Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/_FcxVk6MdeBl8HPTGKl6c8CYQI8.roa
File: _FcxVk6MdeBl8HPTGKl6c8CYQI8.roa (raw, json)
Hash identifier: inLPtQK6xIJ4PNypKoKBUEdfQVrl7KfbOQAxlQgAuWs=
Subject key identifier: FC:57:31:56:4E:8C:75:E0:65:F0:73:D3:18:A9:7A:73:C0:98:40:8F
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018AEF8893972494224DFF82621E052D4D57
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/_FcxVk6MdeBl8HPTGKl6c8CYQI8.roa
Signing time: Mon 02 Oct 2023 08:36:59 +0000
ROA not before: Mon 02 Oct 2023 08:36:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 45.146.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:88:93:97:24:94:22:4d:ff:82:62:1e:05:2d:4d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Oct 2 08:36:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc5731564e8c75e065f073d318a97a73c098408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:48:f9:b2:75:e7:4c:cf:2a:d4:db:2c:5c:
3b:ed:2c:d1:6b:a6:f0:f6:45:b2:10:8c:61:d6:90:
28:31:6c:e5:78:31:a4:27:8a:b9:ce:ce:c1:83:28:
14:a5:9f:9e:d2:ba:b5:1a:78:30:0a:27:db:ad:84:
1e:ec:4f:24:da:22:5c:d9:59:3a:58:8d:b6:de:99:
ae:87:5e:77:bd:71:31:de:b8:da:93:ab:96:64:bb:
a4:e0:dc:91:42:7e:12:01:11:a3:e2:cf:fa:7a:0c:
72:24:fc:36:0d:71:02:05:1e:d2:0e:58:79:fd:5f:
f0:eb:eb:8e:c6:10:48:90:5b:7e:f3:d2:81:58:b9:
b5:16:96:25:51:b0:76:fc:b0:22:41:53:df:b0:9a:
e7:5c:1d:57:15:b1:7e:e4:f5:8e:b8:dc:d9:db:2e:
1d:37:b1:fe:a4:de:1f:b2:a0:40:b0:27:aa:34:e5:
88:39:7a:7f:67:8d:e6:0f:96:23:c0:4c:ef:bc:99:
d2:57:92:21:d2:a2:7b:be:49:89:1e:f0:97:dd:c7:
bc:40:32:a6:98:1a:af:e5:c4:ab:b8:c6:43:4d:b9:
2a:f7:02:88:37:b7:6d:3f:23:eb:71:5c:bc:3a:dd:
01:85:8e:2c:21:17:38:3c:04:74:b7:b2:47:16:f3:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:57:31:56:4E:8C:75:E0:65:F0:73:D3:18:A9:7A:73:C0:98:40:8F
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/_FcxVk6MdeBl8HPTGKl6c8CYQI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a9:23:ca:b2:fd:c8:bc:05:2c:ae:68:cf:6e:b4:d1:e2:e2:
f0:45:44:a5:6e:a4:c0:35:3a:71:15:7d:52:aa:17:2f:e9:c9:
ab:9f:ad:2b:a8:a1:89:41:1d:2f:79:8a:61:87:fc:42:55:9f:
01:77:87:ab:bb:eb:44:17:76:8d:9f:c5:f5:a6:7e:cd:ca:c4:
db:d2:33:d4:da:98:84:56:48:c8:13:0d:49:6b:fa:73:dc:df:
71:85:fb:ea:42:a6:64:ca:d7:3f:77:90:52:88:ba:0a:76:98:
03:6e:79:11:d5:61:8c:0f:6e:b2:c1:e5:28:a5:23:0a:e2:52:
8d:f2:a2:bc:8a:b7:93:90:1c:4c:4d:52:72:1e:14:24:57:61:
28:4d:d2:d9:64:e2:7f:6e:2c:b7:d6:17:9c:de:1d:eb:51:53:
e7:5a:b3:5f:58:ea:b7:db:7e:f6:83:17:59:55:e3:6a:b2:89:
43:b8:32:9d:ae:a5:28:96:36:db:cb:19:99:3d:65:8b:8c:ff:
6a:5f:d1:3d:24:22:2d:82:80:00:0e:06:6b:8a:5c:1c:be:4b:
76:a5:36:1c:02:10:61:02:01:f9:41:91:e6:1c:3f:49:7a:02:
fd:4c:0a:ed:8c:aa:37:95:59:ea:73:1d:a5:3b:35:e9:70:89:
d9:c4:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 06:47:27 2023 by rpki-client on console-fra.rpki-client.org