Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/FLfqsQuHrVQPV2V-wgLOtiRU4y8.roa
File: FLfqsQuHrVQPV2V-wgLOtiRU4y8.roa (raw, json)
Hash identifier: 8fmQ+5mwKytCvQ9OCpFhRghzPaKGhXgcTh7E/0oJRpw=
Subject key identifier: 14:B7:EA:B1:0B:87:AD:54:0F:57:65:7E:C2:02:CE:B6:24:54:E3:2F
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 01856C53D93BE32A66F8CE2448A0DBD1AE94
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/FLfqsQuHrVQPV2V-wgLOtiRU4y8.roa
Signing time: Sun 01 Jan 2023 07:55:12 +0000
ROA not before: Sun 01 Jan 2023 07:55:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140224
IP address blocks: 193.227.121.0/24 maxlen: 24
45.153.8.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d9:3b:e3:2a:66:f8:ce:24:48:a0:db:d1:ae:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 07:55:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14b7eab10b87ad540f57657ec202ceb62454e32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:eb:3d:c4:19:eb:e3:10:36:01:6c:c4:00:
40:97:37:2e:cb:24:b8:08:6e:48:a8:a7:bb:b6:b3:
b3:e5:69:85:a9:0f:17:37:36:d8:db:10:c9:77:c7:
fb:33:1d:37:fe:58:c7:42:6c:43:74:d0:78:a0:69:
f2:64:c4:03:b4:46:c5:15:26:5a:5e:b0:5b:0a:7a:
c8:7d:25:3a:e0:7b:4d:f8:36:92:ff:62:5f:0e:74:
d3:f0:6f:7a:b7:be:b8:63:a6:0f:2b:78:6f:0c:ce:
50:00:f4:0d:5b:89:31:74:47:fd:b8:a0:4d:39:01:
07:89:2b:c1:98:b8:9a:15:7f:eb:e3:86:86:73:6a:
c0:e1:59:74:5a:ad:ac:56:8f:a1:3b:26:7a:70:6d:
cd:c1:28:ba:bd:a4:d0:58:49:53:36:cc:68:bb:b6:
7a:9f:8a:18:af:a7:06:fe:ff:5e:be:94:d1:3e:0e:
60:04:92:27:e1:50:f6:c0:ae:7a:dd:a3:98:da:26:
3a:13:fa:19:41:1b:b9:cb:c6:3c:e9:e4:d1:86:ea:
22:55:e4:5f:40:22:f5:da:41:0c:56:17:53:bf:04:
4a:e3:c9:e6:16:08:9c:16:59:0a:cb:a5:5b:13:bd:
51:01:b0:77:3e:d5:3f:14:40:af:85:32:f7:77:81:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B7:EA:B1:0B:87:AD:54:0F:57:65:7E:C2:02:CE:B6:24:54:E3:2F
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/FLfqsQuHrVQPV2V-wgLOtiRU4y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.8.0/23
193.227.121.0/24
Signature Algorithm: sha256WithRSAEncryption
91:28:02:58:18:bd:4e:50:b2:7c:43:e3:54:42:b3:05:25:f4:
f1:61:5e:13:82:70:de:49:8f:fb:8a:ab:60:ef:3a:2c:27:5f:
d5:0d:63:33:e3:67:fb:89:d9:a5:88:12:c3:58:31:1b:1a:3a:
78:fa:20:b7:62:6e:ed:31:2d:e6:c8:82:40:92:9c:8d:6e:31:
95:2d:62:71:10:c5:67:2d:e0:d9:75:47:52:c4:1d:c0:30:8b:
2a:7c:f5:60:8b:1b:19:df:8f:d4:2f:20:7d:ee:54:ad:1f:fe:
61:c6:9b:f6:d5:1c:b3:80:09:8a:aa:f7:d3:08:3c:bc:f6:f6:
3f:de:ee:e9:71:76:78:7f:37:a3:b9:20:e2:ba:90:29:2b:91:
48:6d:5d:b9:6d:13:d0:49:bd:63:62:91:bb:27:93:d8:53:d8:
71:9f:e1:9c:dc:4a:00:b1:8f:15:be:b4:f6:6e:8e:02:3a:71:
12:91:0a:00:c7:72:01:9c:e5:00:2a:55:33:ca:bc:2e:04:ce:
a2:1b:9a:87:8a:fa:06:79:83:51:f5:05:61:f9:38:75:e9:75:
08:c6:d2:33:be:5c:f9:08:7d:99:c8:98:96:dc:a9:7a:34:38:
93:ac:b5:c7:67:19:ef:6f:91:dd:8e:a3:9e:cd:4c:a3:3f:e0:
ae:5e:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:13 2024 by rpki-client on console-fra.rpki-client.org