Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ikTnjRidJ352ymAqqWXKWsiv_Ls.roa
File: ikTnjRidJ352ymAqqWXKWsiv_Ls.roa (raw, json)
Hash identifier: veYf9RFnxWgfIoWOdCXooa7mS7VY2P6Z+9+8tojlruI=
Subject key identifier: 8A:44:E7:8D:18:9D:27:7E:76:CA:60:2A:A9:65:CA:5A:C8:AF:FC:BB
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0188DD150AEB06B12318CCFCD44D5DA78723
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ikTnjRidJ352ymAqqWXKWsiv_Ls.roa
Signing time: Wed 21 Jun 2023 08:32:03 +0000
ROA not before: Wed 21 Jun 2023 08:32:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.92.44.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jul 2023 17:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:15:0a:eb:06:b1:23:18:cc:fc:d4:4d:5d:a7:87:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 21 08:32:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a44e78d189d277e76ca602aa965ca5ac8affcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2e:88:01:20:fb:c8:77:7d:77:89:04:a9:43:
ff:12:f0:be:77:39:ad:ca:d2:e3:85:d0:00:59:81:
a8:55:a9:90:d2:c6:5c:68:97:95:9d:78:4d:e7:35:
c1:e7:d7:2d:00:50:28:35:54:39:a3:ad:a2:05:55:
9e:5b:e9:b7:f2:49:b2:0a:be:f5:f6:5e:d2:08:d6:
19:db:8d:89:a9:ff:f6:85:a7:98:f4:58:12:c8:68:
89:30:b6:4b:60:b7:14:e7:c9:30:a8:f0:70:90:d9:
35:d4:e1:db:6f:78:1a:60:8c:25:34:ec:bd:9c:bc:
42:33:87:4f:2b:c8:99:69:5f:d7:09:0d:5d:59:c8:
08:37:d4:97:8b:81:70:14:ce:dc:39:77:68:4d:37:
12:19:6e:76:24:62:55:fb:74:87:5c:0a:bc:be:8b:
2b:12:af:6a:fc:0c:13:63:39:cb:d2:ac:3a:38:cb:
0c:6f:1b:f2:f7:c2:22:09:f8:d2:89:b4:09:0e:dd:
42:66:a7:f1:9b:da:22:e8:5d:6d:52:39:7b:64:34:
c4:e8:f4:d3:a9:ec:5d:0f:b7:4b:e8:2d:d9:ed:c9:
7b:e5:8b:0a:98:a1:cd:05:eb:3d:ff:c5:ca:bd:e7:
63:34:da:5b:1a:74:a1:15:e3:ac:31:f1:22:ff:6a:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:44:E7:8D:18:9D:27:7E:76:CA:60:2A:A9:65:CA:5A:C8:AF:FC:BB
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ikTnjRidJ352ymAqqWXKWsiv_Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.119.0/24
46.37.122.0/23
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:07:fe:cf:1a:f8:0b:d6:96:af:3c:8c:e0:6e:69:47:62:62:
cc:8e:7d:12:d9:6f:4f:f4:fb:eb:23:9b:c3:18:0f:79:42:af:
24:56:d0:db:2f:07:29:22:ab:91:00:d7:d2:67:ef:06:86:83:
4a:22:ca:94:d1:d2:be:1d:cc:ce:20:ba:37:70:0d:fb:7e:57:
cd:7c:2c:9f:14:ed:3f:2c:2a:58:a6:73:2c:79:47:46:e2:b2:
37:45:63:ba:f0:71:7e:ac:fa:87:bb:75:d2:f8:1f:0c:7d:7a:
70:d0:37:84:b1:10:d7:6e:5a:57:e7:34:21:7b:4c:b2:21:b0:
72:9e:98:a7:22:6a:9e:68:c2:16:05:f8:09:02:c6:e7:4e:76:
ed:4e:87:8f:9c:42:70:aa:fb:b6:81:98:41:24:4c:13:86:b6:
35:01:54:6f:cc:06:18:7a:43:12:2b:15:45:86:69:37:94:27:
24:18:b6:b2:2e:79:e0:d8:43:fb:41:2a:c7:47:4e:fe:e8:ab:
50:7c:06:cc:e3:50:ff:05:d9:a4:03:a0:1d:07:cb:e1:d9:3d:
8c:97:f5:d5:9f:db:c5:4e:e7:97:84:1e:6a:0e:bd:27:7a:5c:
27:44:68:bb:20:7f:67:85:88:3e:77:34:d9:b1:3b:3b:44:73:
ac:1c:fc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org