Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/x1g2nNP1Du3QeMf336U9Bmgh8aE.roa
File: x1g2nNP1Du3QeMf336U9Bmgh8aE.roa (raw, json)
Hash identifier: B4HHyaCHxMqU9eIaEkxkBHo9LnUEWZ7dito4OjjxDgg=
Subject key identifier: C7:58:36:9C:D3:F5:0E:ED:D0:78:C7:F7:DF:A5:3D:06:68:21:F1:A1
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01856D41946A9739218EA0EA7B92F6215320
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/x1g2nNP1Du3QeMf336U9Bmgh8aE.roa
Signing time: Sun 01 Jan 2023 12:14:52 +0000
ROA not before: Sun 01 Jan 2023 12:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 92.53.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 19:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:94:6a:97:39:21:8e:a0:ea:7b:92:f6:21:53:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 1 12:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c758369cd3f50eedd078c7f7dfa53d066821f1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:1d:a7:0b:7e:79:6d:44:6a:e7:92:36:66:
92:d0:1d:05:1a:8a:3b:e3:ae:ae:f9:fe:2a:75:bb:
24:75:f2:c5:77:81:2b:ab:55:07:eb:37:ec:6c:4b:
30:28:f2:32:19:6a:49:cb:5c:45:0b:42:df:c6:e2:
ec:a3:ce:8a:a5:34:ec:5e:cf:26:6c:21:2c:23:9d:
92:3d:4b:dc:c1:8d:00:36:b2:cc:b5:48:f8:6a:fb:
d9:d7:9a:3e:93:62:2e:a6:1f:cf:95:ee:8e:66:83:
1d:50:14:42:2d:9b:f1:e6:a3:7e:c5:ca:58:e2:c5:
ac:46:a9:5d:72:e7:23:f7:cf:67:4f:c3:43:ac:be:
9e:81:b1:92:24:39:7b:5d:c0:a9:c6:86:a6:6c:1d:
7a:4c:d8:46:38:f7:4d:53:0f:fc:4a:7d:1e:fb:b8:
74:8c:6f:aa:ee:e7:5e:7a:f6:6e:0b:ad:5f:4e:b6:
78:df:67:3f:2f:4a:94:a7:52:7b:64:06:e4:dd:91:
87:dc:97:cf:bc:29:cd:8b:f8:eb:ee:d0:8c:fc:ed:
35:74:c9:56:49:b7:5c:e8:cb:a2:81:7b:79:49:86:
95:8e:20:24:2b:a3:6b:77:d4:cb:41:49:08:f0:21:
df:3f:18:a6:aa:44:59:be:3b:19:dc:c2:c7:14:50:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:58:36:9C:D3:F5:0E:ED:D0:78:C7:F7:DF:A5:3D:06:68:21:F1:A1
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/x1g2nNP1Du3QeMf336U9Bmgh8aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:0b:6e:a7:b4:6b:dd:f1:3c:f8:be:cb:ba:c9:26:c2:28:18:
e3:85:db:a0:0b:92:b9:4d:d0:b2:63:1f:f7:fe:63:ef:b0:6d:
87:5e:76:39:a6:2d:a8:d3:6d:45:00:e5:09:36:69:4f:d8:be:
34:bf:f6:77:8a:8f:18:6a:a7:ca:43:c7:68:a2:df:f1:3d:63:
b8:a1:99:9d:1d:70:ed:52:9f:71:e4:28:61:ac:4b:bb:c9:c7:
14:12:52:3e:9b:c9:60:ca:2f:5b:e6:aa:10:ae:62:b2:b8:e5:
43:88:4f:7a:d6:9d:2a:fc:71:cb:1e:67:54:f6:19:a3:84:af:
b1:00:be:74:29:ee:57:8a:00:df:f5:ed:cb:8e:38:43:9b:0c:
17:21:8a:48:76:9c:02:13:50:18:a1:1e:fd:d8:65:ff:24:00:
b1:d2:00:88:f2:66:de:ea:cd:1d:2d:60:40:47:16:c2:0b:63:
79:45:d3:37:8b:88:7a:47:af:fb:85:21:61:78:65:67:c3:b4:
09:a7:cd:5f:fd:28:e0:96:e5:44:1e:4d:c8:23:ce:f6:05:6e:
11:c5:4c:24:86:f4:8e:0f:24:07:b4:de:f5:6a:81:43:24:71:
a1:ec:b9:70:ff:b7:d9:95:2e:27:6f:c7:ae:8d:0c:12:f8:91:
79:98:2a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org