Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zSSnjswCNMmTz9uHObj07ySKQcc.roa
File: zSSnjswCNMmTz9uHObj07ySKQcc.roa (raw, json)
Hash identifier: ZX7pfl7oLzfAQ4dln9+W6UyG2Os7nExQgbW5+gSXvJk=
Subject key identifier: CD:24:A7:8E:CC:02:34:C9:93:CF:DB:87:39:B8:F4:EF:24:8A:41:C7
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018806D03A136DE6B5A65351AF95961254E6
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zSSnjswCNMmTz9uHObj07ySKQcc.roa
Signing time: Wed 10 May 2023 17:58:09 +0000
ROA not before: Wed 10 May 2023 17:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:d0:3a:13:6d:e6:b5:a6:53:51:af:95:96:12:54:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 10 17:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd24a78ecc0234c993cfdb8739b8f4ef248a41c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:87:14:b2:44:48:39:65:75:48:f5:66:33:
12:2e:28:b6:ab:13:5f:88:68:aa:93:24:d7:94:f7:
ea:ed:95:ed:e8:8c:2a:33:4d:2a:e7:18:c6:9c:e6:
6f:89:23:aa:c5:47:ee:d9:d0:01:db:b9:5a:93:26:
d6:87:3e:7d:14:3d:94:b2:16:cb:db:97:0a:42:19:
37:b6:e0:b9:32:67:fe:a9:1f:b9:3a:2d:aa:a6:f2:
7c:dc:6e:66:25:23:b1:00:aa:97:ba:a9:b6:91:f4:
f4:1f:6c:15:21:e4:db:a8:39:52:25:84:ea:53:af:
d7:e4:b0:a5:43:1d:db:8a:c4:04:7d:80:fc:02:47:
89:84:4b:91:c4:6e:bc:83:9f:1d:9a:8d:35:9c:7e:
ef:df:75:e6:e0:c9:8a:de:1b:4b:93:1d:42:11:d2:
a8:b8:80:de:2d:52:2a:1c:13:b2:63:41:8c:7e:ef:
ce:4d:fc:d7:e9:ae:a7:28:35:1d:85:35:0c:f1:0a:
ab:4f:e7:78:71:4e:fe:f2:75:6e:ca:5d:77:d4:a0:
2d:46:7e:dc:4c:4d:db:e7:3b:1c:5b:b8:d6:22:8a:
03:03:bb:8c:fe:2c:eb:ee:b2:88:fd:19:37:8b:1b:
48:47:f2:1e:7f:8f:95:15:83:4e:5e:82:53:eb:d8:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:24:A7:8E:CC:02:34:C9:93:CF:DB:87:39:B8:F4:EF:24:8A:41:C7
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zSSnjswCNMmTz9uHObj07ySKQcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
9e:de:b7:b4:94:ba:d7:16:10:4f:09:42:6f:b5:14:99:d9:2f:
8a:92:0b:a8:26:be:50:04:55:03:8c:ee:ec:37:37:cf:4d:af:
b6:26:b0:64:cc:df:6a:ad:99:00:83:78:f6:f6:2d:ee:a3:7b:
ef:23:bc:ce:a4:12:3c:7f:58:06:72:25:31:55:15:9f:22:03:
80:85:e5:97:c7:be:d6:84:bd:19:f7:4b:24:ae:25:6b:10:3b:
0f:f8:c5:e6:02:9a:40:b5:dc:c4:bf:e5:ad:63:d0:4f:91:da:
78:b7:08:17:19:fb:9e:e8:75:52:bc:2c:b2:b1:97:04:aa:3d:
75:02:46:dd:d3:87:0d:19:4f:04:51:8a:0f:39:af:c5:a0:b6:
2d:8b:94:a6:a6:25:9e:ed:56:fb:bf:96:1b:fc:6b:9b:2a:59:
dc:3c:75:5b:fc:0e:90:91:c6:01:08:e6:db:c4:05:39:85:ee:
d2:e4:ed:48:6e:dd:2c:09:10:a6:bb:40:75:de:25:af:eb:58:
4f:dc:35:08:86:7f:2c:9f:b2:e1:1e:b0:04:4e:ad:0b:90:60:
b0:18:46:6e:1c:dc:33:9c:d3:f3:f0:34:65:fd:b6:31:7c:a5:
91:ee:8d:88:61:82:66:5c:46:26:6a:1e:6a:03:4c:65:06:4e:
23:68:a8:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org