Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FPyv1_jwaZBO5tqtBKGDz0eMmRc.roa
File: FPyv1_jwaZBO5tqtBKGDz0eMmRc.roa (raw, json)
Hash identifier: Hhl87NTl/m+QecA0z0FuO2pwzjZqnSnQDhx2Q03LC38=
Subject key identifier: 14:FC:AF:D7:F8:F0:69:90:4E:E6:DA:AD:04:A1:83:CF:47:8C:99:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192DDB72B7C75E8A06377EFB5FF159A44E1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FPyv1_jwaZBO5tqtBKGDz0eMmRc.roa
Signing time: Wed 30 Oct 2024 13:57:01 +0000
ROA not before: Wed 30 Oct 2024 13:57:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214280
IP address blocks: 45.128.99.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 07:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:b7:2b:7c:75:e8:a0:63:77:ef:b5:ff:15:9a:44:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 30 13:57:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14fcafd7f8f069904ee6daad04a183cf478c9917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:d9:8f:2d:fb:71:b5:20:21:dd:2f:ee:07:
13:c7:b2:b8:ba:a4:63:75:51:ec:2a:f3:18:34:84:
86:3a:34:3e:18:c1:4f:e6:8c:e8:e8:e7:00:0c:86:
97:d6:76:3f:26:21:35:aa:37:4c:c7:a8:3a:ec:81:
de:15:90:30:71:74:69:70:58:f1:65:54:fb:fa:61:
1b:4c:dd:69:e5:61:e5:1b:f9:72:7a:ed:df:1b:5d:
64:e8:e3:e7:0a:e8:86:0a:75:46:e1:b4:4f:5c:de:
8a:4f:82:54:20:d5:d2:30:61:83:93:d8:15:ae:25:
3e:53:d3:36:53:3d:06:ec:b8:da:7a:a0:2d:bd:c8:
10:64:cb:e1:24:36:f3:aa:1c:15:3f:43:05:ad:7b:
40:00:d4:c4:a2:77:a0:6f:40:13:88:25:b3:2d:76:
03:ed:c6:09:75:36:44:c2:20:2d:be:ce:d6:f5:66:
d1:b4:d9:77:ce:c3:60:f5:98:22:05:7b:b0:35:90:
ff:6d:a6:a5:c6:e3:79:73:a4:49:c6:47:ba:fa:2d:
92:27:e3:ce:15:79:0d:bf:46:fc:24:66:51:a1:fc:
fd:63:f3:ba:9b:97:1c:e0:b1:9c:ee:2e:d5:70:b1:
71:b7:62:61:36:bd:f8:a0:e2:44:29:b0:1e:49:57:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FC:AF:D7:F8:F0:69:90:4E:E6:DA:AD:04:A1:83:CF:47:8C:99:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FPyv1_jwaZBO5tqtBKGDz0eMmRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.99.0/24
45.149.235.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c4:3b:9a:8c:54:ac:c0:d6:c8:06:bd:b5:ea:24:19:db:38:
0c:74:d9:e6:45:41:d1:9b:f5:2f:35:f2:f4:7b:69:70:ed:d2:
de:9f:48:7f:54:b3:60:6b:da:03:7c:a2:e3:6a:ef:13:ff:3b:
77:d7:31:62:1f:82:d0:fa:95:68:cd:0e:3e:62:78:9c:7a:55:
fe:7c:3f:84:8c:33:5b:2d:66:bd:f5:36:d1:07:e0:88:85:79:
33:9a:0b:f5:2f:a3:8e:22:1f:5d:1f:50:42:27:7f:a6:97:64:
e3:2e:7e:3b:54:d0:35:94:98:ac:ae:df:a7:ef:59:b5:86:c9:
d0:c0:9b:88:d1:91:2d:38:71:89:64:35:37:5e:bc:c6:a4:35:
9b:f3:c0:26:9b:a9:70:13:7b:e7:20:e6:09:51:74:5b:d4:cb:
56:dc:c1:04:e3:38:2f:66:4c:0b:2e:d5:43:c6:19:ba:61:31:
21:54:b0:d8:25:a4:cb:db:03:21:41:18:b0:de:d5:2a:8e:25:
1a:a3:c3:a0:3e:a0:b2:da:cd:c7:27:98:dc:ee:85:7f:90:5b:
6c:26:68:9c:eb:7b:44:40:db:4b:96:cf:e5:13:85:12:f1:55:
da:d9:4e:1a:dd:82:83:e5:5d:1f:b4:22:43:92:34:21:98:33:
24:1a:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 08:42:07 2024 by rpki-client on console-ams.rpki-client.org