Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/CbhCdsxWnAWqP2tt7YaufN8i7vI.roa
File: CbhCdsxWnAWqP2tt7YaufN8i7vI.roa (raw, json)
Hash identifier: IYShkeCJlStx+miDNmybMiyvftswo64DS+ZTEmjwbEA=
Subject key identifier: 09:B8:42:76:CC:56:9C:05:AA:3F:6B:6D:ED:86:AE:7C:DF:22:EE:F2
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018956E84D74DE9C1DB1BB57E1E557B438F4
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/CbhCdsxWnAWqP2tt7YaufN8i7vI.roa
Signing time: Sat 15 Jul 2023 00:16:52 +0000
ROA not before: Sat 15 Jul 2023 00:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.92.44.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:56:e8:4d:74:de:9c:1d:b1:bb:57:e1:e5:57:b4:38:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 15 00:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09b84276cc569c05aa3f6b6ded86ae7cdf22eef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:0a:5b:88:ff:bf:4f:b9:60:bd:26:b4:a2:
dd:a8:41:e3:97:4b:dc:1b:91:d1:91:de:7a:a4:23:
a4:a9:cd:57:79:1a:f1:cb:64:78:cd:c4:40:35:82:
d6:46:10:31:a4:4d:f7:66:45:39:cd:81:67:b8:9c:
c4:df:f8:62:ac:f9:65:10:06:de:b5:8f:14:61:02:
c0:34:45:08:96:af:e2:ce:1b:a4:c9:53:a6:65:f2:
cf:10:0a:84:6d:82:88:84:8e:b1:9e:81:ac:28:32:
f0:2d:e3:9f:56:f9:96:47:5d:1d:22:b9:4d:ae:3e:
ee:3a:5c:f5:9f:f6:39:b0:6c:e4:5f:2d:d6:0b:31:
06:1f:13:82:22:46:44:3e:73:93:00:29:15:be:fa:
8a:cf:ef:14:a7:80:f1:9d:c1:b3:cc:01:2d:ab:fe:
23:39:0a:94:f6:42:05:60:7f:ae:f9:f6:e5:da:4a:
6f:d1:3b:50:6d:67:63:80:39:70:c9:2d:52:b3:7d:
99:87:f0:b2:b9:25:75:19:39:13:38:ad:e7:c9:e0:
cb:3c:61:ea:3f:0c:66:02:56:52:84:c3:a8:da:58:
cb:c0:81:58:d8:e9:7f:ba:39:c9:11:71:1d:1d:42:
b0:41:a5:b9:53:5e:11:4d:e8:90:05:39:30:7a:8f:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:42:76:CC:56:9C:05:AA:3F:6B:6D:ED:86:AE:7C:DF:22:EE:F2
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/CbhCdsxWnAWqP2tt7YaufN8i7vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.122.0/23
46.37.127.0/24
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c0:1a:4d:63:47:25:31:75:6c:60:20:08:8a:7f:d1:10:50:
40:95:75:cb:a9:0f:b5:c9:65:29:77:e8:9c:28:a4:08:07:8d:
c1:2f:f7:9f:b2:25:81:75:ea:21:cd:a7:62:f3:a5:3b:43:37:
1c:8f:b0:e7:d8:e7:a3:d5:14:75:25:33:e8:39:27:80:1c:6e:
d8:1c:a0:d8:d8:49:14:96:0a:90:4c:2f:f3:34:28:21:83:5b:
d9:68:0c:d1:69:7b:c2:4f:02:b2:f3:71:c2:8a:3d:db:03:38:
e0:07:54:e0:74:76:0d:ba:28:a5:3d:b6:70:e0:df:8f:ee:c2:
7f:f1:e4:4c:70:3d:82:e7:84:48:08:e3:a7:c4:83:82:12:26:
f1:7a:1e:ff:de:cd:f9:31:a0:f5:e5:01:8a:65:c5:08:c0:b4:
9f:de:ed:cb:85:a9:95:ff:38:e2:6c:a7:af:b8:e2:cd:f4:9e:
9c:c1:ed:01:38:36:8e:23:42:fa:27:43:e2:2e:26:99:1a:48:
1e:d2:35:94:75:7c:d9:6b:93:2f:15:94:13:e3:8b:35:30:f5:
18:3b:cd:bc:33:68:1b:7d:d5:67:72:05:07:69:5d:b3:d8:f2:
2a:42:40:eb:54:5a:3d:3a:f8:95:eb:63:7e:09:4b:6a:18:e7:
be:76:47:c7
-----BEGIN CERTIFICATE-----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 at Sun Aug 6 15:00:16 2023 by rpki-client on console-ams.rpki-client.org