Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/I3j7y8K1dsl4GMESbBysdrePpxQ.roa
File: I3j7y8K1dsl4GMESbBysdrePpxQ.roa (raw, json)
Hash identifier: YwV6gcEB+MbHH5YvD97sxQ/gAsAjg2FrunFz6ExNRA4=
Subject key identifier: 23:78:FB:CB:C2:B5:76:C9:78:18:C1:12:6C:1C:AC:76:B7:8F:A7:14
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018C6CCFCB30565579297BEF3F7054A6008E
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/I3j7y8K1dsl4GMESbBysdrePpxQ.roa
Signing time: Fri 15 Dec 2023 09:30:06 +0000
ROA not before: Fri 15 Dec 2023 09:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 92.53.184.0/22 maxlen: 24
92.53.160.0/22 maxlen: 24
92.53.164.0/22 maxlen: 24
92.53.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 16:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:cf:cb:30:56:55:79:29:7b:ef:3f:70:54:a6:00:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Dec 15 09:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2378fbcbc2b576c97818c1126c1cac76b78fa714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:78:dd:17:1f:d4:b8:58:1d:50:4b:c9:c4:
e3:71:09:79:88:ac:2d:92:f1:a7:61:d5:b5:38:99:
a9:0a:82:da:9a:3c:00:ed:7c:ed:98:3f:b3:9c:98:
32:df:85:bf:65:d4:e1:34:35:96:92:86:5e:d7:59:
f3:ba:97:75:7a:04:11:a8:01:ba:3d:1a:dc:ea:b8:
ae:f5:93:2f:ad:88:f1:a4:0c:ad:c8:1a:35:54:37:
1a:65:7c:57:e5:3e:44:87:90:c0:cf:02:c9:2d:e6:
95:bc:30:a1:2f:59:bf:87:2e:5a:4b:11:25:aa:bf:
a8:a3:a3:2a:1f:be:a0:4e:c6:8f:f3:d7:4c:60:24:
cf:16:20:87:e4:20:58:61:df:c2:fc:16:3e:d4:79:
3b:96:2a:8e:04:ed:f3:5f:85:04:75:4b:ed:93:5d:
1d:57:c6:8d:3d:22:01:d8:55:28:6e:b4:9f:b0:82:
1f:67:37:4f:ce:77:f8:91:30:db:15:7c:6f:89:30:
7e:4c:3b:f0:c4:c6:5a:8e:0f:6e:a3:56:b9:39:af:
e7:4a:c3:9c:6d:ae:05:59:28:01:ad:57:3a:53:40:
15:c1:0e:55:f2:95:aa:ed:80:18:e3:f7:6a:22:16:
6e:9f:2c:66:2d:b1:74:8d:71:dc:ce:cc:a3:2f:4a:
b4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:78:FB:CB:C2:B5:76:C9:78:18:C1:12:6C:1C:AC:76:B7:8F:A7:14
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/I3j7y8K1dsl4GMESbBysdrePpxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/21
92.53.172.0/22
92.53.184.0/22
Signature Algorithm: sha256WithRSAEncryption
43:10:37:3a:20:67:55:3d:7d:69:44:0b:5a:d7:d0:9a:24:2d:
5d:e0:6e:61:00:07:67:68:c9:05:2c:6c:74:85:1f:86:6f:45:
3f:6e:8e:a5:37:dd:4d:e7:c2:26:91:65:d4:09:47:59:77:86:
e9:d1:94:c5:d4:53:e9:04:81:23:75:ee:73:37:90:67:3f:c2:
26:ec:b7:5f:4b:33:d0:7d:e0:36:4c:6b:17:53:a1:81:9d:0f:
95:4c:b9:62:68:56:52:2d:a0:98:66:94:e4:dd:30:db:f4:49:
fc:b8:e7:0a:77:5f:da:09:91:28:e7:f4:8f:84:0e:f2:e0:ff:
f6:67:6b:94:6f:b9:88:de:f9:ee:fa:78:ac:72:36:2e:da:33:
70:f9:9f:5b:78:af:3d:67:83:47:3d:aa:98:a1:42:ee:f8:4a:
7a:52:f5:0d:81:61:ac:c1:4e:f3:cf:25:73:3e:9d:b6:0b:bb:
f0:43:da:7e:c8:0e:89:2c:0e:0e:e4:5e:99:6d:56:e2:d8:fe:
a5:e1:59:0e:66:75:6c:fe:ba:a3:d1:98:b0:c8:fc:e6:1e:25:
bd:63:fa:35:d4:e5:3a:89:e3:88:9e:0d:1e:f8:6b:37:bd:5f:
b0:89:12:28:3c:5b:0d:b9:c6:e2:1b:51:24:4e:db:17:16:8c:
3e:35:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org