Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/RJeaGm71LG1dgADHSEiscO9myaw.roa
File: RJeaGm71LG1dgADHSEiscO9myaw.roa (raw, json)
Hash identifier: UDdO6YFAqvTkw26oPChKGNzEIzjJLYzxdZCygvhLM8w=
Subject key identifier: 44:97:9A:1A:6E:F5:2C:6D:5D:80:00:C7:48:48:AC:70:EF:66:C9:AC
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018D0A74C2E7928A3582E881B1415B16D0EE
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/RJeaGm71LG1dgADHSEiscO9myaw.roa
Signing time: Mon 15 Jan 2024 00:10:40 +0000
ROA not before: Mon 15 Jan 2024 00:10:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 92.53.180.0/22 maxlen: 24
92.53.184.0/22 maxlen: 24
92.53.188.0/22 maxlen: 24
92.53.160.0/22 maxlen: 24
92.53.164.0/22 maxlen: 24
92.53.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 11:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0a:74:c2:e7:92:8a:35:82:e8:81:b1:41:5b:16:d0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 15 00:10:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44979a1a6ef52c6d5d8000c74848ac70ef66c9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:54:a5:e3:6c:90:0c:69:23:1b:3a:67:99:
63:b0:d2:1b:49:24:fd:82:9a:42:bb:79:85:dc:ae:
a2:4d:9f:4b:a7:eb:58:c2:3b:65:37:d1:4c:7c:4d:
d9:3f:87:4c:e9:da:51:5b:91:66:17:52:15:6b:c4:
ef:da:48:2a:37:46:77:a9:1f:d6:57:bf:5d:8f:94:
07:f1:27:bc:fa:44:c5:47:b5:9c:6a:3c:d4:e0:ae:
cb:f7:85:29:01:4d:9d:c7:aa:0b:b6:9e:8d:98:f2:
aa:0b:33:1a:25:fd:b8:5b:84:2f:0f:21:7e:d0:35:
e0:09:e4:70:3f:d9:a7:4d:72:cc:4c:3f:1c:2e:3c:
15:fa:1c:1f:f5:8a:97:ae:1f:40:6a:c8:b2:82:72:
1c:a1:59:af:22:ac:7a:f5:47:d4:d6:f9:b5:de:28:
c9:61:f9:9f:c6:80:26:86:84:55:e8:b7:32:19:07:
0e:d3:8a:6e:fe:11:8b:ac:aa:09:86:59:ea:98:4b:
f2:90:d5:78:55:85:7d:be:81:58:b6:b6:8a:ee:0a:
92:76:93:60:77:49:c0:13:9d:ca:85:df:49:d2:a5:
78:23:f7:07:8e:3a:f9:8b:42:a8:4b:30:e1:0c:88:
6f:9e:74:9b:9e:56:2f:4b:1d:61:de:1f:a7:96:6a:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:97:9A:1A:6E:F5:2C:6D:5D:80:00:C7:48:48:AC:70:EF:66:C9:AC
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/RJeaGm71LG1dgADHSEiscO9myaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/21
92.53.172.0/22
92.53.180.0-92.53.191.255
Signature Algorithm: sha256WithRSAEncryption
61:cc:93:0a:c1:61:a1:a3:19:8f:53:ef:62:64:f1:55:9a:37:
37:f4:19:6c:fc:a3:ac:09:2b:0b:ea:6f:f7:fb:b8:d6:af:15:
b6:b2:0c:b9:39:38:06:7e:0b:46:5f:45:3c:2a:8e:d9:2a:0c:
8c:f8:db:92:fd:61:d2:54:80:17:e7:6b:52:78:a3:9d:74:8c:
61:fe:b0:89:6a:e7:d9:66:07:36:90:44:34:b3:83:31:e6:8d:
81:81:dc:fb:b0:8a:b8:8a:dc:d9:be:29:9e:ae:55:65:c0:19:
78:b8:08:49:29:26:3b:11:74:bb:b4:84:0b:4d:49:56:a3:53:
00:f9:72:b7:fe:5b:a0:9c:fc:e1:96:46:1e:97:64:20:a2:bc:
13:ae:b7:d7:fe:8a:5c:ab:c4:b9:09:d4:fa:4d:89:7d:8c:3e:
ff:05:e8:ff:f8:38:f3:a4:a6:b7:28:a3:94:b2:5b:cf:2e:bf:
68:5b:d7:e1:5c:27:90:33:01:9d:fb:a0:40:6a:c0:68:71:8c:
9f:3a:af:2e:4d:24:aa:0b:f5:86:c7:bd:f4:f2:b3:22:29:3e:
3f:c6:91:19:7f:39:c9:94:ca:b5:92:80:57:5d:69:62:39:58:
6a:e1:8d:1c:2f:be:c3:93:3e:cc:23:4e:14:18:7c:24:9f:63:
0b:e3:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org