Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ysPAPG-dKpUMc0rIqney9Eb_PMs.roa
File: ysPAPG-dKpUMc0rIqney9Eb_PMs.roa (raw, json)
Hash identifier: Xnfxw6ViLg+wJpEzOPPdS9BiuNAMvIcuFsNfFeohREM=
Subject key identifier: CA:C3:C0:3C:6F:9D:2A:95:0C:73:4A:C8:AA:77:B2:F4:46:FF:3C:CB
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018ED29D967CBA968F6D9C54964CAE00B86F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ysPAPG-dKpUMc0rIqney9Eb_PMs.roa
Signing time: Fri 12 Apr 2024 14:02:06 +0000
ROA not before: Fri 12 Apr 2024 14:02:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 05:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d2:9d:96:7c:ba:96:8f:6d:9c:54:96:4c:ae:00:b8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 12 14:02:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cac3c03c6f9d2a950c734ac8aa77b2f446ff3ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:39:17:bf:fe:89:47:3b:65:b5:b3:c4:fd:a9:
09:05:cb:14:21:e1:5f:b2:d7:8c:cb:1b:50:db:4f:
ed:fc:40:4f:1c:cf:35:40:46:d9:59:5c:b2:ef:ce:
a0:dc:78:41:b6:31:f0:f8:14:fb:b2:ae:19:5c:14:
f3:68:b0:5a:72:27:de:df:73:86:a5:2f:27:5a:0d:
40:2f:11:e0:2f:fc:39:f2:15:62:6e:9c:aa:54:bf:
1b:e6:89:1e:50:82:6c:39:f5:a4:41:c9:a0:bf:ca:
d0:b7:17:13:48:48:fc:cc:a4:90:49:ca:e3:ab:54:
fc:c5:dd:41:cd:7f:ad:94:39:18:c5:cb:b2:a9:87:
7b:57:99:56:44:f0:50:9a:6f:9b:4e:4e:73:5c:6e:
76:f5:81:77:60:32:0d:be:c0:4f:99:4b:e2:d9:7f:
b7:39:58:b2:fc:d1:20:38:ff:cb:db:5c:2e:fa:50:
63:94:25:31:92:45:18:b4:80:f9:1d:6f:b2:42:6d:
4f:8d:e7:06:cf:a1:07:ad:ce:ba:7d:a2:12:44:72:
dc:bd:25:8a:fc:ec:60:08:5c:4e:74:3f:0e:22:bb:
f4:21:66:9f:52:d8:95:ce:78:e6:f5:b4:54:aa:a3:
52:62:b9:98:9c:36:23:98:96:0e:7c:d4:36:01:1b:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C3:C0:3C:6F:9D:2A:95:0C:73:4A:C8:AA:77:B2:F4:46:FF:3C:CB
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ysPAPG-dKpUMc0rIqney9Eb_PMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
64:92:23:7a:5e:64:fc:0d:fd:f4:c4:9f:e0:d9:c2:d7:b9:45:
7d:e0:81:75:11:f4:d3:89:f0:a2:ef:3a:f9:6b:02:a0:49:01:
96:cd:c2:e1:b8:29:50:55:26:8f:f1:c8:28:d8:94:5d:28:64:
c8:25:53:01:81:cd:76:ab:41:7b:7b:47:e4:60:3a:28:d0:06:
f9:1e:97:e3:59:98:59:8b:12:d3:55:80:23:92:e1:ab:39:e2:
34:30:b9:13:7c:b8:f3:8a:fa:23:3c:65:00:67:84:9c:34:51:
6e:ed:d2:b8:d0:a6:da:cb:64:b8:cb:4a:eb:81:73:a8:ce:3d:
09:13:d1:e0:cb:95:ca:80:3d:58:38:34:f8:82:6c:17:9b:9b:
50:c9:a9:fe:51:19:4d:98:24:ee:5e:f3:c1:93:09:74:88:4b:
94:3f:cb:51:a4:f4:59:1c:be:02:0d:bf:4e:93:9f:a3:e7:07:
f6:2c:f4:31:be:0f:05:5e:09:e0:86:c3:ff:c9:c5:bd:4c:cf:
ab:80:82:1b:03:10:29:46:a3:11:87:98:66:81:0e:74:88:0e:
d6:84:8c:95:3e:46:57:2d:97:4a:0d:d1:15:0a:79:7b:a8:4b:
b3:da:7e:56:67:62:8b:b3:c5:2a:c2:8a:7f:4d:58:ca:ab:36:
ca:c7:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 09:36:08 2024 by rpki-client on console-fra.rpki-client.org