Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5KVSbn-g3CrxnZfgz8jLUCcDOJA.roa
File: 5KVSbn-g3CrxnZfgz8jLUCcDOJA.roa (raw, json)
Hash identifier: rrwJlKaj+4pS9EYACmVb5Ct6d3OB8o0iHvy8q9Y6QLw=
Subject key identifier: E4:A5:52:6E:7F:A0:DC:2A:F1:9D:97:E0:CF:C8:CB:50:27:03:38:90
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0AE0F4B8B8A855A85163C661DF52FF
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5KVSbn-g3CrxnZfgz8jLUCcDOJA.roa
Signing time: Sun 01 Jan 2023 11:15:07 +0000
ROA not before: Sun 01 Jan 2023 11:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 185.92.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e0:f4:b8:b8:a8:55:a8:51:63:c6:61:df:52:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4a5526e7fa0dc2af19d97e0cfc8cb5027033890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a3:ad:18:19:09:c9:ca:12:c6:c7:5b:42:d1:
c0:7e:db:3c:06:56:26:a4:6f:34:5d:09:0c:80:1c:
84:e7:cb:36:59:88:33:f9:34:d9:10:49:cb:4c:ad:
f6:7d:30:83:52:a7:f9:13:d3:18:48:53:00:fc:79:
a6:fa:9e:3d:ef:4a:7f:97:4b:da:48:a5:0a:80:bd:
19:92:16:b6:c3:33:1f:59:fc:28:d4:4c:cd:ee:d2:
25:d7:80:37:07:bf:6f:5b:3b:3c:b5:98:e7:59:79:
8c:2c:34:c8:df:59:bd:5c:a0:ac:ec:68:6a:67:10:
a0:9a:21:c6:7f:1a:0d:1c:4f:e3:59:6c:76:50:90:
25:04:13:8a:a0:dd:fa:df:76:15:49:64:ad:91:49:
99:39:f9:a9:2a:b2:b6:47:86:6a:3c:61:75:f9:38:
6c:27:bc:fd:66:c2:f5:7e:49:c9:2b:38:f2:10:76:
ba:1f:7c:f1:01:db:88:a3:f0:50:f0:cd:55:29:d0:
16:78:75:79:3f:2d:b7:ad:57:55:aa:e9:47:aa:98:
52:8d:16:02:7e:d5:0b:59:fe:fa:80:01:fc:fb:9f:
e9:01:38:80:2b:fa:c3:3e:89:b8:2c:f7:69:0c:8a:
78:34:c9:0d:25:22:8e:a2:fd:67:d6:6a:2d:bc:ba:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A5:52:6E:7F:A0:DC:2A:F1:9D:97:E0:CF:C8:CB:50:27:03:38:90
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5KVSbn-g3CrxnZfgz8jLUCcDOJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:df:b7:a5:e9:58:11:f7:1b:8e:da:a1:4b:89:93:2b:7f:06:
e6:b1:3f:ed:69:88:34:13:8a:00:f1:81:20:49:48:f7:19:42:
45:d3:15:a7:3d:db:20:77:71:f0:77:1e:0b:d1:27:6d:df:f2:
b7:fe:ce:a7:b7:ee:65:01:3d:a1:d5:14:99:92:6c:69:a1:ea:
b1:1e:63:ea:5d:e0:14:f3:ed:d3:96:d7:c9:21:de:27:67:68:
43:e6:ee:a4:5d:3d:c8:2f:db:74:ab:7a:df:99:ed:f9:08:08:
a0:c2:82:70:55:1f:cd:1e:a8:2d:08:f8:c4:00:43:c5:f1:1e:
92:3a:1b:61:fb:b3:08:43:84:1b:b2:0a:c9:7d:3d:84:14:b3:
67:46:cd:69:e2:00:24:6f:26:f8:3c:43:82:46:54:4d:b5:02:
d3:6d:e9:fc:51:80:55:5e:4b:83:86:60:59:9e:12:e0:9d:41:
34:eb:63:4c:81:39:9e:41:19:ac:a6:d2:cb:d5:49:0f:81:73:
ba:7e:1a:61:51:92:4a:da:05:1f:1e:b4:a4:20:eb:5c:ec:d2:
6e:50:fd:19:81:24:1c:b9:6d:e3:b7:dd:ad:86:9d:49:02:26:
58:00:1e:d5:5c:64:2e:d0:00:78:17:4a:63:5f:2b:86:cf:f5:
a9:45:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org