Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/j1rsOjiAHOOSebeKNPdyWn9KXJM.roa
File: j1rsOjiAHOOSebeKNPdyWn9KXJM.roa (raw, json)
Hash identifier: 7Ir+VCl2yb9U8mwOFkKCdf+WYZ20reUPy4C+X2+uKEU=
Subject key identifier: 8F:5A:EC:3A:38:80:1C:E3:92:79:B7:8A:34:F7:72:5A:7F:4A:5C:93
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018A27F98A34C9022C2E2FCD08A60F33682B
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/j1rsOjiAHOOSebeKNPdyWn9KXJM.roa
Signing time: Thu 24 Aug 2023 14:36:19 +0000
ROA not before: Thu 24 Aug 2023 14:36:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 185.92.47.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:f9:8a:34:c9:02:2c:2e:2f:cd:08:a6:0f:33:68:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 24 14:36:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f5aec3a38801ce39279b78a34f7725a7f4a5c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:4c:fa:a2:08:f8:1c:b7:58:38:a1:1a:af:
9d:1c:00:b8:36:87:08:c1:76:ea:63:0d:a8:bc:1f:
33:07:25:35:2a:f3:6b:12:99:a4:1f:a6:59:8b:6e:
d3:33:15:e7:d9:15:e4:ad:47:74:07:b9:75:07:a3:
e5:01:39:db:4a:ce:16:16:78:e4:d5:6a:51:44:d8:
1f:5f:c4:69:fb:a1:cc:2a:3d:1c:f1:f6:d9:e0:7c:
d9:ca:29:3a:b0:13:a0:cf:7f:42:cc:f1:87:f5:24:
d6:c4:4d:8b:ac:c5:7d:89:86:fe:fd:a5:2d:99:65:
6c:30:fe:ba:49:9f:4e:c9:cb:77:0e:4a:02:71:66:
ed:43:0d:8a:7b:c7:7a:c1:0e:d4:55:e9:db:2c:f9:
2d:81:9f:19:d3:ec:bd:fc:1e:ae:d8:28:3a:5f:ad:
cb:26:6d:83:d3:d4:00:c5:c9:86:df:64:68:8b:4b:
97:9d:f8:9b:a8:a5:13:e4:98:e7:56:60:1d:d0:42:
07:21:07:a6:40:b4:64:f5:5a:85:a9:24:9d:48:68:
84:86:ac:e2:57:a7:c4:16:19:f3:1c:c7:a9:a4:b1:
48:e3:10:28:91:8b:be:e8:c9:5c:f7:b6:aa:8a:5f:
c2:2c:d8:21:e7:b7:dc:b0:5a:8b:ba:f4:42:d3:2f:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5A:EC:3A:38:80:1C:E3:92:79:B7:8A:34:F7:72:5A:7F:4A:5C:93
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/j1rsOjiAHOOSebeKNPdyWn9KXJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.119.0/24
46.37.127.0/24
185.92.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:56:4e:31:74:c7:ab:b5:d8:a9:b8:94:57:a4:8b:10:0d:8f:
13:17:0e:14:6d:f9:ab:cd:32:cf:d8:10:1c:a6:48:9d:78:57:
f6:a2:3e:96:de:fb:ed:9d:27:59:cc:ae:41:9d:38:f1:c7:03:
83:ba:f1:42:7b:4b:70:e8:24:2c:7a:cb:b1:22:11:e7:a6:64:
e1:f3:00:b0:96:eb:08:08:56:a3:04:52:e1:8b:48:d8:dc:5b:
9f:4a:6f:57:60:77:1d:9e:29:a4:8f:b7:f6:76:a6:09:25:97:
ba:e7:36:52:5b:dd:59:cb:53:78:5e:29:d1:5e:1d:09:0e:ad:
2c:36:15:ad:cc:4f:2d:f7:a6:e9:40:f5:72:f9:f1:37:00:a0:
97:2f:59:2b:6f:f4:b6:d2:b0:4c:fe:b3:01:96:fd:8b:f6:8b:
81:1b:47:9f:b8:43:35:cc:d2:b0:54:5b:9e:9e:79:5b:42:65:
b8:71:e8:c0:c2:90:81:88:bd:10:b3:43:13:31:69:46:5d:db:
37:e3:d0:5d:f3:ce:ac:91:54:23:6d:79:d0:a4:a5:c3:42:d7:
e7:21:2b:c6:e9:af:f6:66:b3:88:82:4e:ff:09:5a:f5:ce:de:
32:b1:a5:a1:86:5d:67:21:46:4f:75:0a:ed:1e:5a:77:3a:2c:
94:d5:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 09:24:33 2023 by rpki-client on console-ams.rpki-client.org