5:08:
9a:5a:bc:61:62:68:dd:af:4c:bb:1c:c8:cf:39:d9:f4:27:c1:
08:5c:76:5c:71:17:24:e4:0b:ac:45:6f:0e:3b:4a:16:5a:85:
0d:ce:16:01:d4:8f:02:d8:d5:84:f9:27:76:17:6a:42:bd:f2:
7d:65:be:b0:8b:f3:de:8f:8a:d8:3a:e0:2e:89:97:ef:17:83:
a4:08:f4:c9:d0:a0:f8:bf:b9:6e:95:89:b8:a8:30:4e:a7:f4:
d6:a8:9a:0c:64:45:2b:2b:40:b8:ac:4e:94:39:a6:ce:17:93:
ff:ae:63:82:29:e3:5a:3a:a2:73:91:63:ef:bd:d0:dc:41:ec:
e0:d6:2b:0f:cc:62:80:12:91:1b:0d:8d:d1:ed:b3:b0:39:e2:
f7:44:2b:bb:6f:10:68:58:8c:ba:53:c0:29:86:70:98:e1:fd:
80:79:dc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org