Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yPfVYWXB22vfMAaLpzeZ-dF7wFI.roa
File: yPfVYWXB22vfMAaLpzeZ-dF7wFI.roa (raw, json)
Hash identifier: rZo1KgaExQIW1OdYGcOQwuTY2gaQzBnSHuH75NobTs0=
Subject key identifier: C8:F7:D5:61:65:C1:DB:6B:DF:30:06:8B:A7:37:99:F9:D1:7B:C0:52
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01865F317B54905EC70EE1A677407BB1818A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yPfVYWXB22vfMAaLpzeZ-dF7wFI.roa
Signing time: Fri 17 Feb 2023 11:45:23 +0000
ROA not before: Fri 17 Feb 2023 11:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.104.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Feb 2023 22:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:31:7b:54:90:5e:c7:0e:e1:a6:77:40:7b:b1:81:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 17 11:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8f7d56165c1db6bdf30068ba73799f9d17bc052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b5:5b:1a:90:28:84:31:b1:5a:9a:2c:c3:11:
9f:18:95:13:8a:5c:56:38:3c:fa:d4:26:9a:bb:04:
3c:a3:73:9b:66:10:a8:25:bd:c9:11:0b:71:ac:6e:
c0:33:85:06:a9:2f:30:6a:45:c6:a1:f4:95:8a:1d:
f9:4e:51:f1:38:83:3d:b2:8e:e9:35:73:8e:1a:7f:
2f:15:ca:d9:00:e7:b9:b7:f5:b1:cd:90:0a:19:7c:
c4:15:7d:15:fa:a8:73:b1:74:21:3f:fc:64:1b:41:
45:da:04:b3:dc:5a:e0:7a:1b:70:74:5d:39:10:c8:
7d:e5:19:37:ae:28:5a:22:a0:07:5a:5c:3d:75:44:
01:13:47:3a:e7:fe:e0:a0:f8:a4:19:e9:32:e2:3b:
65:5d:6a:89:64:2d:91:8f:ab:48:77:dc:ea:85:7b:
ad:3d:87:7d:98:05:46:4a:31:d6:e3:cb:4d:fb:83:
1e:05:49:11:72:e1:f7:2f:ec:3f:b3:1e:c6:16:c4:
f5:1c:7a:f3:44:22:3c:23:c8:c7:53:92:d5:c7:b1:
e1:50:48:7d:7d:dd:1f:1e:7b:8d:81:15:7f:1a:71:
ac:fa:72:71:f6:64:68:ad:d8:f4:b0:c3:b8:21:5f:
18:50:b0:fa:13:1b:6d:f8:18:de:10:ad:fe:3a:86:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F7:D5:61:65:C1:DB:6B:DF:30:06:8B:A7:37:99:F9:D1:7B:C0:52
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yPfVYWXB22vfMAaLpzeZ-dF7wFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.100.0/24
46.37.102.0/24
46.37.104.0-46.37.106.255
46.37.118.0/23
46.37.126.0/24
185.92.44.0/24
185.92.46.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:51:77:94:b6:c6:cf:e8:67:b9:90:48:a9:07:cb:f4:d6:fd:
11:4a:c0:be:0a:d2:23:14:78:7d:46:42:4e:10:3b:96:58:c2:
8e:82:bb:56:41:b5:4a:1a:27:3e:af:30:ea:b5:1a:48:80:e7:
71:21:a4:b1:ac:a0:a5:c8:67:9e:42:1a:56:e6:3a:d9:a0:69:
10:46:eb:e4:1c:f5:1a:8d:2c:04:85:fe:4e:a6:a0:c3:cb:9b:
eb:82:f0:a3:cb:98:f1:d4:09:10:cd:0a:8f:09:55:37:26:23:
5a:61:54:d6:4a:09:af:94:ec:c8:22:78:6d:dc:bc:35:b5:8b:
bb:ba:d7:7b:9a:27:2f:de:d4:9b:d7:50:19:c0:01:a9:f4:41:
95:00:e1:a1:c7:d5:47:c1:0c:3e:d1:39:5c:fb:fa:1a:a8:9f:
78:e6:12:94:0b:f5:5f:59:32:ec:81:50:7f:eb:0a:19:40:10:
ee:b8:17:81:a6:4b:b9:bd:78:bd:0e:b2:7e:df:a4:e4:50:48:
a3:ab:51:98:cb:e7:05:c8:4c:a3:0b:8b:43:f0:b2:db:01:dc:
64:d1:40:11:9b:b1:b8:47:c6:5a:cf:56:da:ec:ec:8c:26:ad:
e8:0c:34:b9:9c:f3:0d:d9:f3:3d:69:f4:08:fd:df:d9:b0:5b:
4b:7d:bf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:07 2024 by rpki-client on console-ams.rpki-client.org