Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/9aEwh8578yy6Owfdbu8LblTj4Uc.roa
File: 9aEwh8578yy6Owfdbu8LblTj4Uc.roa (raw, json)
Hash identifier: Sgm/VvUIJYzDjsFc7+v+QOUqEQ0ZgXCmJ9bfrqgcWD4=
Subject key identifier: F5:A1:30:87:CE:7B:F3:2C:BA:3B:07:DD:6E:EF:0B:6E:54:E3:E1:47
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018F0BBD558088C73D1E26AA27660013CA18
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/9aEwh8578yy6Owfdbu8LblTj4Uc.roa
Signing time: Tue 23 Apr 2024 16:15:08 +0000
ROA not before: Tue 23 Apr 2024 16:15:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 92.53.160.0/20 maxlen: 24
92.53.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 11:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:bd:55:80:88:c7:3d:1e:26:aa:27:66:00:13:ca:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Apr 23 16:15:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5a13087ce7bf32cba3b07dd6eef0b6e54e3e147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:bd:b0:8f:85:86:42:f5:85:5c:66:3f:60:
b6:3b:b3:12:ab:32:3b:96:55:69:8c:7a:c7:f5:c8:
a8:10:58:eb:fe:69:6d:e6:74:12:24:59:c0:26:e8:
65:f2:14:d8:e5:91:c0:cf:95:c4:14:c7:02:9f:de:
ba:83:43:f6:13:a0:13:77:38:dd:4a:46:56:b1:4a:
94:0d:be:99:83:d0:4e:b5:41:96:1c:c9:30:ae:a3:
7e:23:00:30:e1:23:14:56:3e:b5:39:74:69:d1:90:
12:8e:49:ae:b2:63:48:8c:50:e9:28:69:88:af:17:
e2:25:8b:a8:3b:dd:d3:bd:18:53:5d:35:9a:b5:77:
d6:44:80:bc:2a:0c:d8:4b:e8:1f:c8:24:97:74:91:
13:25:0c:f8:16:07:ad:ae:c3:d6:0b:4e:0b:e1:63:
c1:05:d9:c8:b6:d9:e6:c7:31:9c:bc:f6:8f:80:51:
74:48:e7:47:c2:fa:c1:52:25:93:f8:9c:43:24:9d:
83:cd:73:1c:f8:70:1d:ca:83:30:b8:a8:e2:e1:c9:
91:11:6a:91:fb:d9:5f:c5:e5:d4:89:ac:3f:f7:51:
53:14:89:a6:b7:68:19:dd:51:bb:23:9d:07:0b:1a:
59:93:0c:bf:24:17:59:76:1d:e7:d2:6d:43:7c:3b:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A1:30:87:CE:7B:F3:2C:BA:3B:07:DD:6E:EF:0B:6E:54:E3:E1:47
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/9aEwh8578yy6Owfdbu8LblTj4Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/20
92.53.184.0/22
Signature Algorithm: sha256WithRSAEncryption
23:17:a4:3d:f2:88:ac:6e:75:26:57:9f:83:aa:54:51:49:15:
09:9b:db:a7:c3:c3:76:75:a4:67:57:4d:78:b3:01:f3:ed:fd:
2a:20:48:8f:56:6d:fd:7c:2b:02:62:d6:9d:bd:88:67:5b:c6:
a9:19:d6:ea:15:03:5b:c7:b3:6b:0e:6f:b3:9a:e3:66:95:68:
f2:42:42:b6:76:7a:18:9f:b3:06:d4:34:b0:c7:71:b2:50:2e:
58:74:c9:40:95:21:58:3d:90:2b:9b:9b:18:c9:ec:11:6e:38:
5c:22:13:fe:4e:71:b4:4f:a4:35:b1:98:8b:05:32:ae:89:33:
d6:4b:fd:85:92:8a:67:aa:49:bf:f2:d7:7a:9a:b2:7b:16:31:
4d:7d:c9:64:31:a9:90:80:af:32:c5:1e:4b:98:a0:a3:98:c0:
25:40:df:fb:b7:4e:5f:8a:81:c8:a9:36:a2:49:38:58:21:20:
44:53:ba:26:e5:7a:ba:78:26:16:f1:65:f9:d0:8c:ac:22:59:
1d:5b:05:ec:e7:83:4d:d4:b9:d5:e6:cd:01:19:6f:09:38:cf:
d9:2c:71:b9:37:fa:47:82:72:46:05:40:81:c8:21:b8:0f:ab:
e3:7c:b4:d8:80:b6:18:2f:3d:ee:63:e1:33:b0:d6:a0:81:f7:
27:04:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org