Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/2V66BAmn2QxVItlnZSO87uVP8zg.roa
File: 2V66BAmn2QxVItlnZSO87uVP8zg.roa (raw, json)
Hash identifier: VYzbM4aVPiW1ww4+rjFrHKzRFPGtJBj2EvD/6RWy4h0=
Subject key identifier: D9:5E:BA:04:09:A7:D9:0C:55:22:D9:67:65:23:BC:EE:E5:4F:F3:38
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01878158549C48FAEFBC07E29F16DA838F20
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/2V66BAmn2QxVItlnZSO87uVP8zg.roa
Signing time: Fri 14 Apr 2023 19:57:42 +0000
ROA not before: Fri 14 Apr 2023 19:57:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 92.53.160.0/22 maxlen: 24
92.53.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 14:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:81:58:54:9c:48:fa:ef:bc:07:e2:9f:16:da:83:8f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Apr 14 19:57:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d95eba0409a7d90c5522d9676523bceee54ff338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1a:f6:67:3b:55:06:d2:b7:98:cb:89:19:ce:
b9:f2:e2:c2:07:75:18:a4:94:86:76:e3:c1:57:ef:
ec:07:75:a3:98:5a:61:b2:2e:97:78:91:8d:76:21:
95:f2:5f:48:35:fc:35:a4:6b:10:4c:f8:24:55:3b:
5d:cd:54:c8:98:83:91:a2:e4:ae:3b:c9:99:3f:3f:
0c:79:5a:7b:d7:d2:44:a1:59:f2:fc:c1:bf:1c:c7:
11:36:13:43:e9:b5:60:29:43:bb:e4:97:ea:69:2f:
01:06:cf:9b:58:fd:fe:f0:73:25:e1:b9:dc:ec:8a:
fb:45:ff:5f:12:59:4f:9e:cd:20:c9:df:d7:0d:7b:
ae:8e:88:36:18:7d:e3:b5:ae:eb:13:d9:76:a2:47:
2b:73:b1:3e:8a:fe:9f:f5:c5:93:10:a0:d0:b6:50:
aa:77:e7:1f:da:f7:bb:86:f6:b3:32:6d:70:f1:28:
a9:78:4b:79:a1:0e:66:de:a5:e3:5f:73:1b:b9:60:
8a:6c:8e:c9:a0:6a:12:6d:f2:91:84:af:69:e1:5f:
53:3e:13:7e:89:02:1c:16:02:38:66:ba:2b:20:99:
22:43:95:ac:a7:7f:21:a2:d4:a7:1c:c9:7f:46:cc:
63:53:89:f5:e7:a6:8a:1c:c6:10:21:48:ee:d6:12:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5E:BA:04:09:A7:D9:0C:55:22:D9:67:65:23:BC:EE:E5:4F:F3:38
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/2V66BAmn2QxVItlnZSO87uVP8zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/22
92.53.172.0/22
Signature Algorithm: sha256WithRSAEncryption
73:60:f6:15:6e:3f:bc:8a:3c:36:6c:13:cf:b7:66:b5:63:34:
44:35:ea:61:04:54:c3:92:c5:21:28:80:96:cb:08:78:61:0c:
23:31:1d:31:79:1a:64:fa:1e:bc:e2:d6:63:f4:d3:63:4e:51:
2c:e6:98:e1:18:39:b9:ae:ff:08:64:18:13:52:5e:d0:49:20:
ce:d2:38:ba:9f:1b:71:87:0d:59:93:e1:92:91:7b:43:a5:b6:
ba:a1:05:fd:c4:66:7a:82:08:39:6a:75:a7:ed:73:62:bf:57:
cf:d7:69:f7:79:06:63:49:3f:e7:a4:95:4f:f6:c5:cb:69:3c:
62:05:b1:8f:0d:58:fb:ba:2e:18:2e:cf:a9:60:55:41:1a:79:
af:b1:31:e6:99:29:c1:9c:90:a5:94:66:57:59:ac:7b:62:11:
44:3f:90:e9:13:bc:d6:0b:8b:46:d1:0d:d7:29:d2:70:7f:a7:
55:4c:34:38:b9:38:d8:74:1a:27:bf:cd:11:aa:06:fc:17:23:
24:10:69:00:c9:52:e0:42:06:1e:0f:b0:84:e8:e1:18:ca:8c:
18:2f:e6:78:65:e4:cf:ad:5b:ae:7f:d3:86:75:18:9f:61:b0:
99:7a:99:da:8d:cc:4a:bf:0a:59:e5:04:71:c2:c3:36:af:a3:
c4:58:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org