Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/b9cgfT6RDUsx0a8t070RIJYP-AY.roa
File: b9cgfT6RDUsx0a8t070RIJYP-AY.roa (raw, json)
Hash identifier: iR3LKUgtSbZXpUnS98nvt3lBxzc2yGIdyE7DqxpKEVo=
Subject key identifier: 6F:D7:20:7D:3E:91:0D:4B:31:D1:AF:2D:D3:BD:11:20:96:0F:F8:06
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01864F2947A9C32EDA2B6057C8709C1FB864
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/b9cgfT6RDUsx0a8t070RIJYP-AY.roa
Signing time: Tue 14 Feb 2023 09:02:30 +0000
ROA not before: Tue 14 Feb 2023 09:02:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 92.53.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Mar 2023 16:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:29:47:a9:c3:2e:da:2b:60:57:c8:70:9c:1f:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Feb 14 09:02:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fd7207d3e910d4b31d1af2dd3bd1120960ff806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:88:c8:05:64:6b:7e:8a:b2:53:47:fe:64:
3e:f8:39:04:b2:93:d9:df:36:bf:b0:4d:4b:b1:9e:
19:32:b5:e7:d3:4e:3e:a8:d2:56:3b:28:d4:3d:9e:
5e:76:99:c8:88:5d:1f:dd:39:ca:19:cb:78:f9:40:
d3:13:55:1e:a0:44:51:41:0e:a9:63:32:63:01:6a:
bb:0e:26:72:fc:54:f5:48:fd:d5:0a:06:32:9e:16:
33:02:79:79:d4:00:c4:8a:5a:54:c4:98:25:a6:7f:
38:85:e6:0b:78:f4:3d:9b:06:1b:9c:f9:2f:fa:b7:
14:cf:f6:b3:21:99:34:e6:72:dc:da:e5:4e:42:77:
18:b4:51:37:73:f9:1b:e1:b4:fe:1e:d3:85:06:28:
e7:da:c3:e2:20:43:22:90:50:8f:41:dc:8e:b5:e0:
57:65:20:07:6b:53:c2:a0:bc:b3:53:3a:c1:15:9f:
b6:d2:90:e8:dd:2b:71:31:07:91:b0:bc:e9:1e:4c:
f0:bf:71:df:d2:e9:5b:ad:72:d8:d5:26:0a:47:0c:
15:41:95:65:c3:16:3b:11:52:38:68:b5:ff:30:d8:
13:bc:96:4d:f2:45:7f:bb:07:a6:35:3b:72:14:f9:
aa:8e:5a:3a:13:d3:e3:3c:5a:34:54:b4:d8:56:a0:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D7:20:7D:3E:91:0D:4B:31:D1:AF:2D:D3:BD:11:20:96:0F:F8:06
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/b9cgfT6RDUsx0a8t070RIJYP-AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.180.0/22
Signature Algorithm: sha256WithRSAEncryption
91:68:4d:73:d4:a6:1a:a8:4c:fb:1a:4b:82:66:7c:65:6c:39:
a8:a0:33:d8:92:7b:1c:f1:41:c3:7d:f1:dd:b5:dc:6a:3b:59:
69:fb:ac:09:58:40:e8:83:bd:12:0c:de:c1:6a:21:2a:8d:bd:
81:54:fd:73:fa:3a:23:1c:31:ce:f3:b5:70:c2:48:d4:d9:11:
f9:f3:90:82:83:9f:ef:b5:3a:ab:55:66:29:21:6a:2b:68:7f:
e2:9e:ae:a1:b3:25:61:1c:c9:6c:11:bf:e5:d7:92:9c:e3:f8:
cf:10:a1:84:fe:ab:7b:bf:34:83:19:36:16:60:16:2d:12:b1:
06:64:85:d4:e8:52:81:95:c9:94:06:bf:7f:31:ee:5a:5d:76:
53:b9:ef:d6:f2:78:c9:bb:99:bb:de:12:42:ce:5d:79:54:09:
d9:f8:e1:a1:54:07:19:ed:63:da:a2:7e:cc:43:84:42:15:8e:
83:b7:62:8c:76:07:db:c8:32:69:08:d1:90:70:ec:d7:64:c2:
b2:c7:67:8b:34:58:e4:50:d3:19:87:57:18:77:b5:82:dc:38:
89:68:c7:c0:80:8b:c3:8c:2e:97:0b:d1:db:c8:91:71:a2:ca:
46:95:07:99:34:31:c8:3f:8c:e2:7c:f8:a8:52:9f:5a:7d:16:
18:0a:b9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org