Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Hu62VfXxJuc8gBTnrgZS3B41Vto.roa
File: Hu62VfXxJuc8gBTnrgZS3B41Vto.roa (raw, json)
Hash identifier: qu+Aic8+d6EoL4mRR1yJxub1gyvDu7zXFMB9j4fNoXQ=
Subject key identifier: 1E:EE:B6:55:F5:F1:26:E7:3C:80:14:E7:AE:06:52:DC:1E:35:56:DA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0189CB45D6C1935735C2F2EEAE7E6741F72F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Hu62VfXxJuc8gBTnrgZS3B41Vto.roa
Signing time: Sun 06 Aug 2023 14:34:58 +0000
ROA not before: Sun 06 Aug 2023 14:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.92.44.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cb:45:d6:c1:93:57:35:c2:f2:ee:ae:7e:67:41:f7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 6 14:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eeeb655f5f126e73c8014e7ae0652dc1e3556da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:02:6b:58:98:69:9d:76:56:75:bf:e3:bc:ff:
bc:d6:1e:ea:09:5c:44:1b:1a:76:b3:5d:1d:74:03:
f7:5f:c7:63:f6:56:6b:11:59:6b:22:81:99:fe:c9:
35:b6:3d:2e:8d:0b:b6:11:78:48:3a:a2:1f:7a:0d:
de:87:56:a7:91:a8:81:ca:d9:ae:3d:7a:6d:95:6b:
db:73:d9:3b:cb:5c:1e:c0:19:e2:95:9b:38:72:25:
da:2b:6a:66:4c:94:37:c4:55:cd:3b:cc:d3:64:89:
52:47:1b:ab:a3:6d:7e:ac:3a:92:b6:8b:a2:9c:b9:
cd:73:47:ff:89:e6:a1:a8:3f:49:a5:f9:41:a0:29:
29:90:d9:ce:7c:ff:b0:74:7c:77:a8:ea:d2:9c:8f:
6f:66:16:99:3b:fc:b6:9f:14:7b:8b:bb:7c:77:f4:
cb:68:c9:20:69:ca:35:4a:f8:71:5e:b0:4c:43:63:
90:b6:cf:7e:59:d4:7d:69:26:ef:bd:18:e7:a2:14:
c8:48:78:79:be:d7:f8:7a:f1:d4:6e:d6:a6:ec:60:
db:70:3a:09:b3:58:8c:f9:d6:92:cc:6c:1d:75:1f:
fd:dd:11:5f:1c:66:1f:58:db:01:c7:4e:ad:a7:1f:
9d:9c:86:cd:8b:4f:e0:68:23:f8:dd:4e:99:b7:e6:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EE:B6:55:F5:F1:26:E7:3C:80:14:E7:AE:06:52:DC:1E:35:56:DA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Hu62VfXxJuc8gBTnrgZS3B41Vto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.122.0/23
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6b:0f:21:4a:ef:a0:1f:0a:a8:41:bf:4a:20:bc:ca:2f:68:
d9:0b:6a:89:6a:a6:2c:6a:35:d2:ec:8c:14:0f:99:4d:b6:b2:
0f:51:8b:65:6a:32:fd:5e:10:3f:d4:e8:09:f1:c0:b5:c0:13:
b8:ab:34:8b:76:36:8b:f5:3c:07:37:95:b8:0f:ff:9e:9f:92:
4c:5e:61:f2:6f:ed:ee:64:55:38:41:15:5b:71:78:ea:a4:ad:
32:e0:d5:81:21:55:24:52:98:51:0c:4d:ed:ce:57:5b:7d:be:
0a:e3:a6:40:32:a5:03:c1:be:38:9c:6d:b0:c8:dc:9e:27:f5:
ca:cb:cd:7b:e7:ec:4a:4a:e1:bc:d7:18:56:c6:16:14:9d:ec:
71:d9:bd:b7:ef:45:23:82:d2:fa:c0:bf:81:4b:de:e2:6b:30:
30:f9:06:35:05:4b:a5:67:c3:42:82:44:7b:22:bc:52:09:6c:
aa:2e:65:5d:c9:16:52:90:e6:6e:e2:eb:c5:ff:89:74:d6:db:
40:d3:56:23:35:81:df:d9:ae:99:fb:4d:30:65:3e:d8:6a:de:
3c:17:e2:54:47:c3:4c:e9:da:83:88:1b:cc:48:c2:9a:63:db:
7c:fe:f2:bc:d8:df:91:2d:5c:6b:29:8d:4e:0c:79:a3:70:b7:
c1:79:48:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 06:38:51 2023 by rpki-client on console-ams.rpki-client.org