Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/FQyFztuy8yCe46nFFsYM-cQBMwE.roa
File: FQyFztuy8yCe46nFFsYM-cQBMwE.roa (raw, json)
Hash identifier: R/ArLuwWZ6NkaH4v3SELmQFJAps1fNFT0jtoPvAFXro=
Subject key identifier: 15:0C:85:CE:DB:B2:F3:20:9E:E3:A9:C5:16:C6:0C:F9:C4:01:33:01
Certificate issuer: /CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Certificate serial: 018CC4252A9D63E53D4977853E69D530D576
Authority key identifier: 1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/FQyFztuy8yCe46nFFsYM-cQBMwE.roa
Signing time: Mon 01 Jan 2024 08:30:19 +0000
ROA not before: Mon 01 Jan 2024 08:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50673
IP address blocks: 91.200.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:2a:9d:63:e5:3d:49:77:85:3e:69:d5:30:d5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Validity
Not Before: Jan 1 08:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=150c85cedbb2f3209ee3a9c516c60cf9c4013301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:32:3c:83:f7:cc:db:d2:f2:17:dd:cf:19:
31:d4:79:1f:d1:f1:a8:2e:1a:47:a0:50:ce:25:1c:
50:0d:e6:62:e9:94:3b:a5:99:52:aa:a9:5f:fb:e1:
f9:b8:84:0c:ec:c1:98:16:bb:9e:40:15:0d:0f:48:
c1:06:e9:c2:a7:5b:9f:17:89:5f:da:ef:f2:52:f9:
bd:70:5d:a2:d9:9a:b8:00:15:cf:0e:dd:ff:eb:bf:
a7:08:7f:3e:10:e7:c6:b0:69:88:bf:27:16:8a:02:
6e:dc:33:f9:b2:d8:c6:29:1d:d1:a9:91:d0:ab:25:
47:2b:8d:17:a1:2f:4c:21:2d:26:02:16:a8:2c:59:
40:7e:77:86:e3:fe:de:39:96:60:77:e9:60:96:ad:
1c:00:70:69:20:6c:ff:bb:5e:fe:e3:c7:c9:86:a8:
86:e1:76:cc:fd:98:e1:b6:27:17:a8:1b:37:24:0d:
9e:25:5c:c6:5c:ba:53:62:95:c8:99:b9:e2:03:6e:
bc:e1:d3:00:93:71:30:d5:2c:c1:80:29:a7:d0:bb:
0e:df:58:0b:fb:11:66:f3:c4:36:94:31:28:00:76:
81:01:18:15:0d:30:f3:a1:ae:eb:95:53:df:c7:1d:
ac:46:0d:d6:69:1d:3a:ea:75:bb:52:45:88:73:49:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0C:85:CE:DB:B2:F3:20:9E:E3:A9:C5:16:C6:0C:F9:C4:01:33:01
X509v3 Authority Key Identifier:
keyid:1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/FQyFztuy8yCe46nFFsYM-cQBMwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.147.0/24
Signature Algorithm: sha256WithRSAEncryption
60:98:fe:53:3d:cc:c4:13:61:3b:77:d0:1f:7f:0e:b0:1a:28:
f2:3c:04:a9:55:b6:4d:62:73:5b:3c:d2:ab:42:60:e8:b1:c4:
6e:70:06:1a:89:fa:5e:94:60:18:4a:1d:67:ad:70:83:c8:66:
af:22:79:ee:42:3d:89:c5:33:54:d3:90:43:50:c7:11:20:90:
48:eb:6e:63:ef:04:2a:df:87:97:8e:07:ea:51:f6:d6:e3:d0:
47:e7:ae:04:44:79:1e:b0:79:3d:e7:54:fe:3d:0c:43:c9:97:
39:8d:ff:ea:89:d5:67:2d:f1:06:e8:1a:51:fe:cb:ee:ff:1e:
b1:e4:a1:f1:be:27:67:b8:f9:d8:ac:6a:99:9b:73:b6:9d:d3:
38:77:eb:be:ec:63:e9:3f:f5:19:c3:fb:72:da:71:b2:19:89:
bc:b4:03:0a:6c:8b:0f:f4:1e:1a:9e:48:5a:60:99:fb:2d:d3:
4a:1f:3e:20:08:e0:b8:4b:87:e7:68:78:bd:fe:47:3f:04:cc:
ab:0b:3e:9d:05:d6:52:a2:93:44:78:dd:de:51:b2:2a:c1:25:
d3:e8:98:86:6d:24:83:20:9b:19:11:19:25:7a:00:2e:e3:db:
62:b2:a5:7c:a0:53:88:1c:3b:73:70:0c:d3:05:ed:b4:54:56:
11:e1:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:53 2025 by rpki-client