Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/rxvsG3DDGhaG_E3jg8d9S-fSZTQ.roa
File: rxvsG3DDGhaG_E3jg8d9S-fSZTQ.roa (raw, json)
Hash identifier: NhvidsmevckaR5+Li3QJZk0bIUzSS6PgiuBYMwWipag=
Subject key identifier: AF:1B:EC:1B:70:C3:1A:16:86:FC:4D:E3:83:C7:7D:4B:E7:D2:65:34
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 018C82F2E76A97C276D09A15BEB1FC12EF27
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/rxvsG3DDGhaG_E3jg8d9S-fSZTQ.roa
Signing time: Tue 19 Dec 2023 16:40:06 +0000
ROA not before: Tue 19 Dec 2023 16:40:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 92.53.160.0/22 maxlen: 24
92.53.164.0/22 maxlen: 24
92.53.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:f2:e7:6a:97:c2:76:d0:9a:15:be:b1:fc:12:ef:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Dec 19 16:40:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af1bec1b70c31a1686fc4de383c77d4be7d26534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:40:8a:d2:49:8e:2e:e7:ef:93:36:c1:f8:ac:
7a:0b:2c:71:c9:c4:a1:0b:a9:65:a2:09:66:cd:a8:
1a:af:86:5e:c0:29:1f:ae:7a:ee:77:a1:3a:eb:e2:
26:dc:dc:4e:1c:e8:79:75:bd:36:bf:97:af:52:97:
2d:3b:17:be:78:f3:8d:9e:40:c6:65:ff:fb:e4:dc:
71:9c:bc:8a:75:37:ae:33:ab:5b:18:c3:fe:39:d9:
6a:08:02:d8:19:45:43:44:ca:e3:95:c1:73:40:34:
09:2d:4d:de:b4:d6:b4:8f:41:f1:a7:7c:0f:d4:7c:
fa:54:0e:5f:86:24:b0:95:b6:0f:19:59:8d:97:92:
f5:66:d6:89:11:34:52:4b:1f:24:7f:04:8c:77:c8:
48:79:81:23:e8:d1:b3:5e:00:9a:55:7c:6b:4b:60:
7f:af:a4:b9:05:28:5a:e8:cd:8b:2c:de:e6:cc:73:
27:cd:d7:50:45:f2:52:42:f3:53:08:bd:79:34:0a:
64:9a:51:53:68:d3:3f:7a:fc:fa:5b:54:6c:5b:07:
e9:25:fe:a6:59:80:47:79:52:71:bb:7b:43:31:b3:
93:99:4e:6d:24:ac:6a:12:30:ce:e0:dd:86:24:4f:
7e:5c:5f:76:16:ee:56:9b:a8:87:2e:ac:cb:56:c7:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1B:EC:1B:70:C3:1A:16:86:FC:4D:E3:83:C7:7D:4B:E7:D2:65:34
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/rxvsG3DDGhaG_E3jg8d9S-fSZTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/21
92.53.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:d2:0e:9d:ab:61:67:c7:e7:25:0f:db:0d:4a:6d:62:77:8b:
5c:2c:c2:00:57:00:cc:d7:e1:15:43:07:86:cf:42:4a:ee:ee:
a7:3e:ea:c4:1f:e8:b6:2a:1a:cd:45:07:78:a7:86:f5:dd:49:
75:53:9d:04:8f:dc:a2:86:1b:52:7c:49:af:c4:4f:ad:3c:48:
d5:82:81:ff:d8:39:19:ad:90:ef:4b:96:19:78:f6:39:20:7c:
0f:21:91:8c:de:cc:1e:07:f6:8f:77:9d:b9:73:d5:aa:99:5a:
d9:46:b2:0a:6d:f6:73:d7:1c:41:52:5b:8d:28:88:72:03:9f:
f9:da:a6:db:47:a7:c2:f8:13:db:60:10:b5:7e:77:45:2b:c5:
5d:d5:62:95:a3:3d:6c:89:9a:6a:fc:e4:0b:63:91:73:5d:4f:
3b:d1:10:4f:ca:fe:80:fa:31:f8:08:97:79:d1:cf:1c:10:e7:
93:33:59:84:f1:1f:04:c8:d1:bc:a0:19:7a:b2:a7:5c:e3:55:
fd:19:bb:e7:69:71:b1:07:c6:2d:97:c0:22:38:8d:6e:aa:6a:
69:ca:d2:c1:ef:97:bc:5a:19:37:ba:11:b2:dd:86:3a:c5:85:
5f:aa:47:a8:0c:1d:fa:c1:a9:69:6a:90:d3:ea:5f:e3:40:5a:
b1:d6:b2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org