Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zys2qMAj_SZ3TYXKWkRVG5VyklY.roa
File: zys2qMAj_SZ3TYXKWkRVG5VyklY.roa (raw, json)
Hash identifier: QaTGxJuu/6yhxnVJA2DMezcxI4UTSr2DEelqz7Bp0Bk=
Subject key identifier: CF:2B:36:A8:C0:23:FD:26:77:4D:85:CA:5A:44:55:1B:95:72:92:56
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0189FB1A8CC80ACDED6DF20E65773203103D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zys2qMAj_SZ3TYXKWkRVG5VyklY.roa
Signing time: Tue 15 Aug 2023 21:29:28 +0000
ROA not before: Tue 15 Aug 2023 21:29:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fb:1a:8c:c8:0a:cd:ed:6d:f2:0e:65:77:32:03:10:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 15 21:29:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf2b36a8c023fd26774d85ca5a44551b95729256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:33:02:9d:68:e1:68:bd:01:0c:65:0d:b5:
e3:79:52:29:a0:ea:51:7b:c1:23:57:62:7d:ba:2b:
08:ea:9f:2a:ec:88:f7:d6:f3:e9:a3:03:b4:96:fc:
c9:51:0d:04:ac:2b:7d:67:5a:3a:a6:77:35:ff:ab:
4d:49:b3:d1:ff:94:8d:be:0b:b8:54:6d:77:ae:e2:
33:7f:fe:c9:ac:7c:ba:67:3d:ca:99:10:3f:6b:62:
37:40:de:e4:26:36:4c:be:26:02:9b:5b:ae:3a:63:
91:62:5a:bf:33:c4:74:ae:5e:61:db:cc:62:d1:55:
20:2e:14:36:a4:47:53:7a:d1:d7:ac:fc:f6:bf:11:
a3:fc:b9:66:2d:02:fd:18:48:7f:fe:b0:5b:cf:8a:
95:6c:da:f8:1b:cf:a2:53:da:21:e2:4e:e3:82:43:
f3:62:d3:79:5e:b3:d6:a2:92:fd:7c:72:ee:fa:13:
8d:9b:fe:4e:41:e6:a6:90:e8:dc:fc:6a:ca:67:29:
3f:c2:58:9b:ea:ed:73:20:57:9a:42:2b:af:72:96:
73:7c:22:68:35:6d:51:e4:52:f9:a2:f6:da:ea:60:
04:ee:8d:85:ae:a5:e6:03:0c:b0:33:44:85:dd:9b:
c1:7e:88:53:85:66:5f:13:e7:79:93:79:af:c3:fd:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2B:36:A8:C0:23:FD:26:77:4D:85:CA:5A:44:55:1B:95:72:92:56
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zys2qMAj_SZ3TYXKWkRVG5VyklY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c6:a2:0d:d7:6b:f4:28:75:75:79:a3:d5:3f:4d:65:9c:00:
b1:ce:43:47:22:9a:11:0d:2f:33:fc:4c:f0:54:49:d7:e9:45:
19:21:03:d8:18:6d:0a:6d:b0:d0:d3:48:81:a6:d9:77:ce:a1:
0b:2b:e7:63:fa:b3:be:94:0f:65:c0:41:71:c4:30:ea:fd:8f:
8b:e6:f3:24:cf:dc:03:f8:f4:e9:1f:88:65:3e:13:08:9d:60:
10:81:00:b7:45:af:9a:cc:d9:6e:04:4a:49:3b:7a:ce:e5:ba:
81:c5:19:5d:41:e9:1c:ff:69:6d:d4:16:b6:cc:36:0a:b0:12:
3e:57:b3:7a:80:d8:33:52:bb:b1:0a:d3:7a:a1:db:de:40:6a:
13:12:e1:b7:7f:8a:39:31:9d:9e:76:44:56:92:ef:17:67:74:
52:ef:c7:2a:e8:07:f5:6e:3a:be:ef:3a:9c:eb:65:ce:d8:45:
21:8f:ff:fa:e9:4e:15:ec:c0:7d:c7:e5:60:ba:b9:85:6d:9f:
1f:be:f2:1f:a7:ea:fc:94:a5:52:dc:96:64:31:84:37:31:67:
d2:09:02:af:d4:d1:8b:4b:34:f3:38:73:f0:7e:af:19:70:c7:
57:d4:23:3b:eb:b0:20:5c:87:6d:e9:70:2f:fc:25:07:c8:11:
a8:85:ea:55
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYn7GozICs3tbfIOZXcyAxA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwODE1MjEyOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjJiMzZhOGMwMjNmZDI2Nzc0ZDg1Y2E1YTQ0NTUxYjk1NzI5MjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrIzAp1o4Wi9AQxlDbXjeVIpoOpR
e8EjV2J9uisI6p8q7Ij31vPpowO0lvzJUQ0ErCt9Z1o6pnc1/6tNSbPR/5SNvgu4
VG13ruIzf/7JrHy6Zz3KmRA/a2I3QN7kJjZMviYCm1uuOmORYlq/M8R0rl5h28xi
0VUgLhQ2pEdTetHXrPz2vxGj/LlmLQL9GEh//rBbz4qVbNr4G8+iU9oh4k7jgkPz
YtN5XrPWopL9fHLu+hONm/5OQeamkOjc/GrKZyk/wlib6u1zIFeaQiuvcpZzfCJo
NW1R5FL5ovba6mAE7o2FrqXmAwywM0SF3ZvBfohThWZfE+d5k3mvw/2axwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFM8rNqjAI/0md02FylpEVRuVcpJWMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvenlzMnFNQWpfU1ozVFlYS1drUlZHNVZ5a2xZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALiVgAwQA
LiViMAwDBAAuJXEDBAAuJXIDBAAuJX8wDQYJKoZIhvcNAQELBQADggEBAKbGog3X
a/QodXV5o9U/TWWcALHOQ0cimhENLzP8TPBUSdfpRRkhA9gYbQptsNDTSIGm2XfO
oQsr52P6s76UD2XAQXHEMOr9j4vm8yTP3AP49OkfiGU+EwidYBCBALdFr5rM2W4E
Skk7es7luoHFGV1B6Rz/aW3UFrbMNgqwEj5Xs3qA2DNSu7EK03qh295AahMS4bd/
ijkxnZ52RFaS7xdndFLvxyroB/VuOr7vOpzrZc7YRSGP//rpThXswH3H5WC6uYVt
nx++8h+n6vyUpVLclmQxhDcxZ9IJAq/U0YtLNPM4c/B+rxlwx1fUIzvrsCBch23p
cC/8JQfIEaiF6lU=
Generated at Fri Aug 18 22:50:39 2023 by rpki-client on console-ams.rpki-client.org