Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/5F8qYyXtJaFXXy4Luc9axnN6hFA.roa
File: 5F8qYyXtJaFXXy4Luc9axnN6hFA.roa (raw, json)
Hash identifier: LYKAbI3jBoishPVl6noRcOjLfL9UCJGCjxiWXne3kUE=
Subject key identifier: E4:5F:2A:63:25:ED:25:A1:57:5F:2E:0B:B9:CF:5A:C6:73:7A:84:50
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01856D4194E265F6B3F946BC7414B723E65E
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/5F8qYyXtJaFXXy4Luc9axnN6hFA.roa
Signing time: Sun 01 Jan 2023 12:14:52 +0000
ROA not before: Sun 01 Jan 2023 12:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 92.53.164.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 23:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:94:e2:65:f6:b3:f9:46:bc:74:14:b7:23:e6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 1 12:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e45f2a6325ed25a1575f2e0bb9cf5ac6737a8450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:96:2c:a6:84:0a:6c:32:bc:21:be:d7:cb:
71:02:ee:3d:23:cf:28:80:31:67:e3:98:cf:ef:27:
cd:86:e0:67:5e:9d:63:9e:75:8f:de:59:f8:22:76:
e3:fe:c5:c3:02:f9:af:2d:57:a1:b5:e3:d4:e3:d0:
2f:4c:fb:f9:5b:f1:47:71:53:ed:30:ae:e0:60:5d:
b0:a8:62:8c:78:7c:72:2b:55:4b:e9:69:0f:d1:52:
75:49:7b:7c:1c:58:8e:d7:cf:76:3c:ad:39:43:c8:
24:54:a8:fa:da:da:87:25:1f:78:ce:56:f4:ed:eb:
54:d2:6d:aa:58:da:4e:b7:a5:f8:36:03:2d:56:d8:
07:ba:19:f1:00:4a:dc:8f:8e:3a:db:5c:b1:1f:21:
6d:25:9d:c8:91:28:c9:86:55:43:9f:9e:a2:54:cd:
b4:ee:3b:b8:46:d9:49:8d:bd:28:34:c1:18:95:e4:
69:7e:bb:54:c5:6c:b3:61:b8:04:c0:6b:a4:88:ff:
3c:c1:ab:63:83:1f:f1:20:a8:0b:ca:e1:a4:c2:a7:
25:de:c5:c1:cf:59:f5:28:cd:5e:97:e6:68:3d:89:
d7:67:a2:5d:88:b2:9a:c9:bc:9c:da:6f:fe:dd:fc:
d2:08:ae:eb:69:d9:33:38:a5:fa:c4:5c:b5:39:7e:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:2A:63:25:ED:25:A1:57:5F:2E:0B:B9:CF:5A:C6:73:7A:84:50
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/5F8qYyXtJaFXXy4Luc9axnN6hFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.164.0/22
Signature Algorithm: sha256WithRSAEncryption
76:75:93:67:d5:27:5d:3f:c5:be:6e:cc:f5:54:f5:0a:90:ba:
1d:15:eb:eb:dc:5b:15:2c:f7:ea:7a:0e:62:f7:aa:f3:59:4d:
92:59:1c:52:92:48:ea:36:5f:7a:2d:79:29:da:7e:cd:a3:80:
f1:a9:59:6d:5c:de:2e:ec:8b:e2:10:87:eb:94:24:7e:98:84:
e5:df:32:0d:bb:ca:4d:57:2e:a1:44:5a:26:4a:56:f7:c8:cb:
b3:5b:16:4e:34:0e:a2:71:67:c9:3e:0e:5b:75:35:d9:93:2e:
84:cc:0e:ee:9e:91:c3:ec:03:30:26:3d:14:69:13:ae:81:c0:
fc:4a:d5:69:bc:0e:57:9c:cc:a7:15:17:b1:dc:22:9c:d8:aa:
e3:99:db:59:56:a9:63:b3:37:12:b8:c9:64:a2:a1:77:be:4d:
3b:93:73:02:69:93:13:ce:b7:a5:21:63:ec:15:8e:80:ac:27:
02:ec:ab:b9:f5:ee:8d:2e:9f:92:38:29:00:2f:cf:61:b3:fa:
c1:5d:d3:6c:38:e2:ac:e1:fc:87:b4:21:24:a6:79:84:54:26:
63:91:1b:88:40:2a:01:78:50:ca:e1:84:6a:12:ad:1b:e4:31:
33:2b:fc:c6:fe:ad:34:9c:1f:8d:c9:b1:fd:05:ac:a2:9e:ac:
9c:9c:f6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org