Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yZiiq-zURDPEnOj6RS23u0d5NXY.roa
File: yZiiq-zURDPEnOj6RS23u0d5NXY.roa (raw, json)
Hash identifier: hOQ2ndubuY6JhTlQ8cUK1dsH6sPCneeFUmBkN4eVdec=
Subject key identifier: C9:98:A2:AB:EC:D4:44:33:C4:9C:E8:FA:45:2D:B7:BB:47:79:35:76
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01896D79CEF9178602FD5DC4D46425E54016
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yZiiq-zURDPEnOj6RS23u0d5NXY.roa
Signing time: Wed 19 Jul 2023 09:27:26 +0000
ROA not before: Wed 19 Jul 2023 09:27:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.110.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jul 2023 07:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:79:ce:f9:17:86:02:fd:5d:c4:d4:64:25:e5:40:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 19 09:27:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c998a2abecd44433c49ce8fa452db7bb47793576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:49:22:4d:1d:5e:43:8b:55:99:1a:ad:97:7e:
79:61:86:eb:a5:cb:c2:03:0b:ae:36:ec:76:9e:2b:
07:b6:ff:88:52:ff:e9:a6:61:9c:83:75:71:45:84:
ee:2c:93:08:ca:2d:4e:1e:4b:c5:9e:d4:9a:b7:8d:
db:ec:40:92:2b:5a:d3:83:b1:50:23:f5:4c:67:10:
6a:1f:88:1f:a1:39:83:de:9b:9e:19:c3:84:79:f9:
a3:ad:f9:d3:a9:fe:d8:f4:2e:7f:63:e4:e1:b7:b7:
c3:af:28:83:0d:ae:b0:48:29:cd:8e:56:df:e0:f6:
9f:8a:94:e8:eb:4d:78:08:f0:a1:52:aa:14:0c:9c:
a8:c3:71:6c:c2:a0:80:a0:75:06:cf:88:44:bc:e2:
4f:a6:3a:da:7e:1c:2e:11:fc:69:55:cc:c0:b8:a6:
63:91:42:c5:68:e0:41:35:20:2a:5b:8b:fe:bb:fc:
7a:56:fc:85:95:5a:0c:54:81:8d:61:56:f9:86:52:
47:52:09:fd:fe:3f:d6:03:aa:0f:59:6c:db:9c:7f:
c3:49:e6:12:07:35:73:65:7f:e7:81:9e:f4:73:c3:
8e:4c:a6:78:5b:d0:43:15:68:bc:82:b7:09:d1:ee:
04:10:7d:01:07:7f:1f:08:c8:11:17:71:33:60:75:
5a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:A2:AB:EC:D4:44:33:C4:9C:E8:FA:45:2D:B7:BB:47:79:35:76
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/yZiiq-zURDPEnOj6RS23u0d5NXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.110.0/24
46.37.113.0-46.37.114.255
46.37.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c3:c1:18:70:09:3a:70:b4:3c:7a:a9:3c:7c:55:50:d3:c6:
39:93:e4:7a:27:d7:47:b7:bd:7f:11:3f:21:2f:b7:32:c4:0d:
77:32:6b:e4:a9:f4:ea:c9:34:bd:b8:0b:a4:ba:dc:95:8f:0d:
94:0d:c8:f5:dd:af:53:ec:93:94:5b:41:df:9b:23:3c:ed:a6:
3e:ef:2e:e6:28:7a:90:61:2d:69:ca:4e:0b:5e:fb:05:1e:db:
18:05:8a:b3:c3:dc:76:44:05:c2:5a:04:49:24:41:ac:20:3c:
b8:63:94:57:c1:4e:84:94:bd:02:ef:2d:b4:7a:dc:91:f8:e3:
cf:8e:b3:ec:c4:b4:dd:c2:b1:0f:f0:de:82:8d:29:a2:31:3b:
63:78:a5:8a:ab:5a:9d:82:e3:e9:ab:c3:54:56:4b:fc:1d:d1:
ee:74:76:2e:97:89:fb:c0:83:81:9b:1f:32:c1:1f:77:18:0c:
fa:23:58:c1:79:57:a0:21:41:f2:85:ac:f9:eb:22:a0:b5:39:
7c:9b:e2:4f:41:f7:ed:93:ab:28:97:68:29:34:36:83:9d:4e:
5e:cb:a1:2c:65:f6:b2:9a:a2:92:db:05:42:3e:b1:05:e0:55:
cd:87:65:83:e0:08:51:8c:71:b1:90:60:d0:bf:3b:c8:90:fe:
b3:da:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org