Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/N2Wh2SJ3aW6CDjAJMGVDqJoUD-c.roa
File: N2Wh2SJ3aW6CDjAJMGVDqJoUD-c.roa (raw, json)
Hash identifier: FeM0Tbim7ebuy/5+R31+Bam1CTLgcEZKU17iUFJZR4Y=
Subject key identifier: 37:65:A1:D9:22:77:69:6E:82:0E:30:09:30:65:43:A8:9A:14:0F:E7
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0194221F5EA140F143A2E461CB5AE8E755A9
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/N2Wh2SJ3aW6CDjAJMGVDqJoUD-c.roa
Signing time: Wed 01 Jan 2025 13:47:48 +0000
ROA not before: Wed 01 Jan 2025 13:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 92.53.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 15 Jan 2025 11:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:5e:a1:40:f1:43:a2:e4:61:cb:5a:e8:e7:55:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 1 13:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3765a1d92277696e820e3009306543a89a140fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:4b:e7:e4:e0:67:3c:27:6b:d0:34:c7:c1:
49:c8:29:25:20:bd:05:c2:5e:00:a2:2f:e2:64:49:
61:81:48:21:7b:e6:9a:c0:ba:cb:b2:dc:d0:1b:d5:
19:f5:4d:de:d5:1a:c1:d7:47:ae:8d:57:ab:4c:f5:
69:05:d5:dd:4a:ea:37:69:d8:c5:c2:ef:86:31:b5:
5c:c1:83:64:9c:27:86:82:54:ff:4d:8f:d4:02:f1:
1a:a9:60:cd:6b:43:e5:40:03:5b:38:1f:42:2e:90:
78:93:5d:67:2f:91:b9:12:af:37:b7:b2:b5:c0:ed:
24:5f:54:cf:a8:9b:48:31:70:40:63:d8:a6:a3:16:
f7:bb:ea:61:d4:6e:a1:68:4d:d5:18:0c:b6:c6:fa:
aa:9a:89:55:40:2f:07:2b:bb:42:15:b7:33:91:de:
ae:67:29:cb:5c:3d:28:80:91:da:71:2a:4a:fa:52:
90:e1:23:72:9c:1f:c2:8c:24:9b:23:e1:f3:5f:82:
7c:de:21:ab:45:44:a8:f6:54:14:b1:0c:b9:0e:0b:
5f:e3:18:a4:7a:fa:84:4e:e0:80:ce:b4:fa:26:24:
67:3a:cc:3c:8d:9a:10:40:a4:f3:c7:04:4f:78:db:
93:97:90:b5:91:f2:d6:2f:14:69:23:53:9d:f5:c0:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:65:A1:D9:22:77:69:6E:82:0E:30:09:30:65:43:A8:9A:14:0F:E7
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/N2Wh2SJ3aW6CDjAJMGVDqJoUD-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:85:f5:89:ec:29:a4:f2:17:80:15:d3:49:cc:14:d8:7f:c2:
53:fe:62:93:1c:c8:55:50:f7:d6:71:8b:4c:c0:bb:4a:8c:12:
79:66:91:97:ca:30:72:87:d4:8c:1a:8a:50:d7:3e:ac:c0:16:
12:ea:56:46:94:3b:9f:e3:ec:b2:00:a8:d2:7e:0a:6c:08:62:
01:4f:8a:30:ff:2b:c3:a2:e3:ef:7a:8a:56:8d:45:1c:14:e8:
32:d5:61:60:71:5d:9a:35:56:74:8d:35:b9:89:04:26:58:7f:
0a:95:09:72:23:89:f9:09:0e:e5:14:5b:27:29:07:40:cf:47:
e6:59:e6:ab:68:f8:a5:bc:d6:c3:ac:81:82:ce:9c:f1:d1:06:
4d:17:42:17:17:e3:c5:45:13:8f:3a:f0:66:ed:f3:69:0b:23:
ab:f6:4f:7f:b1:74:54:17:5b:96:7e:3a:eb:4c:c9:02:4f:49:
4a:f3:8e:39:17:f0:f3:70:41:26:38:fa:ee:1f:3a:72:83:d0:
30:be:2a:d8:07:36:36:59:df:f0:35:b6:0f:f7:10:1b:74:ca:
c6:7f:7d:e1:31:5a:ba:f0:cb:21:fa:e1:3e:56:38:1f:66:8d:
fb:ce:7b:bc:67:08:9d:ad:33:f5:6d:9d:73:8e:3b:a1:c9:4c:
b0:8b:c1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:13 2025 by rpki-client