Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2E47LjDUU4v_mJ_CWU5-4I3ptRQ.roa
File: 2E47LjDUU4v_mJ_CWU5-4I3ptRQ.roa (raw, json)
Hash identifier: wogxy8Xcax8y7NFe2zN8WXJM92eploB1uN4dPv+6omg=
Subject key identifier: D8:4E:3B:2E:30:D4:53:8B:FF:98:9F:C2:59:4E:7E:E0:8D:E9:B5:14
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018901CB244D501FBB1D7D342B208E39A90D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2E47LjDUU4v_mJ_CWU5-4I3ptRQ.roa
Signing time: Wed 28 Jun 2023 11:37:17 +0000
ROA not before: Wed 28 Jun 2023 11:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:cb:24:4d:50:1f:bb:1d:7d:34:2b:20:8e:39:a9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 28 11:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d84e3b2e30d4538bff989fc2594e7ee08de9b514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:ac:c4:73:0d:77:05:71:ec:b1:01:76:14:
b9:78:bd:56:2a:5d:b1:b0:71:bb:35:59:ce:83:93:
fc:09:d4:85:7b:97:38:99:64:22:a1:46:8a:60:d0:
24:2f:7b:c1:6a:68:19:14:63:53:e3:ce:67:78:15:
74:8b:22:ee:83:66:fd:5e:05:3f:5e:41:26:61:91:
2a:7c:d2:14:66:0d:d6:f4:1d:c3:5e:2d:65:12:2b:
15:b2:74:7a:f6:9f:ed:11:91:53:6e:4e:61:f7:95:
18:66:f0:c1:a2:68:7b:96:e8:27:60:72:fd:2c:5d:
13:6c:aa:dd:54:a2:a5:45:8b:5c:49:ff:da:48:47:
5d:bc:35:10:12:08:9e:c1:2e:32:5c:ef:45:1f:0b:
d7:02:80:f8:9d:79:cc:d4:ba:73:9a:6b:03:d4:59:
c7:8c:61:db:bf:b5:e0:1b:7d:1b:01:57:a4:18:17:
0a:1e:29:a3:bd:4d:c4:aa:7b:4a:90:88:d6:0e:06:
2b:de:2b:a2:81:65:1f:f1:74:a9:a2:ef:a1:cf:35:
ef:3f:99:d2:7a:a5:ec:3e:2d:83:ca:d8:ca:f4:36:
e1:e6:0d:3e:49:8e:81:8d:79:58:ab:98:58:1e:e5:
94:7b:b0:cd:e7:ec:27:a4:6b:c0:51:32:c5:f2:a7:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4E:3B:2E:30:D4:53:8B:FF:98:9F:C2:59:4E:7E:E0:8D:E9:B5:14
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2E47LjDUU4v_mJ_CWU5-4I3ptRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c2:3d:b3:da:59:f5:ff:7d:24:02:34:7f:db:d3:dc:c7:4b:
83:c9:b9:e0:99:e3:71:e0:4a:c2:bf:48:49:3e:cd:42:24:aa:
29:43:31:ad:9d:73:21:54:07:8f:0e:b6:3e:bc:7d:22:36:3d:
18:c3:bb:ff:ce:5f:a2:03:b2:12:d3:37:84:ad:02:e8:a1:0b:
25:bc:c3:fc:ff:71:da:ab:f5:6e:4a:fb:8f:63:bd:d4:91:b0:
66:f2:e5:6f:c7:70:90:2d:75:5c:99:0a:cb:0e:ef:c0:fd:1a:
fa:17:7c:8b:41:ba:ae:10:a3:4b:3b:0a:c6:eb:27:82:11:d7:
d0:1c:df:ba:26:86:fc:27:18:35:ca:4b:7d:bf:9f:81:57:93:
5e:bb:b7:39:ad:70:cd:10:aa:24:83:8d:2e:33:49:37:f9:1e:
ca:82:53:44:85:dc:68:b9:f5:5f:f1:a4:ed:2d:23:b1:00:80:
a3:dc:47:1e:f6:42:d7:67:65:ef:31:a9:29:33:cc:27:54:32:
3e:5d:d8:c5:98:0e:03:ae:da:79:f9:ba:c6:f4:5b:63:8c:d4:
7f:4c:5a:95:57:7f:41:ac:21:1d:64:e9:f6:18:a7:de:d4:e9:
bc:38:52:95:22:dd:31:6c:52:d6:f4:89:01:93:31:45:8b:aa:
fe:52:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net