Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/KJUQQj6pIloFR82CNdHTOWLPO6g.roa
File: KJUQQj6pIloFR82CNdHTOWLPO6g.roa (raw, json)
Hash identifier: Hzu+V1AIWC923ncctDJXjDxO+tk9PCXHLv/w97MKjkU=
Subject key identifier: 28:95:10:42:3E:A9:22:5A:05:47:CD:82:35:D1:D3:39:62:CF:3B:A8
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018F39151F0A683132685DD165C1584A5FE4
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/KJUQQj6pIloFR82CNdHTOWLPO6g.roa
Signing time: Thu 02 May 2024 11:33:56 +0000
ROA not before: Thu 02 May 2024 11:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 92.53.160.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 09:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:39:15:1f:0a:68:31:32:68:5d:d1:65:c1:58:4a:5f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: May 2 11:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=289510423ea9225a0547cd8235d1d33962cf3ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:aa:84:94:8a:52:9a:94:25:a2:81:6d:eb:
eb:2a:d8:5f:f3:f5:0c:28:4b:0b:91:6d:a1:25:8a:
37:30:41:56:47:5f:72:8c:03:0c:0d:af:a6:a3:ad:
25:f2:f2:49:78:95:7a:bd:97:2f:1a:24:5e:ce:71:
fa:cc:89:e4:b5:9a:ab:4c:db:88:9d:43:59:c8:ac:
0a:46:11:32:f7:ee:f5:8b:a0:1b:6c:d2:91:15:15:
69:1e:d6:13:bc:50:e4:c2:0d:bc:aa:a9:00:0f:fe:
00:44:58:71:a2:9a:15:b9:0a:99:f4:28:4c:e4:17:
f9:a5:25:2e:70:cf:00:13:0d:49:b1:67:f6:ab:0b:
4c:73:74:1c:fe:08:97:df:b5:14:92:2e:19:ee:12:
b8:d7:9c:ce:1e:b5:cb:ae:2f:ea:cc:4d:a4:d0:1f:
12:d5:cf:fd:d6:72:06:47:d8:2f:9b:76:84:2c:3b:
08:f4:0b:ad:c1:fa:84:79:9d:53:ba:de:d0:0e:41:
a7:ca:dc:21:d8:36:f3:ac:12:b0:55:80:0b:70:fb:
13:7c:9c:3d:52:7c:26:b9:13:9a:6b:77:1c:63:80:
26:77:77:fd:b3:db:27:f4:d3:e1:c8:9a:99:3a:69:
bf:da:60:e7:2a:05:e5:a6:85:47:75:77:a7:96:a4:
8d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:95:10:42:3E:A9:22:5A:05:47:CD:82:35:D1:D3:39:62:CF:3B:A8
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/KJUQQj6pIloFR82CNdHTOWLPO6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/20
Signature Algorithm: sha256WithRSAEncryption
62:f6:8d:ed:76:6a:54:4b:3b:de:e9:0d:7b:57:48:a7:7c:15:
7f:c9:b1:8b:a3:e2:5b:f4:c4:83:d3:b6:f7:cf:67:c8:b7:69:
45:03:86:33:9c:a6:47:b1:a8:6a:2e:ad:e4:54:f5:90:74:df:
e4:4d:a9:50:68:7c:f8:e5:f3:8c:48:76:ee:78:7f:7c:f2:cd:
75:9b:43:0e:fe:bd:97:53:d7:53:f8:be:ee:54:60:e3:ad:61:
20:48:d0:39:f8:73:1c:71:20:5b:e1:3a:18:d7:63:3d:91:b5:
e1:76:b1:b2:2f:53:64:5e:b3:54:97:e6:a4:00:1c:c9:e3:3e:
77:a7:ea:63:57:ac:87:8e:ad:45:29:8f:de:8e:61:80:06:e1:
c8:a2:71:98:3e:15:4e:26:09:34:f9:c4:f1:3a:71:29:de:18:
ca:92:32:3f:da:cb:69:ec:7f:92:0f:68:4a:11:9e:ca:6e:a7:
28:0c:e2:6b:ff:33:23:76:2a:1f:ce:cc:68:f3:3a:f6:06:6c:
08:53:e9:8e:54:f8:11:86:fb:05:01:40:0e:5a:35:3a:60:32:
fc:1d:d6:33:a7:72:23:ff:70:7a:28:ad:70:2d:ec:df:91:80:
48:56:2c:ce:49:75:24:35:80:6b:a2:17:47:b0:cc:0e:e4:70:
52:6e:b1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 14:07:53 2024 by rpki-client on console-ams.rpki-client.org