Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/tj_j5f7TTA3DEo8sQZ2WdK6dW_o.roa
File: tj_j5f7TTA3DEo8sQZ2WdK6dW_o.roa (raw, json)
Hash identifier: hkwTj/VMgcAB5ToZTdmtMUBvfU23MgESbKOLCy6s40k=
Subject key identifier: B6:3F:E3:E5:FE:D3:4C:0D:C3:12:8F:2C:41:9D:96:74:AE:9D:5B:FA
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0194221F5CB7AD54A4C32784F2458CA94517
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/tj_j5f7TTA3DEo8sQZ2WdK6dW_o.roa
Signing time: Wed 01 Jan 2025 13:47:48 +0000
ROA not before: Wed 01 Jan 2025 13:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 92.53.160.0/21 maxlen: 24
92.53.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 16:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:5c:b7:ad:54:a4:c3:27:84:f2:45:8c:a9:45:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 1 13:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b63fe3e5fed34c0dc3128f2c419d9674ae9d5bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:36:97:10:8e:32:00:76:e9:ab:2d:bc:7f:
86:27:45:18:ea:3e:54:f2:76:3a:bc:fc:d2:92:d8:
17:30:26:b5:b7:26:c9:40:93:0c:b8:45:9b:4e:4a:
6c:7c:7e:cc:fd:95:da:d4:c3:f7:87:86:bc:69:67:
22:f5:e9:11:93:20:9c:3e:ab:87:8f:3c:51:70:22:
08:9f:56:08:ff:bf:a0:9f:c4:ed:71:a9:15:c5:c5:
f9:a5:7a:65:46:7b:5d:88:e8:f3:c2:e5:fe:ca:87:
02:67:f5:59:81:ef:f7:00:f5:3e:5e:2b:29:10:79:
d7:a1:49:ec:eb:9c:3c:53:74:48:b9:dc:c5:da:96:
b0:67:6d:74:29:3c:8f:2d:e0:67:34:bd:51:6b:3f:
7d:66:6e:02:9a:7b:a5:a0:4c:b8:63:59:3c:9e:cb:
aa:67:1b:bb:7f:c2:5f:39:c6:6d:29:bf:73:3f:eb:
16:ef:e9:f5:ab:3f:6e:f9:0d:d8:c5:3a:73:b6:f9:
90:d5:e3:35:7f:8a:77:05:94:51:f0:97:45:2e:08:
35:db:ef:40:8b:50:98:68:8b:0a:f1:b2:70:b6:f6:
e9:5c:78:f5:36:2f:4b:5c:bc:96:25:39:16:a2:02:
65:d2:01:47:f5:39:9f:44:5b:fe:f8:7a:89:b1:6e:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:E3:E5:FE:D3:4C:0D:C3:12:8F:2C:41:9D:96:74:AE:9D:5B:FA
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/tj_j5f7TTA3DEo8sQZ2WdK6dW_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:9a:e8:18:2d:5c:3f:29:fd:c3:93:28:6c:e5:6c:b9:10:65:
05:ab:85:8d:c6:5b:32:18:e4:a6:97:16:37:6d:20:05:9d:e4:
2d:98:1f:58:81:30:45:77:a3:3e:5c:56:bc:b6:45:d1:16:1f:
c6:f1:54:7e:14:71:42:a3:58:25:f9:9c:70:84:b8:af:30:45:
a1:ca:df:eb:1b:70:03:40:a0:81:7a:b3:ce:e2:d5:4e:bc:87:
dc:30:7c:0f:80:c6:fd:e3:d8:8d:4f:83:9c:03:d0:d8:9b:99:
c2:2d:ba:1e:c9:ca:5d:3c:cb:06:f2:e1:16:3a:b7:d0:6a:40:
48:7a:9b:81:90:31:40:31:84:d6:6f:f4:fb:a0:d5:74:21:f8:
0c:fb:8a:42:f2:92:ea:33:d9:1b:99:5f:40:32:a4:46:42:2b:
1d:8a:7e:2f:ee:d4:44:b7:64:3d:c4:c8:4e:e9:4f:29:85:a8:
f8:38:14:a7:6e:50:b6:76:a9:61:bf:6a:8e:ef:35:15:38:44:
f0:85:29:85:f8:15:e3:2b:0d:f9:0c:90:1c:d5:cd:50:42:83:
a6:a5:ba:64:59:31:90:6d:ea:3f:25:f8:07:86:69:10:b0:e4:
a7:b5:87:f5:8b:bc:0b:8b:45:be:90:59:ff:2b:42:c2:14:bd:
4a:9c:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:33:20 2025 by rpki-client