Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/fl1gqxNnE_1i_xdRRvqM8yLbKEY.roa
File: fl1gqxNnE_1i_xdRRvqM8yLbKEY.roa (raw, json)
Hash identifier: 8oQc+EBCWjz8+sFfnWR3O2Ul3RId9QtRlyBY+K2H0FY=
Subject key identifier: 7E:5D:60:AB:13:67:13:FD:62:FF:17:51:46:FA:8C:F3:22:DB:28:46
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 0185C9D87354919FA432DD9764B3590E4E5C
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/fl1gqxNnE_1i_xdRRvqM8yLbKEY.roa
Signing time: Thu 19 Jan 2023 11:44:43 +0000
ROA not before: Thu 19 Jan 2023 11:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21368
IP address blocks: 45.86.137.0/24 maxlen: 24
45.86.138.0/23 maxlen: 23
185.109.253.0/24 maxlen: 24
185.109.252.0/23 maxlen: 23
185.109.252.0/24 maxlen: 24
185.109.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:d8:73:54:91:9f:a4:32:dd:97:64:b3:59:0e:4e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Jan 19 11:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e5d60ab136713fd62ff175146fa8cf322db2846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3a:ea:74:84:b7:4a:28:c3:8d:24:5b:1c:c1:
34:64:40:88:e2:18:7b:ab:5d:d3:33:a9:f1:bb:3f:
0a:bd:17:3c:80:ba:c6:3c:34:41:60:af:68:2d:97:
82:83:57:b6:dc:2c:55:ed:a1:c7:77:ef:f3:d8:22:
d5:51:57:7d:b5:7a:69:ce:51:62:e0:23:bc:ae:89:
8c:84:97:48:7c:48:30:33:cf:5f:71:10:1a:bb:8f:
58:36:54:a3:16:c8:d7:ea:12:12:33:6f:f0:6b:fb:
bc:8a:c2:6d:7e:e8:4b:a0:54:83:08:74:41:0b:0e:
f8:6d:97:77:44:df:a8:af:d8:0c:14:a0:39:d9:ec:
92:f4:37:7b:0e:90:98:33:97:80:b3:57:59:89:0a:
a4:de:82:01:5a:1a:a6:19:0a:78:f4:bf:29:78:49:
a7:be:4d:5c:f8:e3:de:8e:7b:8d:0f:44:c2:99:ee:
00:b4:b9:83:c5:ac:72:4b:be:be:60:ca:3f:e2:f7:
b1:3e:c4:32:5d:20:6e:11:9d:e2:6b:80:cf:3f:d5:
07:90:20:d9:9e:14:05:e9:da:07:b4:4c:2f:1d:b0:
59:d1:93:cc:85:50:71:38:ba:a0:95:f8:6d:08:db:
fe:c1:32:26:39:fc:97:4b:1f:2d:c4:d6:3c:c4:79:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5D:60:AB:13:67:13:FD:62:FF:17:51:46:FA:8C:F3:22:DB:28:46
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/fl1gqxNnE_1i_xdRRvqM8yLbKEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.137.0-45.86.139.255
185.109.252.0/23
185.109.255.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6b:fd:1d:15:2e:c0:c5:f4:e8:18:59:78:4d:af:d9:2f:14:
8c:6a:a9:20:c5:88:5f:75:76:c3:a5:19:46:02:b9:f0:b2:99:
ab:b4:21:98:c6:c8:bf:2f:29:f0:b0:78:6d:b1:28:0a:98:d7:
1b:e2:20:da:56:ce:e6:32:35:d7:e9:12:1a:26:12:2b:62:9c:
50:2c:7b:9c:cd:17:1e:ec:15:ae:9c:51:2e:16:e7:45:f4:f1:
15:ce:67:17:5e:1c:75:60:04:5a:a6:94:5e:71:1e:02:a3:de:
d4:63:97:b3:0f:26:b0:9d:ff:f4:22:d9:b4:6e:6b:ac:19:09:
cd:35:9a:f9:9f:8d:e0:f9:70:4b:ee:45:06:ab:f9:d6:ee:1d:
fa:c2:36:5a:7a:c3:df:9e:c8:f3:f4:60:4b:6b:64:c4:9d:af:
8b:76:0e:54:5d:0a:6e:a8:ff:05:da:25:0f:fb:16:c6:17:e8:
4e:fa:58:dd:5c:d9:c0:45:3a:ca:9b:9b:78:93:00:f6:d0:25:
23:db:5d:f5:d7:71:44:cf:4d:80:36:eb:ed:ea:4c:ae:4e:f4:
f1:0f:c9:7b:35:50:64:d0:13:33:26:33:ac:c3:64:11:b1:56:
88:cc:1d:f6:5f:aa:0d:51:c4:18:49:41:c5:86:62:89:64:75:
0c:e4:4c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:36 2024 by rpki-client on console-fra.rpki-client.org