Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/niCsqObFX09MXkeXiBnfJz-abNg.roa
File: niCsqObFX09MXkeXiBnfJz-abNg.roa (raw, json)
Hash identifier: AzfsQ/AnnkPnHmn6aGdjJ2mj8tlsRMo4nXkxBoRRFdM=
Subject key identifier: 9E:20:AC:A8:E6:C5:5F:4F:4C:5E:47:97:88:19:DF:27:3F:9A:6C:D8
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0AD9A1F9F4A554554ADA93882D43DD
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/niCsqObFX09MXkeXiBnfJz-abNg.roa
Signing time: Sun 01 Jan 2023 11:15:05 +0000
ROA not before: Sun 01 Jan 2023 11:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.92.44.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 08:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d9:a1:f9:f4:a5:54:55:4a:da:93:88:2d:43:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e20aca8e6c55f4f4c5e47978819df273f9a6cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:48:4e:cb:1a:70:24:5f:47:81:e2:08:bd:e2:
bb:58:3d:44:46:17:1a:db:ee:2d:30:20:dd:1a:5f:
99:fd:58:e5:30:81:1a:47:1b:99:e6:f3:22:0c:ff:
92:56:cd:bc:41:18:29:69:4a:5a:d8:ad:1e:db:fc:
20:71:e1:eb:f0:9f:63:7c:b5:ce:eb:95:47:4c:60:
89:cb:8d:cb:07:6d:9a:e9:85:fc:6b:a6:b2:ee:c7:
69:87:6e:23:72:8f:a1:f7:40:2d:ff:ba:13:52:aa:
fb:8f:c0:de:9d:22:3a:7c:c5:91:b2:40:28:03:a8:
0e:8d:6a:30:f3:6a:55:55:69:bc:7a:61:b7:bf:ac:
83:ad:34:38:a7:ae:7a:01:d4:7d:b0:59:69:26:cf:
d5:e3:19:08:df:52:4b:7a:70:2f:75:ee:b5:79:65:
d5:a0:2e:9a:19:36:ce:37:b9:5d:1c:ff:4b:12:70:
7b:42:a4:1f:6d:5a:5f:18:13:25:14:76:27:de:09:
d4:b2:74:8a:b9:77:61:d7:69:2c:cd:10:3b:15:9a:
2f:c2:e5:59:b7:40:cf:c4:6d:74:ac:13:63:16:bd:
cd:c7:8d:7f:1c:84:b6:d9:a1:56:b3:ef:c5:4c:cc:
0d:3d:db:0c:47:f6:0c:21:6c:57:38:b6:90:ea:68:
27:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:20:AC:A8:E6:C5:5F:4F:4C:5E:47:97:88:19:DF:27:3F:9A:6C:D8
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/niCsqObFX09MXkeXiBnfJz-abNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.119.0/24
46.37.122.0/24
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d9:61:36:d3:ba:50:01:16:8f:12:08:60:c3:69:fd:93:8a:
b5:d9:8c:13:3e:b9:96:b5:18:47:5d:4e:b7:b6:11:d3:89:b5:
d8:89:16:c6:6a:52:be:65:f3:08:77:ad:c8:b2:be:1a:40:e6:
79:3f:7b:be:c1:72:03:1f:8c:a6:97:62:74:db:08:24:54:92:
b5:24:a3:af:28:5d:e2:af:a6:77:1a:7a:a2:f5:49:a3:65:64:
eb:ef:fc:df:00:32:43:21:38:93:ac:e5:c5:84:51:bb:30:3b:
f9:fc:d4:8c:cd:e4:20:32:a3:d7:cc:b1:cf:f6:89:09:18:f7:
18:a9:da:cf:81:43:24:7b:31:9e:6c:36:23:88:35:7a:93:f1:
49:65:b3:9e:57:1d:6e:e8:9d:e0:c3:d3:5f:71:81:e6:c1:ab:
63:aa:f3:2f:40:8a:ec:e1:b9:9b:c4:6e:f0:ff:91:81:a7:d6:
9c:48:3a:75:64:de:b6:4b:14:07:2e:ae:25:70:25:54:7b:9c:
11:5e:cf:96:64:e9:c9:b1:6a:cc:04:8b:5d:01:64:49:3a:04:
d7:18:be:6a:55:ba:ff:5c:ed:61:0f:75:1f:75:64:8a:46:62:
b3:3f:06:27:91:f4:3d:3a:00:55:3c:ec:92:cd:a7:f1:8f:32:
06:d2:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org