Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/flxBsOJtmMRbtvjWrpaU7kZhTBE.roa
File: flxBsOJtmMRbtvjWrpaU7kZhTBE.roa (raw, json)
Hash identifier: zQhDnTKBdjhzKyEJYbYTefSlE/oT8g7olME1svrjcdA=
Subject key identifier: 7E:5C:41:B0:E2:6D:98:C4:5B:B6:F8:D6:AE:96:94:EE:46:61:4C:11
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018B50BA1C8C7E7372EB50C29DA592A87161
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/flxBsOJtmMRbtvjWrpaU7kZhTBE.roa
Signing time: Sat 21 Oct 2023 05:34:16 +0000
ROA not before: Sat 21 Oct 2023 05:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31122
IP address blocks: 45.139.254.0/23 maxlen: 24
45.88.246.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:50:ba:1c:8c:7e:73:72:eb:50:c2:9d:a5:92:a8:71:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 21 05:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e5c41b0e26d98c45bb6f8d6ae9694ee46614c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:31:e2:c5:af:40:a4:0c:dc:e3:9e:55:f9:
2b:01:9d:dc:f0:9c:0d:5f:8d:92:8a:c0:40:35:61:
1b:41:3e:23:e9:73:cd:a5:6a:e3:0c:4b:f2:c5:5f:
bc:71:9f:2c:ea:d3:92:c1:12:ec:d4:9e:fe:dd:cc:
d3:63:66:76:9d:0f:96:52:0b:22:ed:8b:ac:c6:9c:
8d:2d:b1:32:c1:e2:50:88:8b:51:3a:b8:76:46:2e:
7a:8a:da:67:b7:de:40:c8:c4:ce:a8:ec:39:b9:dd:
06:18:1a:ba:e5:15:d3:27:2e:50:f0:93:b1:47:cf:
b8:93:6c:c8:13:c2:04:09:e2:47:4b:3e:8c:57:87:
e9:27:a0:e0:5a:56:17:4a:49:31:8f:9a:aa:99:b1:
47:0b:a0:c8:96:6e:0a:c9:ef:23:b1:38:6b:0f:78:
33:fe:99:7a:f2:77:ff:3b:90:13:b3:2f:86:5b:3e:
9b:fa:67:86:cd:ff:f4:ea:a0:76:46:65:f4:27:5a:
1a:c9:87:92:6a:9d:cb:0c:8a:db:6b:38:0d:aa:98:
1b:c2:d2:59:e3:ef:12:b5:b8:be:68:66:e9:a0:99:
47:4d:f5:a0:9e:6f:9e:1f:4f:0c:a5:84:bc:a4:e7:
17:e1:c7:16:95:fb:df:cf:30:c4:2b:76:41:6f:fc:
90:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:41:B0:E2:6D:98:C4:5B:B6:F8:D6:AE:96:94:EE:46:61:4C:11
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/flxBsOJtmMRbtvjWrpaU7kZhTBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.246.0/23
45.139.254.0/23
Signature Algorithm: sha256WithRSAEncryption
26:08:d5:61:d4:e5:3c:47:77:ea:c9:18:16:be:74:c9:d6:b4:
ce:91:b9:ea:bb:28:d6:12:90:76:eb:c5:b9:32:c6:8e:3c:0c:
fe:ec:1c:79:6d:f8:b9:4c:ab:b1:79:1e:5a:7c:2a:8a:96:d7:
b9:70:b0:e1:68:a1:cf:be:a7:1f:62:59:e6:aa:3d:fb:96:d5:
4a:71:e0:22:0d:49:f1:14:c9:a9:47:47:a9:f4:0c:23:18:c6:
76:5f:e5:1b:6a:92:c1:f5:7c:1c:dc:36:a3:e8:13:ab:3e:f4:
68:15:33:46:98:c7:f4:8e:96:d3:32:0c:43:95:b1:d5:e1:4f:
fb:c5:e1:4d:c3:09:0d:00:fe:a6:5f:65:5d:a8:9c:86:55:41:
f5:ba:6b:78:76:af:fe:94:51:7c:77:1d:19:be:fc:f3:5c:d1:
44:61:d6:fd:51:d9:3d:51:f4:bd:aa:d9:e1:33:bc:51:3f:a1:
a8:df:06:45:80:54:d4:27:f9:c7:c8:fc:c3:af:81:c3:aa:56:
8a:df:40:00:88:57:bb:75:b2:9d:16:4c:d1:0a:84:17:81:a8:
41:89:67:22:2c:b9:bd:e5:d8:8b:98:e9:0c:26:11:e0:17:03:
a5:24:70:a2:6f:ae:7d:20:cd:af:b6:13:74:5f:ab:e1:d4:5f:
0c:47:36:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org