Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/FZUKrEp_Ctb2G4zAYS5-jPxkxU8.roa
File: FZUKrEp_Ctb2G4zAYS5-jPxkxU8.roa (raw, json)
Hash identifier: wukByAfnZ+f14KKyYyt5DIAEAHNuVilwwPNIrN+ZGI0=
Subject key identifier: 15:95:0A:AC:4A:7F:0A:D6:F6:1B:8C:C0:61:2E:7E:8C:FC:64:C5:4F
Certificate issuer: /CN=d834ed2f9e2cef4701021e75ff454164fedc7c51
Certificate serial: 01856DC1B2FF6A4551611CA14F3D145E9E9B
Authority key identifier: D8:34:ED:2F:9E:2C:EF:47:01:02:1E:75:FF:45:41:64:FE:DC:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DTtL54s70cBAh51_0VBZP7cfFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/FZUKrEp_Ctb2G4zAYS5-jPxkxU8.roa
Signing time: Sun 01 Jan 2023 14:34:48 +0000
ROA not before: Sun 01 Jan 2023 14:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199738
IP address blocks: 45.8.48.0/24 maxlen: 24
45.8.48.0/23 maxlen: 23
45.8.49.0/24 maxlen: 24
45.8.50.0/23 maxlen: 23
45.8.50.0/24 maxlen: 24
45.8.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:b2:ff:6a:45:51:61:1c:a1:4f:3d:14:5e:9e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d834ed2f9e2cef4701021e75ff454164fedc7c51
Validity
Not Before: Jan 1 14:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15950aac4a7f0ad6f61b8cc0612e7e8cfc64c54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:c8:4f:6c:41:de:a8:ea:9d:68:60:af:1b:
6e:b2:85:91:b2:96:8d:7d:fe:b1:75:a3:17:78:e4:
0e:83:71:41:2f:e9:3c:b3:ba:86:69:cb:23:3a:06:
c3:42:e3:26:73:f3:a1:78:06:3b:95:ec:af:12:96:
f3:dd:37:5a:40:ac:b9:96:e4:c6:fc:8e:27:8c:b2:
a7:d2:9a:d4:17:d5:11:32:5c:a8:1c:ef:e7:3a:82:
19:f0:91:35:02:e1:53:7a:3c:55:21:34:2b:03:04:
63:cb:90:3b:4f:aa:df:e8:63:62:09:b9:5c:8c:e7:
4a:6e:f4:bc:36:f4:69:75:c7:b0:08:d4:1e:13:45:
6d:d2:ca:64:55:a3:a5:41:b9:a7:33:40:6a:db:04:
7e:7a:03:28:65:6d:84:a2:c0:ac:4e:81:ce:ee:0a:
5c:2a:c4:13:d7:be:54:4e:65:bb:72:c3:9b:31:c0:
a8:2c:92:2c:b6:d8:46:2c:b0:b5:a8:db:2a:b5:b8:
36:16:45:14:8d:9a:c0:bd:3c:15:bf:d5:1a:52:5a:
d2:3a:75:b3:c2:94:ea:13:57:15:bd:8b:3b:14:08:
0f:2b:d7:48:ac:a8:3b:69:25:9e:c9:3c:0c:58:1f:
15:4a:05:38:a5:99:1a:89:22:7b:08:6e:d6:e0:20:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:95:0A:AC:4A:7F:0A:D6:F6:1B:8C:C0:61:2E:7E:8C:FC:64:C5:4F
X509v3 Authority Key Identifier:
keyid:D8:34:ED:2F:9E:2C:EF:47:01:02:1E:75:FF:45:41:64:FE:DC:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DTtL54s70cBAh51_0VBZP7cfFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/FZUKrEp_Ctb2G4zAYS5-jPxkxU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b1e95-bc53-48ca-a1ee-b543f853ff25/1/2DTtL54s70cBAh51_0VBZP7cfFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.48.0/22
Signature Algorithm: sha256WithRSAEncryption
19:94:26:d0:fa:58:9c:39:87:35:23:a9:ef:1c:2c:fe:dd:91:
07:b4:b9:72:90:72:c1:a5:67:25:b4:aa:b7:d2:36:ed:4d:1c:
ae:d3:7f:5f:10:61:1e:74:63:b2:17:00:c3:5e:69:5d:7f:cb:
ea:3d:2e:b4:30:dd:bf:06:ba:2c:5c:68:f7:2c:33:2c:6d:3f:
6e:23:05:19:79:b4:d6:3a:74:c4:fb:91:d9:3f:fe:92:bc:f8:
85:1a:c6:f1:f7:2e:e4:cf:e0:8a:cf:bd:27:7a:36:0c:49:de:
fe:45:0f:a0:f8:51:38:bb:b0:12:54:db:e0:2c:68:97:5d:12:
c9:ee:5a:c0:4d:69:fc:b8:8f:54:7d:ab:22:f8:87:30:8f:a8:
06:34:63:e5:0d:a3:83:88:cb:35:36:f5:e6:18:70:77:d2:4c:
eb:18:38:b7:63:36:25:87:c1:f8:72:8e:43:6f:0d:27:81:c1:
64:3e:63:bb:66:ba:8a:37:44:4d:d5:a4:b9:62:a7:e5:98:37:
4e:98:d0:d1:ff:3b:2d:80:8c:31:20:a4:1c:7e:59:fd:71:1a:
5b:59:a2:7d:75:d8:10:04:d2:0e:35:40:80:bc:10:5d:00:00:
28:18:f2:7a:f6:c1:e2:85:c7:e7:94:5f:07:96:44:e4:f0:69:
cc:4c:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:43 2024 by rpki-client on console-ams.rpki-client.org