Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Xzf-tUkZ98ZlpU5MXw-tngfYjWk.roa
File: Xzf-tUkZ98ZlpU5MXw-tngfYjWk.roa (raw, json)
Hash identifier: fA+o1LhcgTTclEP18QygLx1EDS+K5/mz0vo9a6N8JHY=
Subject key identifier: 5F:37:FE:B5:49:19:F7:C6:65:A5:4E:4C:5F:0F:AD:9E:07:D8:8D:69
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01892C32A44F22395B6808EDD8514843BCFC
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Xzf-tUkZ98ZlpU5MXw-tngfYjWk.roa
Signing time: Thu 06 Jul 2023 17:14:23 +0000
ROA not before: Thu 06 Jul 2023 17:14:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.92.44.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2c:32:a4:4f:22:39:5b:68:08:ed:d8:51:48:43:bc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 6 17:14:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f37feb54919f7c665a54e4c5f0fad9e07d88d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:be:89:37:df:ce:77:5a:eb:96:15:91:a8:
d4:1b:40:96:48:a4:a7:a6:11:ae:82:f7:fa:c6:7a:
5a:68:c9:9c:7b:10:bb:03:50:a5:72:71:b7:ab:8d:
3f:ad:20:fe:12:ef:fe:5d:8a:86:d0:81:10:a3:11:
4b:47:3e:dd:58:d4:32:05:58:2e:a8:0e:98:e6:43:
3e:ae:d9:c6:b0:ab:ce:cc:f6:46:f2:b3:32:1d:1a:
3c:12:17:37:b2:b1:96:11:58:46:10:06:7f:0c:19:
f3:8c:ac:2f:6d:9d:77:82:d3:bf:fe:a5:48:50:d0:
df:05:54:ed:59:81:b2:89:36:b5:b2:75:e8:7b:41:
6e:e5:d2:8c:89:d9:05:58:72:a2:c7:fe:27:62:72:
b3:70:9d:66:7c:f6:01:41:e5:90:90:70:70:3b:63:
e9:7c:ba:f0:ad:a7:04:d1:ed:7b:12:b6:23:0c:1b:
e8:80:a0:db:d5:25:a6:f7:c3:fa:05:61:58:52:14:
f6:de:52:64:84:2d:2f:3a:b5:61:32:d1:99:d3:8d:
72:b6:36:5c:27:a8:ee:3c:e5:0d:af:50:92:78:84:
a3:c5:b3:98:ed:ad:31:60:55:71:f0:91:b9:3e:e4:
7f:f8:47:4f:1b:93:79:30:2a:a3:aa:97:5f:fa:84:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:37:FE:B5:49:19:F7:C6:65:A5:4E:4C:5F:0F:AD:9E:07:D8:8D:69
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Xzf-tUkZ98ZlpU5MXw-tngfYjWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.119.0/24
46.37.122.0/23
46.37.127.0/24
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a6:c9:50:4f:dd:ae:4a:a4:8b:85:4a:84:c1:f2:74:26:c0:
75:58:d1:ba:03:7e:7c:9d:1c:6f:86:60:37:cc:f2:d6:2e:66:
be:51:b0:6f:ac:a1:14:0d:f1:ec:3a:6b:d3:1e:f8:21:99:eb:
69:3f:da:bf:98:a3:41:a9:5c:c7:21:67:da:88:fa:83:e4:84:
3d:4b:74:69:95:52:62:23:ea:d4:6d:c5:d2:cc:32:37:0d:5e:
37:ea:be:ff:c8:e4:b4:98:62:22:7e:f6:d8:c1:47:5b:ea:73:
3d:3e:85:5d:44:9d:47:0c:4d:bf:e7:56:ef:c2:5e:bd:2b:99:
90:a3:e0:d7:32:01:71:66:60:31:91:5a:aa:97:cd:84:13:6c:
09:67:2f:da:7e:94:80:71:2a:b7:bc:77:03:c3:46:03:c3:06:
4f:b1:3a:e8:03:9e:01:b3:cd:ea:60:3b:99:0f:97:56:4a:e0:
ab:60:fe:d7:53:19:52:fc:99:8f:7a:2b:bc:68:4f:7f:60:17:
ee:87:4d:ef:0c:d4:53:88:e3:d6:2e:0d:b2:6f:98:36:25:a5:
15:be:1b:17:f9:40:c2:51:8a:87:2b:5c:03:23:8b:ba:a3:19:
bb:23:84:f5:61:68:a6:56:83:bc:41:21:8e:27:50:12:d3:29:
a7:7a:9f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org