Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/iJfj1wDBdua8qOUcoN2xK_EJ7nQ.roa
File: iJfj1wDBdua8qOUcoN2xK_EJ7nQ.roa (raw, json)
Hash identifier: 381GjmDWY11Zmaba+vgqlIHdaj57wCIOGGp4gDllPTw=
Subject key identifier: 88:97:E3:D7:00:C1:76:E6:BC:A8:E5:1C:A0:DD:B1:2B:F1:09:EE:74
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018A1C8EDF589287979492BB49036DDF71A9
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/iJfj1wDBdua8qOUcoN2xK_EJ7nQ.roa
Signing time: Tue 22 Aug 2023 09:23:59 +0000
ROA not before: Tue 22 Aug 2023 09:23:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 92.53.184.0/22 maxlen: 24
92.53.188.0/22 maxlen: 24
92.53.160.0/22 maxlen: 24
92.53.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 00:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:8e:df:58:92:87:97:94:92:bb:49:03:6d:df:71:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Aug 22 09:23:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8897e3d700c176e6bca8e51ca0ddb12bf109ee74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:7b:fd:0b:ee:00:52:4c:33:82:18:78:3b:
07:e5:0d:61:2e:d9:c4:66:c9:da:b5:b2:de:f0:c8:
22:04:0f:1f:30:28:c7:3c:96:41:9e:49:ef:db:0a:
68:64:9a:7f:0b:2c:cb:cc:27:9a:40:50:9b:6e:37:
c0:23:71:b2:63:ee:16:1e:2d:c4:04:19:1d:bd:9d:
be:a4:63:fe:c5:61:b6:f3:fc:46:46:5e:f3:37:5d:
a5:eb:54:4e:07:5e:7a:a7:b6:4f:eb:1e:8e:28:a1:
5b:c1:e5:e9:1a:fc:b9:9f:07:63:07:b2:72:ef:3a:
da:ba:e9:b2:07:89:e4:5a:7c:c6:94:ff:f7:be:c1:
71:20:92:5d:3d:85:78:d1:bd:ae:18:b2:1e:62:c3:
96:56:2e:e4:8c:8d:d5:2b:be:39:97:76:48:28:0a:
35:e8:6e:79:4c:0f:1a:43:2b:d2:14:4e:fe:1f:57:
09:a3:2a:2d:b8:ee:73:49:c7:fc:03:dd:a8:05:85:
8c:ae:5e:08:4a:e0:b6:9a:59:42:24:77:51:e3:8b:
0a:94:08:1b:aa:5e:0a:27:11:5b:2d:fc:92:f6:69:
fb:20:5f:b1:f5:8f:9c:67:e8:dd:56:b9:cc:4a:6a:
97:5a:6d:10:aa:bc:d9:ed:20:a3:7a:04:04:03:8f:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:E3:D7:00:C1:76:E6:BC:A8:E5:1C:A0:DD:B1:2B:F1:09:EE:74
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/iJfj1wDBdua8qOUcoN2xK_EJ7nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/22
92.53.172.0/22
92.53.184.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:35:9c:78:48:1b:f8:e4:df:5c:88:6a:20:ad:23:70:f4:91:
96:8d:27:98:27:aa:a9:6e:70:ec:fe:13:e5:73:63:6d:45:1b:
43:f4:6a:fe:8e:d9:cb:d2:7b:f5:27:42:59:57:e0:f9:3a:df:
29:3c:17:ba:d4:67:d1:ce:c6:f0:67:17:2b:11:db:c9:ef:4d:
11:5c:18:65:92:3a:84:4d:75:db:4d:a5:bb:a8:9c:da:a4:74:
2b:b0:00:52:6e:62:3c:5d:6c:35:91:d9:8b:c0:df:c3:a4:4d:
36:6a:61:13:d5:01:95:a1:60:c3:52:e7:c3:38:14:62:84:fb:
c1:e1:9a:17:02:41:60:1f:dd:bb:7b:a9:11:f0:bd:ed:a7:59:
ed:00:b8:47:47:cb:df:f9:5d:c1:18:3d:f9:58:63:14:93:ee:
d0:e5:39:32:b2:15:86:29:c9:6c:96:11:d7:3f:f0:fc:78:3c:
e5:5d:fa:2d:67:ca:6c:3d:b4:d2:0c:28:9d:60:c2:d1:76:7a:
95:87:39:56:15:af:04:af:1f:5e:9e:4d:24:21:0f:02:46:2c:
b6:82:d5:0d:44:b2:e4:4e:14:18:97:ce:0b:d7:98:96:ba:80:
e4:04:02:97:25:21:7c:e6:9f:d7:7a:2f:e4:01:99:ba:25:94:
c8:8a:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org