Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/RNrWm4Wmx381zuKekdlB0mPBZlY.roa
File: RNrWm4Wmx381zuKekdlB0mPBZlY.roa (raw, json)
Hash identifier: 0eqCHjCfVgIJG1xq5MpHZ9ZEnEdLLimxeR4MQ0MUi2Q=
Subject key identifier: 44:DA:D6:9B:85:A6:C7:7F:35:CE:E2:9E:91:D9:41:D2:63:C1:66:56
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018C82F2E7FBC9C24AB2E977F93439CDAA1D
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/RNrWm4Wmx381zuKekdlB0mPBZlY.roa
Signing time: Tue 19 Dec 2023 16:40:06 +0000
ROA not before: Tue 19 Dec 2023 16:40:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 92.53.180.0/22 maxlen: 22
92.53.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:f2:e7:fb:c9:c2:4a:b2:e9:77:f9:34:39:cd:aa:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Dec 19 16:40:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44dad69b85a6c77f35cee29e91d941d263c16656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2f:0d:cf:37:70:cb:1a:e8:53:11:70:18:f4:
fb:4a:db:9e:75:98:66:67:6a:c9:3d:5d:58:37:4a:
98:f5:34:4b:b6:82:9e:40:e2:e4:28:05:e3:65:84:
56:4c:c8:96:c1:ff:44:f1:32:0f:ab:28:68:3e:6f:
ea:87:e9:20:6b:97:55:aa:3e:df:0c:08:e3:ad:8b:
0c:65:f2:cb:cf:62:1e:04:b8:29:ae:fd:68:53:c5:
b0:40:93:16:12:2d:88:a6:4a:d6:9c:c4:87:e1:45:
94:ec:63:11:39:41:67:c1:02:c2:23:cf:d0:d3:c3:
e8:8f:b4:ff:f9:e5:1c:a2:40:24:4f:34:9a:07:e6:
b8:7c:85:3e:0a:9f:76:60:ab:dc:90:58:0d:1f:18:
1e:1f:61:51:88:6a:07:c2:3c:ce:d1:15:57:49:9c:
dd:8e:1d:11:6a:9e:43:89:cf:69:b1:21:a5:00:18:
3d:ab:62:52:f7:d2:aa:7c:38:0f:35:6d:dd:b8:38:
ed:60:b4:b2:b0:65:cc:5a:1e:dc:ac:3f:f7:3e:df:
ab:45:87:c3:39:d4:64:67:ee:dc:8b:0d:61:f0:d9:
fb:9b:a4:fc:80:80:93:de:d2:fd:23:10:86:3f:75:
eb:aa:ed:1d:2c:44:37:9e:8c:71:f5:c1:9d:d4:38:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:D6:9B:85:A6:C7:7F:35:CE:E2:9E:91:D9:41:D2:63:C1:66:56
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/RNrWm4Wmx381zuKekdlB0mPBZlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.180.0-92.53.187.255
Signature Algorithm: sha256WithRSAEncryption
1a:81:d4:9f:e8:99:57:84:a7:ba:52:46:4d:0d:ba:8d:e8:20:
e5:e8:5a:76:f9:ca:a9:b2:ae:55:57:a3:1a:73:f5:77:67:4a:
35:36:ff:53:1d:da:37:1d:2d:25:33:a9:bd:0b:45:65:b4:5f:
4c:3c:a2:98:84:63:c1:66:0a:8a:ef:f3:5e:ed:d0:3d:a1:18:
70:35:92:40:ec:89:1d:ca:f9:66:97:13:dc:4c:05:08:fc:0e:
8d:e4:9b:05:e2:b5:0b:2d:5a:38:3b:7f:cb:46:44:bc:a0:1a:
39:5c:d5:74:61:8b:0a:28:48:cb:83:a7:e8:d2:f3:ab:f4:35:
d2:e6:73:92:66:17:39:4a:7d:aa:b1:5f:6a:d4:db:04:dd:ed:
d0:f9:69:4f:f1:2a:87:a7:ac:7f:42:0a:63:6c:ea:c2:97:6b:
9d:aa:02:d4:f9:ef:06:9e:57:88:d4:b2:29:6d:dd:ef:49:21:
2f:64:12:2d:ec:9c:48:a4:f5:54:6c:ea:c8:a6:c7:c0:da:fd:
cf:73:24:11:fd:75:eb:78:00:59:f8:24:9e:ba:4c:60:c5:02:
00:57:df:a9:68:78:34:85:62:be:14:6b:96:12:31:00:97:9e:
d5:37:34:2f:71:97:93:9e:19:c6:f4:0e:cd:1a:9a:96:c1:b1:
e3:35:3f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org