Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zFfVYA_VbmX5vRzniTbvni5le04.roa
File: zFfVYA_VbmX5vRzniTbvni5le04.roa (raw, json)
Hash identifier: EtbfvkORhmeSi8CMfdImq2fXBvApbLrxXVUa4n35yj4=
Subject key identifier: CC:57:D5:60:0F:D5:6E:65:F9:BD:1C:E7:89:36:EF:9E:2E:65:7B:4E
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018D3067E520CCEC0976D6250451A0F42539
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zFfVYA_VbmX5vRzniTbvni5le04.roa
Signing time: Mon 22 Jan 2024 09:02:11 +0000
ROA not before: Mon 22 Jan 2024 09:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 07:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:67:e5:20:cc:ec:09:76:d6:25:04:51:a0:f4:25:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 22 09:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc57d5600fd56e65f9bd1ce78936ef9e2e657b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:70:64:b0:71:6f:55:d5:f2:d7:51:a0:50:
98:05:d7:27:66:03:c0:93:fa:6b:d0:c4:26:7a:c8:
5a:b7:11:69:ab:60:5a:1b:25:a6:52:c1:e0:f2:0e:
7a:f8:d5:c6:38:68:71:0e:1d:f9:3e:db:db:33:c9:
d6:68:0f:13:2d:ff:08:68:32:50:ac:da:a0:56:7f:
f0:0b:2c:27:e5:de:63:f6:f8:a9:e4:9f:8a:80:3e:
da:f4:6b:16:eb:87:43:4c:86:b1:df:a0:ec:6d:c5:
1d:bd:4a:89:fc:51:6c:c2:e2:d0:30:30:96:39:e8:
7d:be:27:80:bf:98:b8:8f:20:ae:a1:0a:09:7f:37:
f9:f8:8c:68:d4:0b:13:09:ea:f2:7a:d1:a9:6f:5b:
ad:ed:2c:25:c4:fd:db:0e:fc:7c:c1:ea:6a:67:c4:
a4:e6:a7:93:67:74:4a:d9:90:a7:c4:6a:83:f7:e2:
5c:43:c3:45:e1:0d:6e:f4:9d:a4:1a:39:aa:b1:7d:
c4:2b:7a:ab:b8:a2:a4:e4:f5:07:1c:a7:e2:7a:b5:
ef:bc:3c:0e:21:8e:8f:61:14:08:be:37:27:fc:25:
8e:3b:f2:be:10:57:fd:a0:0f:3e:f1:d0:63:51:bb:
d6:27:9a:a3:74:c2:f5:1d:c3:b1:c9:23:c3:ce:93:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:57:D5:60:0F:D5:6E:65:F9:BD:1C:E7:89:36:EF:9E:2E:65:7B:4E
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zFfVYA_VbmX5vRzniTbvni5le04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d0:9f:4e:29:71:47:a9:50:fa:f5:be:be:a2:78:35:9a:25:
5c:3b:2a:25:1c:f3:61:fa:da:37:6f:4c:bb:b7:d9:e6:3c:2b:
e3:b3:19:fe:63:cc:17:ab:e0:74:71:55:bd:73:57:35:99:6a:
e7:fd:35:7b:eb:71:e0:32:45:04:9d:d3:dc:e4:40:1c:6c:39:
52:a3:ae:23:1a:82:c6:7a:99:51:5a:7a:82:90:39:dd:70:35:
0a:bb:90:07:0b:2d:de:36:42:b1:85:d6:4b:d4:1d:c0:a1:72:
f9:8f:aa:0c:fc:ad:9a:f2:7d:09:59:6a:47:08:5f:44:78:f5:
20:03:3a:d1:b3:26:9d:b3:08:4d:43:45:0a:00:e3:58:b0:97:
c5:a2:99:6a:c9:8a:74:bd:89:d0:14:93:b3:c2:38:e9:66:69:
f0:22:9d:58:0b:e9:20:f9:16:83:5a:69:50:7d:41:77:73:b2:
7f:74:3c:a2:4e:d7:ca:a0:ae:b2:ab:e3:03:7e:6b:66:20:58:
6b:58:62:0c:da:cb:bf:8a:80:ed:5d:96:5a:08:cd:f9:d9:67:
e1:9b:31:36:de:03:bb:bd:ca:65:7c:2c:43:46:43:b3:04:a6:
b6:cf:11:93:4c:1f:f0:08:3e:9f:da:73:8a:c4:19:00:53:ef:
6f:9c:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org