Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/r-F9iTee4KzdtZcaoT50o1cDakA.roa
File: r-F9iTee4KzdtZcaoT50o1cDakA.roa (raw, json)
Hash identifier: OfYDYRbS/R3ySqRwAv3HtJX0sg/9vIUkbDxbflLOPVM=
Subject key identifier: AF:E1:7D:89:37:9E:E0:AC:DD:B5:97:1A:A1:3E:74:A3:57:03:6A:40
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018B44987F220EA1A90A4EFD90CEEC4A6275
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/r-F9iTee4KzdtZcaoT50o1cDakA.roa
Signing time: Wed 18 Oct 2023 21:02:06 +0000
ROA not before: Wed 18 Oct 2023 21:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396356
IP address blocks: 185.92.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:98:7f:22:0e:a1:a9:0a:4e:fd:90:ce:ec:4a:62:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 18 21:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afe17d89379ee0acddb5971aa13e74a357036a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:9b:7b:be:c9:0c:c4:60:03:e5:94:ef:66:
19:5c:0d:2d:0d:05:f4:56:09:84:bf:b2:71:03:1a:
df:4c:67:cc:70:e5:59:0f:2d:36:a5:69:28:7a:92:
0c:81:57:ee:6c:ab:0e:84:67:1c:c8:93:02:30:8e:
e8:4b:c4:33:1a:6b:d9:42:7d:e0:58:98:78:9f:fb:
b4:18:7a:dd:58:a8:a3:96:3b:a3:b8:b5:1c:22:d1:
09:20:08:91:98:6b:8f:a8:77:94:76:5a:b6:53:e5:
5d:1e:66:c0:d4:4f:f8:c1:d0:4b:fa:cf:c5:db:8f:
2b:73:43:70:a2:44:d4:e9:ff:f1:60:38:54:6b:ce:
21:4d:78:8f:9a:2c:fb:7e:90:67:fd:3b:7d:5c:f9:
a7:87:79:55:b7:7a:0a:4f:87:34:89:26:d1:2f:19:
65:be:d8:d7:1e:b2:29:cb:3c:88:84:32:5e:62:af:
05:44:1f:40:de:42:49:0d:1a:1e:ca:d5:cd:d1:2a:
9c:e8:18:dd:f1:b1:56:b8:66:7f:be:95:9f:2c:a7:
63:d8:0e:cb:7a:79:b0:7c:49:33:5c:cd:77:90:2a:
bd:99:1a:9d:b3:3f:57:64:62:4a:c9:89:54:57:72:
76:26:cb:ee:67:8e:42:5e:5e:52:62:f9:02:40:1b:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E1:7D:89:37:9E:E0:AC:DD:B5:97:1A:A1:3E:74:A3:57:03:6A:40
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/r-F9iTee4KzdtZcaoT50o1cDakA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.47.0/24
Signature Algorithm: sha256WithRSAEncryption
09:97:cf:d5:8e:3e:e8:b3:5e:c8:a2:bd:07:38:b9:5e:cd:32:
d3:30:f6:23:72:af:e2:9f:7e:ca:e3:4d:be:d7:c6:15:f0:e4:
d8:98:42:28:52:d4:47:83:dd:1f:16:13:ea:13:35:b9:5d:4f:
e8:03:8b:9e:b7:bd:3e:69:40:56:28:66:8f:f2:e8:d3:7b:5a:
d9:8a:e5:5a:c1:47:1f:15:5d:dd:7e:db:6b:a5:0f:2c:f7:23:
50:78:0e:13:73:6b:c2:33:a6:62:56:11:76:2e:5f:35:9d:e2:
a4:45:b9:49:d0:5f:a8:df:17:7c:b9:6f:0a:92:19:94:05:51:
50:dd:4a:20:70:a8:bd:6a:b7:2e:de:ea:ab:b9:a0:cf:c9:f6:
98:9e:0c:8a:55:30:27:fb:6b:a4:c3:d9:53:2f:af:87:65:ef:
6d:ef:69:47:3a:fb:0c:ae:3d:c9:20:ae:5b:71:53:64:2f:12:
a7:8a:98:94:3a:c4:5f:d0:ea:a8:08:67:fc:c9:4b:cf:e9:aa:
8f:10:5f:da:01:31:f8:ae:fb:90:c9:3a:3d:05:07:ae:f4:83:
f4:a2:2d:61:cd:88:81:28:70:d3:ff:67:69:55:76:51:34:3d:
e2:ee:3b:84:b9:f2:34:4e:21:cf:96:a4:a3:60:8d:c6:8a:a1:
19:13:96:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 09:51:44 2023 by rpki-client on console-ams.rpki-client.org