Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/bDy2QSmpVLYUYTzXPm6bBfMup_Q.roa
File: bDy2QSmpVLYUYTzXPm6bBfMup_Q.roa (raw, json)
Hash identifier: 3McZfaqR0nhsz3DrqQxdzT1JOJHjJeABCxKYBzf2Auc=
Subject key identifier: 6C:3C:B6:41:29:A9:54:B6:14:61:3C:D7:3E:6E:9B:05:F3:2E:A7:F4
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01951DEB1F559E4E4DF393231259198FECD0
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/bDy2QSmpVLYUYTzXPm6bBfMup_Q.roa
Signing time: Wed 19 Feb 2025 11:15:02 +0000
ROA not before: Wed 19 Feb 2025 11:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 92.53.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 19 Mar 2025 10:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:eb:1f:55:9e:4e:4d:f3:93:23:12:59:19:8f:ec:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Feb 19 11:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c3cb64129a954b614613cd73e6e9b05f32ea7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:20:68:72:04:39:dd:0a:fa:1c:20:42:1d:4b:
06:43:d6:fb:0b:dd:b1:9e:4f:fe:6e:9b:4f:8c:db:
59:04:4b:a9:f5:7e:d5:5f:60:2e:be:3a:23:0a:3c:
cc:4b:aa:1e:a2:1e:e4:d4:4c:2f:bc:52:b4:b1:68:
53:67:94:0b:e2:85:c4:bd:67:df:23:91:ee:e0:17:
c0:16:fd:56:ee:72:5c:39:20:56:bb:b5:cf:ce:35:
85:38:0a:48:09:87:6e:1c:37:38:7b:eb:5e:74:39:
47:9b:ef:ac:3d:28:b0:5a:b1:56:e2:6b:c8:17:65:
99:be:97:60:b4:0f:05:88:c3:d3:01:ec:3f:aa:ac:
32:f7:b4:e8:8e:ca:9b:8d:d9:98:f2:0c:a8:fc:44:
47:fe:b2:7e:10:28:3e:df:ad:4f:9e:3b:5f:1c:b7:
d1:ba:39:bf:bd:50:f5:10:bf:17:10:e2:9d:84:6a:
ba:54:32:88:4b:48:01:80:30:8e:96:d4:3b:6e:20:
14:88:4d:1b:d2:97:97:b8:50:9e:6a:43:95:9e:87:
60:14:ff:e0:36:c1:4c:aa:4d:60:83:63:da:4f:88:
61:a7:24:c1:cc:cd:8a:61:7f:49:1d:43:db:97:2b:
02:2e:a3:a7:51:99:51:7e:b2:2a:58:6f:cb:9f:54:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3C:B6:41:29:A9:54:B6:14:61:3C:D7:3E:6E:9B:05:F3:2E:A7:F4
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/bDy2QSmpVLYUYTzXPm6bBfMup_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.184.0/22
Signature Algorithm: sha256WithRSAEncryption
21:77:49:7a:a2:f8:3d:f5:39:b2:c0:e8:80:ea:c6:2a:81:00:
b4:46:3a:3f:a8:00:9d:88:e5:bb:c5:d2:1c:29:2e:d0:91:ee:
e9:6e:84:9f:82:3d:b3:2a:fa:34:73:95:2d:3f:61:b0:78:a3:
ed:9a:c3:9e:54:e1:b7:96:fb:32:38:5c:34:21:ee:bb:e2:85:
ef:38:98:b7:96:02:2a:64:cb:40:e5:c2:f7:34:e9:a8:cb:20:
06:25:26:2c:62:95:12:e4:c4:3b:99:e8:0c:ff:8f:7c:a0:89:
10:f9:be:18:ee:ec:8d:1c:07:52:74:52:83:d9:42:ef:78:7b:
dd:ec:a3:e4:3d:ac:33:e5:67:8a:a9:6f:c0:c0:0e:e3:38:8e:
6a:f5:07:96:ca:57:a8:4f:dc:46:6e:c1:ce:30:b5:ea:dc:14:
69:cd:64:2d:ab:83:9e:5b:5a:29:7e:21:93:7b:71:75:2c:16:
ae:69:d0:90:00:b5:f1:44:f0:69:69:c8:79:15:b7:64:fb:a1:
62:4f:79:32:fd:3b:c4:a1:e5:0d:7c:8c:01:b8:49:36:00:ae:
dc:13:69:a5:21:21:c4:95:11:29:ee:a8:96:81:59:bc:65:ff:
e4:79:bd:dc:63:21:25:b2:94:06:5a:c9:8e:7c:1e:98:f0:64:
54:65:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:41 2025 by rpki-client