Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/FVLtIsqua-IT5C7jqdKyQxwZexo.roa
File: FVLtIsqua-IT5C7jqdKyQxwZexo.roa (raw, json)
Hash identifier: sxz7S6SjKXYtaxcweUHyF0IlLwPJ7i9ZkpCkV4uLA70=
Subject key identifier: 15:52:ED:22:CA:AE:6B:E2:13:E4:2E:E3:A9:D2:B2:43:1C:19:7B:1A
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01949278EFDCF294754730B55C5051B3A6D6
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/FVLtIsqua-IT5C7jqdKyQxwZexo.roa
Signing time: Thu 23 Jan 2025 09:23:06 +0000
ROA not before: Thu 23 Jan 2025 09:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 203.202.232.0/24 maxlen: 24
2a0a:37c0::/29 maxlen: 29
2a0a:37c0::/32 maxlen: 32
2a0a:37c1::/32 maxlen: 32
2a0a:37c2::/32 maxlen: 32
2a0a:37c3::/32 maxlen: 32
2a0a:37c4::/32 maxlen: 32
2a0a:37c5::/32 maxlen: 32
2a0a:37c6::/32 maxlen: 32
2a0a:37c7::/32 maxlen: 32
2a0b:9800::/32 maxlen: 32
2a0b:9801::/32 maxlen: 32
2a0b:9802::/32 maxlen: 32
2a0b:9803::/32 maxlen: 32
2a0b:9804::/32 maxlen: 32
2a0b:9805::/32 maxlen: 32
2a0b:9806::/32 maxlen: 32
2a0b:9807::/32 maxlen: 32
2a14:4a80::/32 maxlen: 32
2a14:4a81::/32 maxlen: 32
2a14:4a82::/32 maxlen: 32
2a14:4a83::/32 maxlen: 32
2a14:4a84::/32 maxlen: 32
2a14:4a85::/32 maxlen: 32
2a14:4a86::/32 maxlen: 32
2a14:4a87::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 16 Feb 2025 20:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:78:ef:dc:f2:94:75:47:30:b5:5c:50:51:b3:a6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 23 09:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1552ed22caae6be213e42ee3a9d2b2431c197b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:c2:f4:3a:51:89:49:8d:72:00:c9:85:89:
03:fd:25:0b:e3:55:23:12:3b:d8:4a:e5:be:cd:70:
b2:19:46:17:ad:e2:6e:d7:4c:0e:c2:0b:07:c2:6f:
21:b5:bc:4e:e2:10:94:ce:98:91:08:ff:0f:df:61:
cd:ec:86:56:e6:10:75:a1:24:ea:05:61:1a:6b:6b:
d6:a3:13:4d:86:77:c8:3f:66:e8:be:79:6a:0d:df:
6f:69:f3:27:92:6e:e8:ad:b8:2d:dc:bb:ce:cd:a0:
23:98:5b:d5:86:ae:42:4f:84:29:a1:5b:7f:63:ed:
9e:bd:38:70:77:e2:c1:c9:65:75:82:c3:bb:bb:6a:
54:c2:f1:c0:d9:02:74:b4:69:39:44:b3:59:49:db:
c5:dd:53:62:58:2b:89:eb:62:f9:80:6e:f5:51:62:
f1:9a:44:a6:37:e4:72:b4:6a:19:71:7c:5c:ce:7a:
c4:f0:1b:61:e0:41:38:4e:38:d0:42:bd:33:2f:25:
02:fd:f7:69:74:ed:53:4e:63:0d:81:a4:ae:b5:1b:
8a:ca:e2:b9:91:02:9a:48:fb:5f:5e:10:39:93:6e:
35:3a:f6:3e:da:09:58:fc:cb:98:5f:b8:79:2d:1a:
f9:2e:8d:9a:68:fe:95:e5:1f:07:06:26:85:a1:97:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:52:ED:22:CA:AE:6B:E2:13:E4:2E:E3:A9:D2:B2:43:1C:19:7B:1A
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/FVLtIsqua-IT5C7jqdKyQxwZexo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.202.232.0/24
IPv6:
2a0a:37c0::/29
2a0b:9800::/29
2a14:4a80::/29
Signature Algorithm: sha256WithRSAEncryption
50:87:68:44:d0:cb:41:7b:82:c7:a6:44:91:32:75:aa:d2:58:
38:55:fb:39:1a:99:a4:e0:5f:5f:85:24:c3:41:0b:f8:51:81:
85:c2:7a:a4:70:7a:4e:51:e4:f7:fe:01:8b:e9:01:4d:66:35:
d1:c5:17:2f:f7:61:04:50:5f:ca:ae:ba:44:ee:cc:e0:e6:00:
9d:4b:39:c1:4b:60:06:ea:9d:7a:cd:be:26:11:73:f9:42:5e:
58:ce:8a:f6:61:07:b2:e2:5e:8a:de:7b:97:9f:ce:40:e9:6e:
b6:07:41:4e:73:38:94:dc:92:72:d8:4a:26:32:8c:73:2b:85:
6c:f0:1e:a2:b1:92:b8:b5:09:c7:33:f5:de:8e:a4:b8:f4:d8:
3e:3b:9e:7b:48:33:52:fa:5e:44:d8:fd:fe:37:34:77:3e:e7:
3f:e6:37:ab:30:b7:ea:8a:c8:81:d9:7f:f6:7f:84:74:40:32:
0b:a6:4a:44:63:f1:39:61:83:d6:30:20:30:6d:52:c2:f9:11:
98:5a:0f:7f:c9:08:91:8a:ab:05:e7:c3:03:1b:78:bd:e6:00:
a1:a6:c3:1b:26:1d:9c:74:91:66:8e:65:31:9d:fc:0f:9d:36:
fd:df:fe:38:09:fc:b9:4e:21:c5:36:dd:0a:12:37:bb:af:5b:
db:4a:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:08:39 2025 by rpki-client