Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Fl_cE5W-qFaaEGSrfzWaxhbRvIk.roa
File: Fl_cE5W-qFaaEGSrfzWaxhbRvIk.roa (raw, json)
Hash identifier: 2kDBxBCrVTLXEGNPqKsX81TpuVGGGCMJBLWTqLRRGs4=
Subject key identifier: 16:5F:DC:13:95:BE:A8:56:9A:10:64:AB:7F:35:9A:C6:16:D1:BC:89
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018B685DBEFF472C918BD4BB24D77C3450D3
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Fl_cE5W-qFaaEGSrfzWaxhbRvIk.roa
Signing time: Wed 25 Oct 2023 19:44:16 +0000
ROA not before: Wed 25 Oct 2023 19:44:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 87.251.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:5d:be:ff:47:2c:91:8b:d4:bb:24:d7:7c:34:50:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Oct 25 19:44:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=165fdc1395bea8569a1064ab7f359ac616d1bc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:af:ae:07:08:fe:73:10:11:e4:33:8e:a2:
dc:1d:9c:49:e8:9a:53:c6:4b:a6:5f:e2:61:95:50:
a5:8a:c7:04:7d:d6:49:4a:c4:bb:79:4e:7c:d7:9d:
3e:31:c4:d5:4c:38:7c:5e:d3:4c:b9:be:2c:50:91:
0e:7e:15:46:2d:3b:c2:84:ea:bf:fb:e2:b9:29:94:
c4:7d:15:b4:8c:18:90:03:0e:e0:9d:72:5c:80:75:
c0:49:77:43:95:34:81:6c:d7:88:14:08:5f:31:e2:
85:ba:b3:27:a7:ff:b7:9d:f3:9b:b5:91:b1:28:41:
98:87:4b:7d:86:0b:5c:e6:2d:6c:97:fa:32:c3:03:
f5:2a:94:f4:48:92:2a:36:d6:5c:86:a1:9e:1e:d5:
a5:c4:94:da:f3:32:f5:e1:97:d0:23:07:1c:bc:87:
0e:64:44:38:b3:41:06:e8:c3:8d:c5:b8:87:d7:7d:
7b:9e:c6:b8:58:96:0a:b2:ea:8e:82:74:ee:47:42:
7f:9b:8d:f0:ae:05:2d:d0:c0:dd:dc:04:08:2f:91:
71:a4:57:fa:b4:a6:89:98:64:00:92:ce:f7:74:25:
db:82:a1:37:86:ca:9b:96:c5:44:93:51:1c:5f:cc:
e8:b6:f0:d9:9c:81:70:d3:a7:ce:da:c0:7c:13:36:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5F:DC:13:95:BE:A8:56:9A:10:64:AB:7F:35:9A:C6:16:D1:BC:89
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/Fl_cE5W-qFaaEGSrfzWaxhbRvIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.6.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e4:56:bc:11:14:95:2d:41:74:5b:ea:a9:a5:4a:81:f2:8e:
42:f8:8e:77:70:72:ce:3d:4b:3e:71:41:2b:54:f1:db:7b:bd:
6a:be:ba:7c:da:ea:f0:bf:2c:1c:53:d1:6b:23:ad:19:df:dc:
e8:9b:ab:ba:a7:76:cd:45:03:d7:73:1d:8b:d1:f8:60:7a:bf:
6e:5c:23:92:5c:b7:7f:82:7d:78:20:01:4e:a2:3a:91:a9:9f:
b6:db:53:d7:ea:ad:79:52:57:88:0f:4b:5e:05:ac:04:c0:c5:
b9:5e:a7:91:83:46:b8:cf:4e:1b:c8:3e:8d:7c:eb:c0:ec:a3:
23:7a:13:a9:d1:2f:dc:f3:b3:a1:22:2e:9c:92:57:8d:2b:f0:
38:a3:0c:95:50:e6:76:a5:89:1d:82:42:90:e8:75:12:ca:f2:
ba:60:d3:6a:7f:3d:7a:ea:8f:89:08:f1:b4:7f:b6:bf:da:7f:
89:27:a1:14:f0:bc:2e:79:11:78:e1:55:84:45:38:2a:d2:ad:
5b:e4:cd:1a:cc:f3:ac:b4:d1:a2:58:57:88:b3:93:ab:54:48:
42:df:db:93:bc:45:cb:eb:7b:87:f1:7a:85:a2:10:d9:fe:97:
50:96:3b:99:95:41:d6:ac:f4:14:eb:f1:be:fa:b4:4b:ee:9d:
6a:c3:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:51 2024 by rpki-client on console-ams.rpki-client.org