Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/flc2shGaxoCeNVpoNwJ9kLLa-0I.roa
File: flc2shGaxoCeNVpoNwJ9kLLa-0I.roa (raw, json)
Hash identifier: 25YHQXrTezBQ+xbobLNZV2iToAQVPjRojy1jWW5GCCg=
Subject key identifier: 7E:57:36:B2:11:9A:C6:80:9E:35:5A:68:37:02:7D:90:B2:DA:FB:42
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191EA789F2543E46F74A1CF517517CEA358
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/flc2shGaxoCeNVpoNwJ9kLLa-0I.roa
Signing time: Fri 13 Sep 2024 08:20:59 +0000
ROA not before: Fri 13 Sep 2024 08:20:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214347
IP address blocks: 5.83.138.0/24 maxlen: 24
5.83.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 09:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:78:9f:25:43:e4:6f:74:a1:cf:51:75:17:ce:a3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 13 08:20:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e5736b2119ac6809e355a6837027d90b2dafb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:ac:5d:b5:2e:9d:a3:79:bb:f7:c7:53:4d:
bd:4c:d0:e7:79:da:69:5d:a3:a5:19:a4:85:b5:87:
fe:10:93:8e:c8:80:e9:c8:ce:17:6b:a6:2b:bf:a6:
bc:c5:86:c7:e1:d2:0f:06:4e:41:96:c2:f4:c5:d7:
ed:41:64:7b:13:da:29:e8:8d:65:0c:34:8f:c5:1f:
cc:77:d6:65:a5:93:80:91:04:fe:5e:41:ec:fc:e8:
5b:b5:0f:93:e5:62:f5:88:b5:ef:35:a4:25:8c:72:
d4:89:7a:37:a2:14:b9:25:98:49:e5:a9:3e:55:f6:
68:ad:9a:95:f2:c9:cf:66:80:44:0a:14:55:c3:97:
58:89:df:16:e6:bb:79:7b:5c:01:37:a8:8c:51:38:
39:41:38:cc:47:af:8c:4c:8d:79:ff:07:d2:f6:58:
20:7e:be:ff:16:ef:9c:d3:f8:76:87:cb:c0:55:52:
38:ea:a0:97:36:29:f8:58:18:e5:4e:10:73:68:3e:
d1:b7:17:eb:93:ce:9b:10:42:c9:eb:aa:40:af:33:
40:16:51:71:0a:72:e0:79:dc:aa:3d:36:a7:70:d0:
7d:5e:37:8b:90:9c:c4:3e:20:8a:f4:97:b0:4c:89:
07:9a:e6:10:a0:c1:c6:68:35:d4:cb:31:5e:e4:01:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:57:36:B2:11:9A:C6:80:9E:35:5A:68:37:02:7D:90:B2:DA:FB:42
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/flc2shGaxoCeNVpoNwJ9kLLa-0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.83.153.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:a0:b1:8d:03:f2:31:0f:a4:86:1d:48:ed:d1:c2:bd:4e:73:
53:95:48:fc:1d:ff:51:80:2d:c0:3b:2d:61:fb:99:05:72:c9:
99:7d:42:dc:a9:96:42:f6:a9:ee:39:f9:6b:d4:ce:b1:90:03:
f3:2c:0b:b6:8a:4f:23:50:67:b1:9b:0c:29:5a:4d:74:16:41:
05:9b:53:48:e7:21:f7:39:8d:57:e6:4a:cd:f2:8c:10:20:94:
79:e8:ae:99:46:dd:ba:8c:b4:2c:4f:b0:f4:41:83:68:7c:9a:
35:04:26:12:1f:05:ac:dd:a8:1f:77:b7:1b:be:94:97:12:3d:
9b:4e:c4:d5:bc:89:b1:f6:02:60:0b:a1:84:b9:aa:f1:60:55:
0e:09:d0:64:03:32:1a:66:29:0c:71:1a:81:e2:e7:1c:91:45:
fb:3d:83:59:a4:0a:7a:67:d7:7c:ec:86:90:a1:ea:dc:c7:92:
15:51:c4:60:15:a0:f9:21:ce:89:1a:b4:18:a8:b6:1c:90:40:
c4:cd:fe:77:6e:89:e0:60:74:ee:8f:28:49:fe:9d:58:03:fa:
f5:8b:3e:11:68:92:87:97:9d:d6:af:06:5f:6a:55:c7:2b:bb:
3c:75:ba:b4:c5:62:d3:a3:77:2a:4e:53:5f:fc:41:1d:cd:0f:
5d:d6:8f:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHqeJ8lQ+RvdKHPUXUXzqNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwOTEzMDgyMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTU3MzZiMjExOWFjNjgwOWUzNTVhNjgzNzAyN2Q5MGIyZGFmYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM6sXbUunaN5u/fHU029TNDnedpp
XaOlGaSFtYf+EJOOyIDpyM4Xa6Yrv6a8xYbH4dIPBk5BlsL0xdftQWR7E9op6I1l
DDSPxR/Md9ZlpZOAkQT+XkHs/OhbtQ+T5WL1iLXvNaQljHLUiXo3ohS5JZhJ5ak+
VfZorZqV8snPZoBEChRVw5dYid8W5rt5e1wBN6iMUTg5QTjMR6+MTI15/wfS9lgg
fr7/Fu+c0/h2h8vAVVI46qCXNin4WBjlThBzaD7Rtxfrk86bEELJ66pArzNAFlFx
CnLgedyqPTancNB9XjeLkJzEPiCK9JewTIkHmuYQoMHGaDXUyzFe5AGUewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH5XNrIRmsaAnjVaaDcCfZCy2vtCMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZmxjMnNoR2F4b0NlTlZwb053SjlrTExhLTBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVOKAwQA
BVOZMA0GCSqGSIb3DQEBCwUAA4IBAQC9oLGNA/IxD6SGHUjt0cK9TnNTlUj8Hf9R
gC3AOy1h+5kFcsmZfULcqZZC9qnuOflr1M6xkAPzLAu2ik8jUGexmwwpWk10FkEF
m1NI5yH3OY1X5krN8owQIJR56K6ZRt26jLQsT7D0QYNofJo1BCYSHwWs3agfd7cb
vpSXEj2bTsTVvImx9gJgC6GEuarxYFUOCdBkAzIaZikMcRqB4ucckUX7PYNZpAp6
Z9d87IaQoercx5IVUcRgFaD5Ic6JGrQYqLYckEDEzf53bongYHTujyhJ/p1YA/r1
iz4RaJKHl53WrwZfalXHK7s8dbq0xWLTo3cqTlNf/EEdzQ9d1o9T
-----END CERTIFICATE-----
Generated at Sun Sep 15 12:39:27 2024 by rpki-client on console-fra.rpki-client.org