Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/7UUWxsevqjREP1dTxdquUD1G4rU.roa
File: 7UUWxsevqjREP1dTxdquUD1G4rU.roa (raw, json)
Hash identifier: JQ4kAd5xwCc0FHVm0mi/TbS/ZrgLsVjtlWcL/PEiAKQ=
Subject key identifier: ED:45:16:C6:C7:AF:AA:34:44:3F:57:53:C5:DA:AE:50:3D:46:E2:B5
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 01955CBF5C85A002C6B1E03CD80CDF17E7F2
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/7UUWxsevqjREP1dTxdquUD1G4rU.roa
Signing time: Mon 03 Mar 2025 16:03:19 +0000
ROA not before: Mon 03 Mar 2025 16:03:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 92.53.160.0/20 maxlen: 24
92.53.160.0/21 maxlen: 24
92.53.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 10:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:bf:5c:85:a0:02:c6:b1:e0:3c:d8:0c:df:17:e7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Mar 3 16:03:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed4516c6c7afaa34443f5753c5daae503d46e2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:47:ee:36:18:5d:c0:ae:f0:18:86:4c:8b:
4c:80:54:69:b3:21:9a:58:3f:1c:42:47:5e:4b:a3:
4a:c7:86:45:bc:e8:14:3b:1f:41:0a:be:38:95:19:
2e:7d:2c:35:1f:c1:64:d6:9c:b3:48:b9:c2:df:55:
a6:08:5d:b1:1d:52:63:2d:34:3a:eb:5a:7d:4a:a1:
60:39:2c:29:7d:8e:85:28:12:07:bc:b4:10:a2:b8:
8f:9b:62:75:f5:50:f1:7d:46:25:89:ce:20:26:9d:
b1:29:86:d6:41:8e:8c:04:7d:43:a1:a2:05:f1:d5:
87:99:ef:c6:8c:99:a6:64:13:10:72:89:5d:a5:c8:
80:74:d0:69:b0:2e:c8:fa:6c:0b:1a:fe:d4:23:d1:
ea:ca:2d:de:ea:21:25:08:be:f0:37:3d:a0:37:d8:
5f:83:bf:25:6a:eb:4b:d3:9c:77:4b:00:a6:b0:43:
9d:dd:75:12:b8:6d:85:f8:b6:21:2f:79:42:f2:16:
4f:54:46:b7:60:b2:73:aa:f7:9d:b7:12:8b:bc:99:
09:5f:f4:a4:23:35:08:66:50:0a:b3:6a:38:46:b0:
56:46:4a:c6:d9:f6:1e:b9:37:16:88:e7:73:1e:4a:
d4:ed:c0:87:49:6f:48:93:c9:3c:ae:aa:94:44:9e:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:45:16:C6:C7:AF:AA:34:44:3F:57:53:C5:DA:AE:50:3D:46:E2:B5
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/7UUWxsevqjREP1dTxdquUD1G4rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/20
Signature Algorithm: sha256WithRSAEncryption
60:13:ad:a0:e8:b5:0f:09:1e:ab:18:d2:e5:f3:ba:24:f6:aa:
00:94:4c:a5:39:7e:ff:8d:c6:d2:d0:01:58:ac:40:18:6b:c3:
e1:e1:42:7c:ab:54:99:8d:a3:aa:d0:1d:67:f5:c6:b8:39:97:
63:60:b2:ef:b5:4d:55:4c:77:0c:cd:74:13:40:45:da:95:92:
e5:87:66:ea:fa:c1:f9:51:da:d2:09:51:1b:bf:5e:15:b2:a7:
a3:ee:1d:0d:d4:7e:34:eb:ab:9b:30:32:6b:fd:c7:ca:e5:66:
63:08:13:1a:a3:7f:9d:b2:89:67:88:99:c0:69:9c:74:33:6f:
3b:01:41:93:d2:c3:d4:61:38:16:d5:07:52:ee:96:19:d4:47:
19:c0:c2:ab:1d:e8:8f:5c:cc:2c:62:70:ef:32:11:e5:53:f3:
ba:1a:9a:22:3e:76:75:41:45:f5:96:6e:cc:ae:85:66:ae:b7:
fb:ae:ca:02:78:5a:b3:a2:3c:ea:18:2b:30:37:ec:48:77:2f:
9e:5a:6f:50:03:87:79:c2:1f:51:ef:e9:e2:36:f8:8e:f5:04:
6e:1b:7c:d0:8a:9c:80:23:a6:ac:7e:5c:7e:38:4b:d5:c6:f3:
64:d9:a4:4d:53:06:ab:03:8f:67:98:f1:60:f6:9d:3e:9e:65:
9e:a0:0a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:40:03 2025 by rpki-client