Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NTU1SZlG0sbcu7oUe76KLR0rO0g.roa
File: NTU1SZlG0sbcu7oUe76KLR0rO0g.roa (raw, json)
Hash identifier: ob7gTyQqwPsrQ6IJS5PxCjiqLiDq2XudAI3Rc3Dxycs=
Subject key identifier: 35:35:35:49:99:46:D2:C6:DC:BB:BA:14:7B:BE:8A:2D:1D:2B:3B:48
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AB6611092F29EB2F7EE3B495A167728F4
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NTU1SZlG0sbcu7oUe76KLR0rO0g.roa
Signing time: Thu 21 Sep 2023 06:15:29 +0000
ROA not before: Thu 21 Sep 2023 06:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.92.44.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:61:10:92:f2:9e:b2:f7:ee:3b:49:5a:16:77:28:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 21 06:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=353535499946d2c6dcbbba147bbe8a2d1d2b3b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:90:c6:10:d8:0d:d8:d7:e6:87:c8:fd:39:
ac:30:f6:0e:b2:1a:be:a8:54:79:ac:0b:78:17:0e:
f4:59:5e:c7:fa:e7:5a:2b:c3:f1:66:3a:1b:65:06:
46:72:90:f0:9a:8b:2f:0a:bc:dd:b9:1e:50:55:64:
37:9b:2d:3b:4e:11:26:ab:bb:2f:2a:10:c0:a0:91:
ad:02:e1:50:ac:e9:33:ce:5e:3d:ad:12:e5:6b:ba:
2b:91:54:e4:c8:77:4a:f6:0d:c0:0e:03:35:9d:d1:
cb:1f:0d:29:e6:f6:b4:22:97:8b:da:3a:2f:ad:18:
9b:08:6e:4f:88:d6:2b:8c:0c:d5:49:b2:4a:0b:9f:
dc:cf:f7:27:7c:bb:81:0a:c3:db:69:a2:bd:8f:b5:
76:a7:f4:de:ae:f3:46:6a:b4:2b:14:c8:8a:1d:71:
2c:40:da:37:c5:92:ea:f0:d1:bf:fd:24:97:f7:09:
82:6f:cb:3c:5a:77:01:11:de:b0:03:4d:f5:81:05:
14:1d:b1:f9:29:1b:ef:47:52:08:94:dc:c0:6e:1c:
a1:6c:ea:20:7e:8f:19:06:8a:50:e8:6d:4f:ee:43:
9d:c7:f5:d0:74:36:e5:73:cb:03:e4:3b:84:aa:5f:
40:74:36:59:bd:ab:5c:e7:1b:36:a6:e7:48:67:2e:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:35:49:99:46:D2:C6:DC:BB:BA:14:7B:BE:8A:2D:1D:2B:3B:48
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/NTU1SZlG0sbcu7oUe76KLR0rO0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.122.0/24
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
52:31:9d:7f:fc:84:86:c1:22:84:bc:44:1c:fa:09:66:97:6d:
2d:ea:08:94:35:a8:5c:d7:b5:a5:59:93:8b:61:b2:db:42:ae:
51:f4:68:6d:e5:91:9f:7f:fb:d7:07:67:21:19:1d:ac:1b:80:
dc:cd:88:d0:16:d4:59:95:38:53:b9:8b:7c:64:a3:09:5d:4b:
53:63:d2:8f:96:95:d7:e7:d8:b0:f0:4f:57:81:ba:f0:fa:2c:
ff:6b:4f:61:a6:71:da:81:5b:2d:65:6b:d6:a1:92:8b:32:d0:
4d:be:17:b9:8f:58:8c:f8:c3:98:38:a0:ff:f6:f5:19:b9:1c:
9b:63:31:ec:2f:8c:41:16:e6:50:d0:95:cb:2e:ad:de:91:62:
c1:e0:59:53:96:14:ea:40:16:f0:ef:f4:f5:92:e7:1e:cd:93:
2d:96:ee:c8:d2:3e:63:3a:a3:ca:44:f1:4e:80:f9:fa:19:9c:
8e:a5:0b:0f:da:48:49:24:97:4d:1c:06:51:65:24:72:4d:a1:
a1:fc:1e:2e:d3:35:86:39:d6:88:e5:fc:64:f8:d9:2c:27:5f:
17:92:40:b1:04:9a:0f:6b:55:02:b2:62:02:2a:29:3d:5e:fa:
cf:f5:70:b2:de:13:46:b3:51:3d:6b:91:ff:74:1f:e9:41:61:
20:f8:03:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:24 2024 by rpki-client on console-ams.rpki-client.org