Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/U75PVnmnzTgl-mhTgLY5HaXgyzE.roa
File: U75PVnmnzTgl-mhTgLY5HaXgyzE.roa (raw, json)
Hash identifier: tdiCOPhe/Zre+lL8x8nHUfU5oiwrGgxvYP/nh/7JNHA=
Subject key identifier: 53:BE:4F:56:79:A7:CD:38:25:FA:68:53:80:B6:39:1D:A5:E0:CB:31
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0189FB19A287EEAB3467B42C34E4E682EC29
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/U75PVnmnzTgl-mhTgLY5HaXgyzE.roa
Signing time: Tue 15 Aug 2023 21:28:28 +0000
ROA not before: Tue 15 Aug 2023 21:28:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 185.92.47.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fb:19:a2:87:ee:ab:34:67:b4:2c:34:e4:e6:82:ec:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 15 21:28:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53be4f5679a7cd3825fa685380b6391da5e0cb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:2d:96:dd:37:28:ea:3e:6b:c9:d2:97:ec:
0e:5d:6e:8c:cf:12:87:ac:03:cb:77:9f:ca:36:45:
b1:f7:5d:d8:ab:29:fe:15:16:75:7c:49:39:85:0c:
dc:51:16:b6:47:bf:3e:ee:31:ef:73:65:63:df:1b:
b9:83:97:38:8c:78:0c:f8:0c:f2:bd:a3:44:30:3d:
51:4c:fb:29:37:3b:9d:56:d2:15:02:f5:03:00:52:
cc:f4:db:cb:6f:fe:66:97:ad:bf:30:51:1c:33:21:
13:85:c0:d6:03:5c:8b:c9:b8:98:df:9f:00:52:5a:
9a:bd:0f:ae:95:85:d1:d2:38:e9:10:30:3b:21:02:
61:0d:53:2e:98:55:3f:d2:d6:12:f9:6a:a5:4a:62:
b5:b0:a3:8c:98:be:c6:25:7b:a3:48:80:b5:df:3d:
de:50:f1:8f:fe:77:5e:63:2a:dc:99:42:4c:0a:9c:
a5:96:42:1f:22:c5:49:3e:b7:7d:1d:9c:f2:e6:38:
f1:66:0b:3a:56:33:42:ea:78:56:64:86:0f:f7:5f:
14:31:d3:99:45:d9:ce:b1:d3:3f:a6:48:26:ec:26:
e4:50:a2:36:32:fe:c7:aa:64:31:a9:fe:4e:d6:18:
2b:0b:29:04:31:4f:f6:33:73:2e:63:53:ff:a7:77:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BE:4F:56:79:A7:CD:38:25:FA:68:53:80:B6:39:1D:A5:E0:CB:31
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/U75PVnmnzTgl-mhTgLY5HaXgyzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.119.0/24
185.92.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:6e:72:bb:e0:a2:57:41:6c:3d:97:ff:ac:ed:b3:ce:a1:5b:
9d:1f:30:cd:a3:71:cf:07:95:95:2d:26:8b:71:ad:a7:4c:4e:
82:dd:a7:a8:9f:48:44:95:9d:5e:f5:e3:52:ef:72:61:ae:48:
be:f6:57:4e:61:d4:20:7e:ec:11:27:da:5b:82:51:6c:39:b0:
2e:b2:39:41:69:12:d0:9e:41:c6:9e:a4:63:a7:68:cc:88:2b:
a0:7a:ad:aa:7e:49:25:bb:bf:f4:a2:4c:80:54:88:7e:07:3a:
c8:5b:78:16:dd:1d:a8:2c:b2:25:7e:55:bb:ab:c8:97:45:56:
b8:27:aa:b4:49:13:82:8b:b9:c9:9d:53:da:83:63:26:b9:17:
a0:5a:af:31:81:02:e1:13:c3:ac:24:69:0b:c1:b0:4e:ac:b4:
21:64:91:d0:8b:06:07:7e:85:e6:8d:fd:e4:67:fb:20:75:08:
69:28:49:fe:08:0a:61:22:3b:b1:28:21:54:d1:f3:7b:40:d3:
1c:10:3f:09:db:a7:0f:85:0b:95:c0:56:36:bb:fb:47:db:1c:
90:d4:21:9f:bb:30:d8:cf:bb:33:84:07:fa:84:e2:0d:48:d0:
a2:96:fb:24:d0:bd:d8:bd:bf:d7:bc:07:80:d6:1a:f4:cb:96:
3d:10:2a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 14:59:51 2023 by rpki-client on console-ams.rpki-client.org