Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FlbcXRERB53K3iz25vzZTKXpjwI.roa
File: FlbcXRERB53K3iz25vzZTKXpjwI.roa (raw, json)
Hash identifier: 1FFnEcWsvL0jTzo95Cx6HseeornSI4OvOv/sp3tkXeo=
Subject key identifier: 16:56:DC:5D:11:11:07:9D:CA:DE:2C:F6:E6:FC:D9:4C:A5:E9:8F:02
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AF2883E0FD80C47418FD9C7FB74DD
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FlbcXRERB53K3iz25vzZTKXpjwI.roa
Signing time: Sun 01 Jan 2023 11:15:11 +0000
ROA not before: Sun 01 Jan 2023 11:15:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202537
IP address blocks: 85.142.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:f2:88:3e:0f:d8:0c:47:41:8f:d9:c7:fb:74:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1656dc5d1111079dcade2cf6e6fcd94ca5e98f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:c8:60:07:12:d1:37:2a:7c:76:b3:71:03:
be:ed:8b:56:03:cc:2f:ab:60:03:86:77:fd:a8:d6:
bc:42:01:76:1a:a9:57:5a:bb:c9:ae:6e:b7:c7:0b:
c3:d5:a5:41:ad:a6:73:30:59:05:bf:1c:7d:08:0f:
06:50:aa:67:72:13:0e:46:1d:dd:0b:1f:0e:16:f8:
60:83:4c:b5:19:66:c7:42:31:70:e8:64:1e:23:3f:
51:8f:df:e8:36:66:c8:43:9e:47:4d:0a:2b:56:c8:
81:c2:ba:7f:5f:20:bf:e9:87:bb:85:65:21:59:33:
17:9a:5d:5b:95:aa:9f:bd:a1:94:32:03:bd:69:80:
1e:00:5e:01:b6:ca:0d:99:0a:97:1b:41:09:67:21:
12:b5:2e:59:2d:1c:fb:43:5a:f1:dc:4b:a1:cc:e4:
9b:f5:66:30:06:3c:32:0a:ba:33:49:f8:21:52:5d:
e4:1c:fc:7a:75:88:5e:3e:de:c5:8d:64:0a:d4:80:
c5:8d:27:f1:ee:e3:a5:db:0b:91:d8:8b:45:1e:34:
0b:c5:0e:ba:4c:cb:4d:0e:3d:2d:09:45:91:40:53:
f7:d0:f7:62:7a:16:1b:e3:c8:6e:62:ee:77:1b:8a:
93:49:35:44:2d:90:2c:10:a8:2f:ef:6a:b5:ae:6c:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:56:DC:5D:11:11:07:9D:CA:DE:2C:F6:E6:FC:D9:4C:A5:E9:8F:02
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FlbcXRERB53K3iz25vzZTKXpjwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:60:a0:ae:13:c6:07:00:12:e1:fc:95:b0:4e:62:01:bf:68:
7b:fe:d2:e2:1d:73:bd:d8:cf:14:c0:c9:32:cb:d1:01:6c:d9:
06:fd:48:7a:da:68:90:a5:e9:3b:86:36:5f:b1:e5:4c:03:88:
dc:7c:d9:b7:8c:9c:90:c5:27:3e:a8:1b:3d:d9:15:86:8d:82:
ed:cd:81:c4:30:2d:6c:d5:8f:7f:b8:be:3c:6d:70:97:e5:2e:
25:75:cd:ec:34:85:4d:b4:b0:54:57:b8:41:ae:0b:7b:ac:ec:
83:a9:ea:41:6b:4f:1f:f3:63:1f:d0:8d:e5:23:2f:70:de:a8:
cc:42:1c:3a:e2:7c:b4:f6:cd:97:e6:7d:7e:b8:d2:42:67:b5:
1a:11:4b:f1:4b:6c:98:26:35:a8:c6:a9:8e:fe:b5:d4:bd:72:
76:8c:55:8f:27:ea:31:fb:a6:91:9f:2a:43:53:e3:e5:25:f8:
80:de:5a:fb:6c:02:8e:78:7e:e4:63:66:80:a1:6e:3c:27:75:
ca:52:8a:c7:bd:94:e6:c2:01:5e:c4:fc:7b:ed:47:c3:7d:34:
be:fd:b4:11:f1:03:5d:dd:5c:6c:96:c6:32:b5:fa:19:8d:15:
98:ca:ff:78:35:54:41:80:71:50:30:35:83:b8:b9:1a:40:d8:
1d:93:b7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org