Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/nn8Fne3-iM5hkVpAureEcDAqxIc.roa
File: nn8Fne3-iM5hkVpAureEcDAqxIc.roa (raw, json)
Hash identifier: 9CZ/7zSfBgm3uUP6fulfHp30zD7LkaZm2KZ/ThkzjAI=
Subject key identifier: 9E:7F:05:9D:ED:FE:88:CE:61:91:5A:40:BA:B7:84:70:30:2A:C4:87
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018CC801DE16B758914EEF9F40FF4FDA5F3C
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/nn8Fne3-iM5hkVpAureEcDAqxIc.roa
Signing time: Tue 02 Jan 2024 02:30:14 +0000
ROA not before: Tue 02 Jan 2024 02:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 92.53.180.0/22 maxlen: 22
92.53.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 15 Jan 2024 00:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:de:16:b7:58:91:4e:ef:9f:40:ff:4f:da:5f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 2 02:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e7f059dedfe88ce61915a40bab78470302ac487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:30:b0:b7:c5:24:59:2c:9a:bb:de:b1:a1:
bb:91:25:66:a3:d3:51:e9:65:a5:c7:19:17:b3:d5:
79:f7:5d:e7:e4:26:70:02:c1:a9:c7:14:b5:a7:41:
35:d1:b9:6d:2e:f3:4b:b6:ef:28:06:31:3e:10:45:
15:b0:7c:d8:38:fc:05:32:81:18:f3:73:db:53:2d:
02:76:2d:48:32:a6:98:e8:da:5c:c6:46:d9:3d:e5:
8c:09:9f:ed:dc:de:5b:49:3d:5c:3d:e9:a1:25:5a:
00:d3:be:54:7c:35:9c:09:6d:5f:ad:63:98:14:b2:
e9:90:af:d6:06:0d:32:ce:b3:83:3f:07:6e:9e:45:
70:69:d1:fc:61:f9:79:b0:0a:68:69:c5:a5:cd:be:
62:67:0e:4c:d8:3d:5e:2b:e7:9c:0e:d8:87:7c:44:
df:1e:41:1f:f6:e4:ca:79:71:4d:50:34:73:53:e3:
9b:41:0d:6a:4c:a9:fa:cc:90:4c:49:67:8e:55:5f:
45:b0:0b:88:28:04:41:4c:b6:77:e9:75:84:03:f5:
ef:b6:46:eb:35:30:7b:e3:0a:94:cc:54:52:08:87:
85:27:7d:9c:4e:1a:2a:a1:c8:68:f1:95:9e:23:88:
e3:0b:8b:1a:76:14:45:5c:2e:64:03:e3:b1:75:b3:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7F:05:9D:ED:FE:88:CE:61:91:5A:40:BA:B7:84:70:30:2A:C4:87
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/nn8Fne3-iM5hkVpAureEcDAqxIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.180.0-92.53.187.255
Signature Algorithm: sha256WithRSAEncryption
94:7e:7f:8c:79:8e:5e:8b:ab:ba:90:51:1b:b4:6f:37:f8:71:
7a:7f:8f:11:3b:cc:38:c9:71:18:5f:40:33:8a:9d:93:66:84:
66:0e:c8:83:be:23:37:8b:ee:9f:d0:ee:53:b2:cd:59:9e:10:
fd:05:a4:c8:08:98:7c:0f:62:58:d0:a1:53:36:a0:d6:7b:6a:
98:9b:9a:7f:a7:85:11:0b:41:7f:0f:e9:69:4a:38:59:d4:cf:
b0:cc:ac:13:a4:64:89:86:5d:61:0f:bc:78:c3:53:bb:c6:26:
66:b0:47:0b:e5:d9:98:02:45:79:1b:96:ec:fa:14:ad:97:3e:
24:16:28:ed:bd:aa:3b:ca:c5:a9:37:58:1e:ce:6c:11:98:0f:
a5:f7:07:3d:a8:45:19:ae:36:8e:9d:de:1d:23:21:90:72:02:
fa:fa:66:ae:87:1c:42:50:aa:55:9f:75:a2:60:cb:e5:29:5f:
0b:f7:e8:87:e5:0e:29:88:04:7b:6e:9e:09:83:ad:d6:08:53:
6c:1d:84:c8:db:fe:92:0c:30:e0:08:bf:31:69:f0:fd:0f:19:
9b:11:f5:8d:ff:ef:32:22:97:b1:c0:27:0f:b9:dc:e5:02:58:
2d:90:6e:94:13:38:d7:18:2c:a0:90:cb:44:d8:1c:ff:9e:67:
f3:c3:9f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org