Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/eFvViJr3EwK1r4d5WJY3DMKE0PQ.roa
File: eFvViJr3EwK1r4d5WJY3DMKE0PQ.roa (raw, json)
Hash identifier: a7DU1qTgfCCKdrr2BUE5mjTqwVcPAjGtP4U4krii3qA=
Subject key identifier: 78:5B:D5:88:9A:F7:13:02:B5:AF:87:79:58:96:37:0C:C2:84:D0:F4
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018C1D8F063270E8DC635E79ECBE5A4D0D46
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/eFvViJr3EwK1r4d5WJY3DMKE0PQ.roa
Signing time: Thu 30 Nov 2023 00:09:21 +0000
ROA not before: Thu 30 Nov 2023 00:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 92.53.184.0/22 maxlen: 24
92.53.188.0/22 maxlen: 24
92.53.160.0/22 maxlen: 24
92.53.164.0/22 maxlen: 24
92.53.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 09:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1d:8f:06:32:70:e8:dc:63:5e:79:ec:be:5a:4d:0d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Nov 30 00:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=785bd5889af71302b5af87795896370cc284d0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:eb:73:f6:bd:59:c8:fd:e3:1c:62:ca:2b:
4a:03:2f:c2:77:3c:d1:d3:f0:cb:1a:2a:a3:9f:ad:
1b:15:e3:93:b6:ad:6d:6f:91:90:cd:ad:a1:36:33:
03:d9:e2:24:82:2b:13:b2:3e:cd:8a:7e:50:67:42:
ff:58:ec:0a:e8:3d:75:87:9f:b3:ac:e4:29:8c:53:
5b:22:a4:8b:5f:dc:b1:12:8a:d4:1b:2a:9d:ba:0f:
7e:b2:36:fe:8a:b5:e0:7b:ce:4f:d9:83:83:e8:f2:
d8:2c:5c:78:e1:17:72:e2:b4:19:47:7e:45:6d:96:
94:31:e8:b5:96:91:ca:e1:87:f1:3d:52:5a:8b:26:
23:c4:f6:35:20:01:14:cd:28:67:04:51:a6:3d:6d:
33:04:ee:ba:87:c7:4a:f5:39:2f:f5:70:45:d9:41:
7f:15:94:11:bc:5b:fc:36:e1:00:41:e2:d9:2c:e1:
4d:c4:e8:42:a5:6c:e1:87:45:7a:7f:c2:e3:fb:ef:
83:c2:36:52:ce:78:75:0e:16:41:a8:9e:04:6f:35:
4c:18:ad:87:54:11:ad:7e:0d:6c:3f:0f:1c:00:25:
1a:62:26:a3:ab:5e:91:dc:fd:fc:31:36:2b:52:b0:
c9:c8:17:dc:49:3a:47:7d:26:72:c8:bc:7a:72:08:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:D5:88:9A:F7:13:02:B5:AF:87:79:58:96:37:0C:C2:84:D0:F4
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/eFvViJr3EwK1r4d5WJY3DMKE0PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/21
92.53.172.0/22
92.53.184.0/21
Signature Algorithm: sha256WithRSAEncryption
62:ed:a2:ee:b4:ad:d3:09:4d:09:c4:f3:15:e2:00:22:40:f5:
83:7c:aa:16:40:85:db:e3:1c:67:4a:17:aa:6a:b1:a3:5d:a8:
f4:ab:7b:8b:95:8e:c6:51:5c:76:21:05:3e:6d:c2:a8:29:65:
93:46:ed:a4:9b:68:a0:c0:6f:3f:df:ea:b6:3b:06:14:38:fb:
7e:10:37:9b:d0:2b:af:6e:db:ea:26:c0:f2:39:48:b7:d9:19:
3b:8e:b4:68:b3:04:6f:6e:42:56:1a:70:8c:11:c8:ae:7e:ae:
28:3b:3d:70:06:eb:4e:1c:7a:f5:2c:cf:8c:9a:3c:96:14:9e:
07:b9:6a:c3:21:b8:34:99:8e:d6:21:ed:31:e7:78:cc:27:18:
77:d2:fe:65:af:5f:a7:f2:ae:50:6a:1d:9d:7d:b7:a2:45:af:
57:48:19:74:08:11:b8:2c:25:2b:22:e7:5b:9a:93:86:2b:b5:
75:0f:57:87:e4:cc:53:5b:ea:aa:9d:7a:54:93:72:83:ba:1d:
a3:9f:a5:e0:93:f8:de:b2:3c:d1:09:5b:c8:dd:75:d4:84:47:
63:5c:84:32:86:75:fd:02:5e:0e:55:ff:99:fe:f6:a4:9f:36:
e1:e1:a5:35:5f:35:d0:5d:53:59:1a:dd:11:3d:f9:ff:41:23:
d8:a8:2e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org