Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/ajcswaiEo4mzLf3oOJZkgqJA5eE.roa
File: ajcswaiEo4mzLf3oOJZkgqJA5eE.roa (raw, json)
Hash identifier: SFint2+IFlwkv2zDt4PHr8AaKcqRIR5zTtQGZbLuPw8=
Subject key identifier: 6A:37:2C:C1:A8:84:A3:89:B3:2D:FD:E8:38:96:64:82:A2:40:E5:E1
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018CC801DF03DD5763548C379A9348F31C0A
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/ajcswaiEo4mzLf3oOJZkgqJA5eE.roa
Signing time: Tue 02 Jan 2024 02:30:14 +0000
ROA not before: Tue 02 Jan 2024 02:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 92.53.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 15 Jan 2024 00:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:df:03:dd:57:63:54:8c:37:9a:93:48:f3:1c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 2 02:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a372cc1a884a389b32dfde838966482a240e5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:77:60:68:ef:a9:b2:6a:61:66:a7:a4:13:
1a:22:bf:eb:60:80:66:dd:8c:05:68:5e:d8:6c:ac:
b0:89:95:e9:ae:f5:e1:41:bd:35:78:3a:bf:32:0b:
f3:69:0a:d5:48:5e:fc:84:5e:4a:99:85:a5:a2:cf:
98:0c:2e:51:b4:6a:55:39:77:02:16:b1:51:f1:33:
67:d5:0e:70:ff:d1:ee:35:bc:7c:09:8d:75:08:c7:
af:7f:89:c3:b8:da:e7:18:93:99:a7:12:0f:ad:33:
5c:f3:14:4e:e7:18:88:4f:ad:8e:b5:50:62:4c:c7:
9e:15:be:9b:2d:41:2e:f9:af:38:13:48:83:c6:9e:
5c:3a:a0:df:a3:fe:df:07:8c:e7:3e:88:aa:71:99:
64:0f:b7:7a:7c:ab:9d:53:4f:9b:2c:24:c7:72:ae:
47:dd:5b:cf:b1:b0:49:16:bf:26:e9:0c:97:a9:14:
60:e6:4f:e1:6b:58:18:bf:7b:eb:7d:56:52:cd:f3:
9b:fa:f2:6c:db:f2:21:7e:1f:d5:74:f9:58:ab:9e:
f4:d2:a9:54:02:ab:b7:a1:8e:30:ca:5e:6b:50:b2:
81:1a:22:03:ef:2a:9b:15:11:a9:a8:e6:e0:ae:71:
27:c7:da:0d:55:4f:e0:a1:e1:b5:92:3e:fa:4e:58:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:37:2C:C1:A8:84:A3:89:B3:2D:FD:E8:38:96:64:82:A2:40:E5:E1
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/ajcswaiEo4mzLf3oOJZkgqJA5eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:8f:f5:bd:7c:3f:c0:cb:13:5b:3c:f4:b3:b0:93:ce:d9:3e:
4a:ac:45:3a:48:de:68:dd:7a:fb:aa:db:46:b7:00:54:53:a6:
39:78:f0:99:1a:1d:3c:5b:68:f5:d0:18:4d:c4:ff:a1:7f:13:
81:ce:8a:bb:6c:d2:17:18:f0:38:53:36:ad:0a:1e:0a:d7:17:
94:92:13:b3:85:90:39:8a:34:66:58:40:3e:25:88:04:a1:36:
9b:2b:22:7e:1a:45:37:79:f1:fe:0e:ee:6e:60:a4:da:ba:bb:
8b:ac:76:c9:53:a7:8b:be:c5:4d:9b:98:0f:c5:8b:a1:27:1d:
a0:08:ec:42:8a:89:ad:2a:6e:38:37:a1:44:96:ef:7b:d9:65:
23:1e:8b:27:21:4a:e2:15:25:8a:fb:ed:2e:51:85:57:56:0f:
57:2e:22:99:a2:73:7b:fa:97:cd:2b:d1:61:c3:67:8c:57:14:
7a:44:92:c7:ff:d7:2b:d6:ca:f3:41:33:38:25:80:ee:40:5c:
ef:ba:db:04:e5:93:3d:ea:29:ed:e2:50:01:57:58:9e:2d:64:
23:1a:b5:cd:3b:e3:62:2e:08:5c:a8:d9:e6:68:1b:33:61:4c:
82:2a:21:e6:33:df:75:5c:7a:cc:39:12:8d:55:3a:11:37:63:
07:dc:4c:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAd8D3VdjVIw3mpNI8xwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjQwMTAyMDIzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTM3MmNjMWE4ODRhMzg5YjMyZGZkZTgzODk2NjQ4MmEyNDBlNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWt3YGjvqbJqYWanpBMaIr/rYIBm
3YwFaF7YbKywiZXprvXhQb01eDq/MgvzaQrVSF78hF5KmYWlos+YDC5RtGpVOXcC
FrFR8TNn1Q5w/9HuNbx8CY11CMevf4nDuNrnGJOZpxIPrTNc8xRO5xiIT62OtVBi
TMeeFb6bLUEu+a84E0iDxp5cOqDfo/7fB4znPoiqcZlkD7d6fKudU0+bLCTHcq5H
3VvPsbBJFr8m6QyXqRRg5k/ha1gYv3vrfVZSzfOb+vJs2/Ihfh/VdPlYq5700qlU
Aqu3oY4wyl5rULKBGiID7yqbFRGpqObgrnEnx9oNVU/goeG1kj76TliUoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGo3LMGohKOJsy396DiWZIKiQOXhMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvYWpjc3dhaUVvNG16TGYzb09KWmtncUpBNWVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXDW8MA0G
CSqGSIb3DQEBCwUAA4IBAQAKj/W9fD/AyxNbPPSzsJPO2T5KrEU6SN5o3Xr7qttG
twBUU6Y5ePCZGh08W2j10BhNxP+hfxOBzoq7bNIXGPA4UzatCh4K1xeUkhOzhZA5
ijRmWEA+JYgEoTabKyJ+GkU3efH+Du5uYKTauruLrHbJU6eLvsVNm5gPxYuhJx2g
COxCiomtKm44N6FElu972WUjHosnIUriFSWK++0uUYVXVg9XLiKZonN7+pfNK9Fh
w2eMVxR6RJLH/9cr1srzQTM4JYDuQFzvutsE5ZM96int4lABV1ieLWQjGrXNO+Ni
LghcqNnmaBszYUyCKiHmM991XHrMORKNVToRN2MH3EyW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org