Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/FvLql_FO8Bu8XQ0Gr4Z7mB3BM7E.roa
File: FvLql_FO8Bu8XQ0Gr4Z7mB3BM7E.roa (raw, json)
Hash identifier: bbLvdIYj/Xv6k9IN6eFPTABMS+of5r/01/v2uIF5lGY=
Subject key identifier: 16:F2:EA:97:F1:4E:F0:1B:BC:5D:0D:06:AF:86:7B:98:1D:C1:33:B1
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 018C5E838284A763D229F3E0FDDD5D4B6532
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/FvLql_FO8Bu8XQ0Gr4Z7mB3BM7E.roa
Signing time: Tue 12 Dec 2023 14:52:06 +0000
ROA not before: Tue 12 Dec 2023 14:52:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198462
IP address blocks: 45.82.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:83:82:84:a7:63:d2:29:f3:e0:fd:dd:5d:4b:65:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Dec 12 14:52:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16f2ea97f14ef01bbc5d0d06af867b981dc133b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:c7:bb:4d:28:9a:c4:be:ba:15:e7:1f:ab:
cd:38:6f:07:0e:f5:1c:e2:62:7e:ed:d1:1f:87:53:
63:18:8c:95:8b:10:8b:7a:b2:55:f0:30:09:86:b5:
4e:3f:82:9e:97:08:65:30:eb:e4:1a:c3:00:e7:d8:
ff:48:b7:65:53:67:77:f8:f8:dd:a0:96:6e:70:93:
49:76:bd:97:78:a2:93:b4:b0:91:e0:8e:35:82:50:
30:a5:cc:04:fe:72:77:e5:9c:b2:c1:5e:af:1c:bd:
5e:7a:d6:9d:2f:52:cf:60:77:86:f6:fc:b4:06:5e:
a3:aa:f0:44:2b:3c:5c:06:12:23:9f:20:46:43:2b:
f2:2d:1f:61:28:17:5c:a0:9a:15:a1:7b:d5:79:92:
57:7c:97:d6:8e:8a:bd:f8:73:88:14:61:d0:01:38:
d6:78:9b:fd:dd:af:05:26:5a:d1:83:35:78:24:77:
cd:3b:29:1a:e4:ab:01:3a:be:91:5e:34:f1:a3:32:
61:de:97:23:71:e2:93:eb:75:ac:63:23:25:20:69:
b4:6e:ff:76:da:ee:0c:ba:59:0c:63:9e:f1:76:b9:
1f:17:d1:fa:f3:92:e9:08:81:2c:69:e5:99:94:69:
a3:c2:3a:06:ce:ff:62:3a:97:cd:f8:a7:08:f7:e3:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F2:EA:97:F1:4E:F0:1B:BC:5D:0D:06:AF:86:7B:98:1D:C1:33:B1
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/FvLql_FO8Bu8XQ0Gr4Z7mB3BM7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.200.0/24
Signature Algorithm: sha256WithRSAEncryption
51:80:fc:9d:1f:1d:de:88:d1:df:c2:85:41:33:d3:fd:41:95:
5f:b5:e9:87:35:37:41:3e:c0:24:f0:64:9d:63:1d:89:89:68:
45:e3:60:70:71:f2:ee:94:ee:d8:bd:02:5f:6a:df:82:1d:8f:
9d:d6:b3:4e:1f:33:1e:e5:73:10:58:12:30:e2:f6:b3:d9:e2:
78:a5:b9:ba:7f:c7:6a:ed:9d:90:fc:4e:1f:df:f0:0a:cc:3f:
e0:46:ef:b3:09:ae:28:cc:05:79:75:ca:9c:ae:55:1d:29:52:
f1:06:78:5e:20:d8:66:7f:87:32:02:b4:bb:81:b1:a3:bf:7d:
ae:cb:63:d2:cf:7e:eb:99:3e:0e:a3:b0:f7:05:c4:76:2c:53:
90:f8:3f:1d:1c:4c:d6:6d:97:6a:72:4b:b8:95:38:4a:1a:a2:
30:85:2f:73:ad:d3:a0:17:3d:ae:b7:56:6c:8b:de:16:92:a6:
42:49:b6:33:27:47:da:c3:ab:bf:d2:b4:d0:c6:35:d1:52:26:
f8:88:fb:30:40:21:f0:63:a4:2f:c2:34:aa:6c:27:de:4e:ec:
37:cb:bc:e3:ca:8e:94:8e:98:9c:a3:c2:4e:a7:48:75:f8:00:
10:f1:ee:dd:2e:94:5b:2c:61:6f:fa:5e:17:55:c3:2c:68:58:
57:95:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:54 2024 by rpki-client on console-fra.rpki-client.org