Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/nTNJxzWnLsx-arcuPz6iF0v-egM.roa
File: nTNJxzWnLsx-arcuPz6iF0v-egM.roa (raw, json)
Hash identifier: xcM/S5zgaoez2vcLjpj4DkBZWvDJ+NfBn9K/bCUSTfI=
Subject key identifier: 9D:33:49:C7:35:A7:2E:CC:7E:6A:B7:2E:3F:3E:A2:17:4B:FE:7A:03
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01856D419771CDEF340F536BDAE240896E8E
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/nTNJxzWnLsx-arcuPz6iF0v-egM.roa
Signing time: Sun 01 Jan 2023 12:14:53 +0000
ROA not before: Sun 01 Jan 2023 12:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400536
IP address blocks: 92.53.184.0/22 maxlen: 24
92.53.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Feb 2023 13:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:97:71:cd:ef:34:0f:53:6b:da:e2:40:89:6e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 1 12:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d3349c735a72ecc7e6ab72e3f3ea2174bfe7a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:96:88:e1:72:27:b6:1b:d6:28:44:41:c3:
b7:47:51:bf:9c:19:87:e4:8c:56:11:ad:d5:17:95:
12:88:cb:ae:4e:75:9e:91:46:2c:90:33:82:c8:66:
ae:6f:aa:60:50:89:26:fb:1f:ce:23:f9:d5:dc:b2:
cf:a6:42:3d:eb:f1:59:fe:0b:82:9d:91:db:37:e6:
b5:b1:55:85:69:56:dc:3c:d4:bc:10:c8:75:8a:b3:
0d:61:d0:1a:77:6b:3b:5c:f8:60:31:dd:cc:7f:bd:
dc:82:a7:5d:60:2e:7a:2d:5e:c3:98:04:55:0e:e2:
44:51:62:df:7f:67:d3:10:c4:fd:9b:d4:e3:33:ab:
7f:e7:b2:24:a8:88:81:be:39:4f:82:77:08:3c:99:
2e:56:76:f0:09:51:88:a7:be:41:bb:50:75:8c:c0:
77:5d:55:33:f7:cf:43:f9:af:d4:48:51:9e:8d:6e:
14:e2:c9:c2:70:ef:da:cd:b5:1e:a5:f2:19:a7:4d:
3a:03:1b:c6:2c:ac:72:56:ee:01:f7:8e:8f:d0:b2:
7f:9f:65:87:8a:72:da:d4:17:14:f8:b7:39:ee:d9:
a2:71:fb:d6:37:f8:fd:a6:e1:94:4e:9b:c1:5f:fd:
e9:73:51:a1:35:fb:92:32:da:80:78:23:71:bb:e7:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:33:49:C7:35:A7:2E:CC:7E:6A:B7:2E:3F:3E:A2:17:4B:FE:7A:03
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/nTNJxzWnLsx-arcuPz6iF0v-egM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.168.0/22
92.53.184.0/22
Signature Algorithm: sha256WithRSAEncryption
33:e5:5c:39:da:12:66:d0:ef:16:3a:0c:cc:46:a7:25:6e:10:
cb:ee:09:31:0f:e8:7e:d9:a7:8a:3b:26:cd:0c:ac:1d:da:f5:
14:4a:9c:0e:fe:53:d3:0e:60:8f:fe:f3:27:8e:d5:0e:87:ee:
f7:47:27:23:74:f8:a3:56:68:c0:a7:e8:e9:44:54:cc:ab:24:
9a:0d:00:46:96:e1:ac:80:4c:c3:49:61:a8:34:78:af:8d:01:
6d:68:5a:3f:f0:cf:b3:f9:14:98:73:50:8b:eb:08:1a:42:54:
76:1a:dc:24:d3:79:88:f5:da:b5:ee:d1:a3:0e:4a:2e:86:8d:
47:a3:3c:fd:cc:de:9b:cb:56:7b:74:5b:e5:1d:b2:7e:80:da:
a1:4c:53:38:b3:41:8d:9a:38:0a:40:64:71:f3:94:2f:07:c1:
f1:d5:46:3f:4f:90:02:be:76:37:ec:80:02:20:c5:47:98:9b:
55:20:3a:2b:37:6a:3c:67:4f:d9:6b:c0:9e:30:d5:8b:30:12:
89:15:4e:38:cf:8f:2f:83:9a:63:f1:f6:3f:c8:29:af:9f:c8:
89:c4:9c:b2:ec:7e:df:21:8f:11:a5:89:b2:fd:9b:f5:18:63:
31:e9:ac:fd:77:40:0f:8c:9e:ec:0d:57:d4:c8:97:7b:c7:d0:
1d:2b:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org