Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/FLYaeduNCPlPELfXQvpWXUX0Hy4.roa
File: FLYaeduNCPlPELfXQvpWXUX0Hy4.roa (raw, json)
Hash identifier: HZIs/gZ2IEz9GyXMtiXKKNaxuTTLkJB1RAzcPYCOet8=
Subject key identifier: 14:B6:1A:79:DB:8D:08:F9:4F:10:B7:D7:42:FA:56:5D:45:F4:1F:2E
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018649558EFA2C4F1154A7AD6717F04CDE69
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/FLYaeduNCPlPELfXQvpWXUX0Hy4.roa
Signing time: Mon 13 Feb 2023 05:53:09 +0000
ROA not before: Mon 13 Feb 2023 05:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212719
IP address blocks: 94.188.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:55:8e:fa:2c:4f:11:54:a7:ad:67:17:f0:4c:de:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 13 05:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14b61a79db8d08f94f10b7d742fa565d45f41f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:66:b3:c1:5f:7b:4a:8d:bb:e5:0c:e6:05:
b8:d5:4a:21:61:84:43:8c:21:3a:c0:4b:6d:85:45:
50:a2:30:ca:f9:a2:a8:76:69:92:17:88:d8:02:a4:
fb:32:b3:90:29:d3:94:84:47:5f:37:77:37:6f:eb:
8e:3e:25:51:9e:09:d2:74:4a:42:f7:ab:fa:c2:7f:
c7:2f:4b:89:b8:81:38:53:92:17:aa:c0:6f:d0:49:
0d:bf:22:f3:7c:9b:26:d6:5d:fe:af:f7:91:ca:ce:
fd:af:08:f8:88:d2:56:41:20:f2:4f:52:2c:a3:cd:
2a:1c:95:b8:84:7c:70:c9:5e:80:db:59:68:83:5f:
91:4b:f0:7f:e8:b8:d2:c2:57:85:83:f7:95:1d:81:
16:d4:c2:42:c1:bf:b3:a5:2a:47:86:e4:1b:d8:41:
78:b7:53:b7:58:ab:66:d2:50:cd:6a:c4:60:14:9c:
56:f8:2b:80:45:03:42:8d:f8:a5:0a:80:cc:07:02:
a1:a9:e9:d0:e1:e4:78:66:7b:bd:d7:45:9c:d0:19:
27:b6:50:69:79:69:2b:99:9f:a6:3e:2b:85:80:e4:
7f:ce:b7:8f:b4:17:ce:62:14:18:3d:a7:98:3d:41:
09:be:58:9f:fd:6e:3c:f7:6b:b9:85:07:fd:cc:b3:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B6:1A:79:DB:8D:08:F9:4F:10:B7:D7:42:FA:56:5D:45:F4:1F:2E
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/FLYaeduNCPlPELfXQvpWXUX0Hy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.250.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e1:af:76:5c:5d:e0:fc:a6:bc:9b:c8:eb:47:be:f4:36:46:
e1:82:60:13:19:d7:31:ae:31:bd:a0:1c:e1:87:62:dc:1e:29:
61:9e:d6:08:b0:fd:2e:ec:a7:a7:e1:3c:fc:e3:39:fd:8b:60:
dd:02:b8:7c:d0:44:81:27:47:85:3a:cc:49:cb:7f:3e:ad:c8:
fd:e9:ef:22:e1:3d:21:75:8d:bc:e3:2d:23:69:7e:c5:17:a6:
c5:c5:bf:08:aa:42:d7:63:24:bb:8e:2e:df:e9:ba:37:c7:c0:
2a:f5:b6:65:86:b3:ef:54:f8:77:f9:45:f6:97:ad:bb:58:12:
bc:ff:7e:da:ac:3b:4f:d4:f8:29:9c:a0:62:a1:3c:98:32:58:
23:fd:14:4a:5a:8c:37:52:e2:52:d5:fa:65:75:ad:78:9c:68:
92:13:42:6c:ab:f8:35:2d:0e:27:6d:56:56:18:77:6a:ca:52:
a2:82:fd:c5:d8:92:bd:98:fd:0d:a6:d0:3f:fd:df:30:23:ea:
0b:09:65:c5:d3:52:38:00:c4:5c:75:3d:ad:b7:80:87:71:7d:
fc:9a:82:f0:6c:28:27:53:65:be:e4:a3:c3:7b:86:61:85:1a:
d2:98:1f:78:cd:e7:96:db:7a:83:4a:c5:60:35:23:08:b3:09:
77:7c:24:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:30 2024 by rpki-client on console-fra.rpki-client.org