Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zZK7VVDhQidwcC1b-y--TKqqGvs.roa
File: zZK7VVDhQidwcC1b-y--TKqqGvs.roa (raw, json)
Hash identifier: C1oXQVULkHexXv5mPlmkKOmj3alSfhhf3+K1OgtQ4z4=
Subject key identifier: CD:92:BB:55:50:E1:42:27:70:70:2D:5B:FB:2F:BE:4C:AA:AA:1A:FB
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0189CB4895A2E15B29D7091E504CB5258584
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zZK7VVDhQidwcC1b-y--TKqqGvs.roa
Signing time: Sun 06 Aug 2023 14:37:58 +0000
ROA not before: Sun 06 Aug 2023 14:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cb:48:95:a2:e1:5b:29:d7:09:1e:50:4c:b5:25:85:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 6 14:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd92bb5550e1422770702d5bfb2fbe4caaaa1afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:92:1c:e3:0d:47:6d:45:98:55:a4:0c:cc:
ac:67:74:9c:d3:8f:ae:8b:d6:f7:c9:39:cf:10:9c:
23:58:cb:92:a3:a1:36:6c:3f:07:1a:f5:dd:e4:c0:
73:b0:ee:8a:d6:e9:15:dd:ea:c9:0f:4a:d8:ae:3c:
b1:97:ac:03:92:79:77:f5:64:38:2a:43:02:d7:41:
be:d4:1a:98:ce:5d:8d:c5:b4:8c:78:4f:ec:9d:ef:
8a:f2:32:f5:c9:85:00:91:7a:01:0b:b9:8d:71:02:
9c:6d:7d:a1:54:97:a5:13:cd:bb:ea:98:10:77:c9:
14:27:04:01:c8:65:98:7f:67:9b:07:f2:cd:b6:90:
21:ed:ab:c3:a3:91:77:35:72:0b:c6:ec:08:dc:aa:
fd:be:68:bf:1e:b6:81:83:70:33:d2:9c:0e:02:88:
3b:43:0b:d3:cc:5a:a0:82:be:4e:79:1d:93:7d:7f:
5d:12:36:29:22:57:5c:c9:28:03:e6:87:57:27:94:
f4:f5:3c:93:4f:bd:7f:2c:2e:76:aa:f9:0f:dd:40:
c4:8b:05:ba:58:4b:6b:60:4c:d8:7c:24:2d:87:d8:
5f:da:1f:a2:53:c8:dd:9f:eb:d4:02:62:e2:82:6a:
4b:5e:20:6b:fb:60:f3:8c:f5:4a:b3:8c:70:23:37:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:92:BB:55:50:E1:42:27:70:70:2D:5B:FB:2F:BE:4C:AA:AA:1A:FB
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zZK7VVDhQidwcC1b-y--TKqqGvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.127.0/24
185.92.47.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f3:15:f1:3a:a0:95:88:c0:33:71:1f:ad:f4:50:a8:99:7a:
89:88:ce:f4:57:ee:87:55:70:a8:e6:14:03:ff:7e:80:5c:a5:
c6:8f:2a:9a:55:a5:ef:c7:0e:b9:a6:53:1b:a7:17:2f:ec:ef:
e9:b2:a5:ea:9c:4e:28:54:a9:b1:d6:6e:f9:a8:92:1c:36:35:
6d:46:8c:a4:2d:dc:c2:1f:cc:3c:15:1b:1f:80:e6:cc:50:9a:
81:12:3a:e6:76:40:cc:f3:4b:6e:19:cd:f6:ac:82:12:24:2f:
0e:1a:7e:e0:b0:e3:50:a7:f9:bd:c1:a0:c2:bb:5a:53:6f:2b:
2e:39:4a:b6:02:6a:07:88:1a:2e:3b:e8:19:15:d8:3e:e5:cc:
4b:43:09:c8:db:4c:34:ed:1a:90:43:97:8b:cb:7d:30:fb:c7:
1d:45:fe:8b:b9:be:c4:1d:e6:02:8a:4b:bc:98:29:1b:19:13:
39:49:60:ca:99:ac:0f:d1:c1:46:66:e9:3c:b8:13:77:54:c6:
21:92:7c:28:46:0c:8a:20:07:8a:d5:0c:3c:62:a9:6c:4a:cb:
d6:3f:85:34:7a:88:0f:e6:79:19:61:03:24:ab:c0:4e:59:e2:
3c:91:2e:16:4c:c7:1c:0f:4f:c0:48:72:7e:2e:bd:14:be:20:
9e:3a:cb:03
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 11 02:37:05 2023 by rpki-client on console-ams.rpki-client.org