Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/xfTbJmVtWyzDN4a_25DSQbgS_kY.roa
File: xfTbJmVtWyzDN4a_25DSQbgS_kY.roa (raw, json)
Hash identifier: ZOhAgA4EmlVUwL7Lgy7LhddLsQnv2J9ke+7P6uwqpIw=
Subject key identifier: C5:F4:DB:26:65:6D:5B:2C:C3:37:86:BF:DB:90:D2:41:B8:12:FE:46
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CCDB6CC9533900E8C9AE478BBA1C0C87A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/xfTbJmVtWyzDN4a_25DSQbgS_kY.roa
Signing time: Wed 03 Jan 2024 05:05:58 +0000
ROA not before: Wed 03 Jan 2024 05:05:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 185.92.45.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 06:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cd:b6:cc:95:33:90:0e:8c:9a:e4:78:bb:a1:c0:c8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 3 05:05:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5f4db26656d5b2cc33786bfdb90d241b812fe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:28:b1:0d:09:c6:5a:37:a2:2b:51:b2:64:54:
4f:3e:82:96:9f:45:8c:4e:a3:ae:f6:53:ce:de:10:
1f:88:ae:2a:f3:d7:bc:25:f9:61:6b:7f:ba:92:57:
e7:fc:9e:32:c0:76:53:40:2b:5d:ac:ae:91:ba:cc:
d2:ed:74:d3:d0:fd:22:c5:88:9a:99:16:9c:7e:8f:
90:e8:0b:f8:5a:30:a2:c0:64:aa:7a:6f:d6:10:08:
30:2a:f1:83:78:3b:a3:a2:bd:57:2d:e9:bb:ef:78:
d5:50:e9:c8:da:7b:fc:99:62:87:da:a8:7c:53:9e:
39:0b:7e:54:77:3f:f6:ca:e5:8e:40:64:33:fc:fd:
f1:75:e6:c7:9e:de:1b:49:c9:22:b6:60:93:70:1a:
10:b1:70:6e:24:a4:1c:f3:b8:99:d5:30:fb:2f:8e:
44:f1:77:a9:32:4c:f8:c6:5b:29:8c:76:52:d1:70:
63:b6:99:8d:60:76:3a:f2:3a:d4:8b:cd:ed:72:5e:
60:40:2a:a4:15:82:1b:2c:a1:77:70:e7:f0:12:c1:
78:1b:dc:f2:05:8a:09:cf:18:3e:17:40:01:ca:21:
e3:f1:e8:87:2d:b8:6c:ac:b2:36:3a:2e:f5:79:53:
c0:3f:a7:e1:e0:de:54:2f:41:e5:5d:e4:4f:1e:5c:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F4:DB:26:65:6D:5B:2C:C3:37:86:BF:DB:90:D2:41:B8:12:FE:46
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/xfTbJmVtWyzDN4a_25DSQbgS_kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.45.0-185.92.46.255
Signature Algorithm: sha256WithRSAEncryption
85:81:5d:79:fa:0a:03:fb:5b:06:c9:10:9a:1c:fb:17:d2:56:
b1:e5:e4:ed:bc:74:f0:d1:74:89:3c:d0:50:fc:9b:55:ee:00:
b0:0a:d2:f4:12:87:f2:20:66:aa:ab:31:c2:7f:00:4e:c4:3d:
0d:b8:a0:27:ff:6e:22:7f:04:46:fd:b5:0b:63:5d:60:10:55:
56:63:e4:48:77:ef:42:56:80:d3:5e:18:b3:24:10:5c:63:91:
12:e8:98:d2:28:e9:f6:6d:ed:2e:53:34:4f:07:2f:be:25:c5:
7e:b9:bc:bf:19:7e:aa:f9:66:3c:28:b4:88:79:39:3e:d8:ef:
e8:ca:5b:11:66:5c:d9:26:4f:56:00:e1:3a:3d:51:51:2a:2b:
61:04:a2:03:f2:b5:48:85:ac:b4:5a:0a:5f:49:91:6a:54:c0:
db:31:db:89:60:30:6c:bc:dd:d0:b8:7b:72:e8:6a:4e:92:94:
23:60:90:ef:78:b0:08:6f:5f:62:ff:55:d7:ae:68:e0:a6:c3:
87:0f:8c:20:2b:f2:98:e7:1a:bd:6e:a4:9d:c2:5d:e7:00:e7:
68:0c:3b:4d:00:ef:49:44:98:16:c6:5e:c0:bf:9d:e1:79:57:
72:2c:a3:f3:5b:e8:d2:12:c0:c7:f1:da:8c:90:b1:ea:3e:dc:
88:9d:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 11:24:34 2024 by rpki-client on console-ams.rpki-client.org