Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/vNoIxI3yiwDwBBxGIgNIQ5hz5t8.roa
File: vNoIxI3yiwDwBBxGIgNIQ5hz5t8.roa (raw, json)
Hash identifier: kujdgjHa9158LqmAO4csZiGbZYDST7kZIzEOrJTca7w=
Subject key identifier: BC:DA:08:C4:8D:F2:8B:00:F0:04:1C:46:22:03:48:43:98:73:E6:DF
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01880613A100F6CE5B58B321F0F3A025B079
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/vNoIxI3yiwDwBBxGIgNIQ5hz5t8.roa
Signing time: Wed 10 May 2023 14:32:09 +0000
ROA not before: Wed 10 May 2023 14:32:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 92.53.188.0/22 maxlen: 24
92.53.160.0/22 maxlen: 24
92.53.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 09:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:13:a1:00:f6:ce:5b:58:b3:21:f0:f3:a0:25:b0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: May 10 14:32:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcda08c48df28b00f0041c46220348439873e6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:bb:14:68:20:01:a6:0b:85:ba:90:f9:3b:
3e:9c:3d:8d:09:50:e4:3d:2d:43:3d:0e:44:40:b7:
0a:e8:a7:60:c7:b2:63:fd:0a:b7:d2:ac:13:c5:e1:
24:99:94:15:10:03:00:50:aa:67:fa:d3:b5:2b:08:
d7:08:66:6d:fe:d3:bc:a3:70:8a:7d:be:2c:3f:a1:
b4:a6:2d:bb:e1:e1:86:92:23:81:0c:c8:21:f6:ab:
1a:57:2b:95:9e:a2:61:b9:ad:1b:5f:64:69:01:53:
95:6e:e2:8b:e2:2c:80:29:2c:4b:99:e4:d8:ee:10:
98:6c:12:0a:d1:eb:fb:73:a6:8e:04:43:4f:87:4d:
0f:28:c8:ff:af:5e:36:2f:89:0d:12:64:09:01:0b:
e3:a5:96:cf:89:68:45:27:66:70:d0:f2:96:cd:da:
22:75:f5:58:c6:27:e6:f7:5d:1e:76:a9:9e:2f:91:
42:a1:30:9c:c3:95:59:94:26:72:e2:39:a4:3f:d7:
68:e4:0f:b3:b9:6c:ae:73:2b:ef:29:c3:76:d3:f7:
5f:32:76:d8:f6:c0:d9:65:48:06:2e:84:68:b2:e6:
e6:09:e0:e1:8d:ee:d4:0c:56:31:06:aa:b6:32:40:
33:60:b7:ab:d1:2b:50:5f:ba:76:a3:fe:56:0f:88:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DA:08:C4:8D:F2:8B:00:F0:04:1C:46:22:03:48:43:98:73:E6:DF
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/vNoIxI3yiwDwBBxGIgNIQ5hz5t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/22
92.53.172.0/22
92.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
90:61:79:0b:11:77:e3:8e:6e:fd:fb:51:f6:6d:95:8c:fd:f2:
25:67:33:5d:9f:9f:f9:d0:3a:fe:56:18:35:08:25:ec:82:bf:
5a:eb:88:9f:fd:3e:1a:01:d9:d4:a5:ec:9f:7c:63:fd:a8:72:
95:d6:a2:c7:07:d8:f4:f2:db:ed:a5:10:93:5a:2f:ac:65:db:
08:af:48:e4:78:d6:ea:9f:bd:06:c9:a6:5e:b1:90:fe:19:99:
8d:ba:2c:fd:58:8d:2a:c0:e6:3c:61:6e:b8:4b:f1:0b:5b:b0:
42:19:67:dd:80:5e:d7:27:34:22:9b:e1:cb:25:b7:25:25:cf:
64:a2:ba:cb:93:33:5e:20:89:ac:b3:33:8d:df:03:53:62:3d:
6e:fe:5e:98:f4:d0:46:d6:00:54:67:41:f0:a8:fb:10:6a:70:
a5:70:c2:82:9b:57:ea:9e:57:e4:e6:57:7d:db:04:fc:95:15:
02:79:05:7d:94:33:13:b2:2c:c4:e3:f3:f8:a4:65:cc:05:a9:
f8:71:f7:5b:f4:cb:f9:65:64:5a:e7:b7:c4:7f:65:79:30:75:
25:63:eb:b7:f4:ef:66:9d:e7:27:fc:22:8e:0c:91:f7:40:ec:
57:df:9b:81:d9:e9:ff:0f:97:d5:83:27:21:3e:76:6b:78:af:
2b:82:ed:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org