Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/FlX_HBYUyKciplwmGIeU7OOTPJE.roa
File: FlX_HBYUyKciplwmGIeU7OOTPJE.roa (raw, json)
Hash identifier: Pj7RA1xt5Z/WknWTK1DhiSazVgpcCUBgxfNAZuQCDQU=
Subject key identifier: 16:55:FF:1C:16:14:C8:A7:22:A6:5C:26:18:87:94:EC:E3:93:3C:91
Certificate issuer: /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial: 018DF3AE4171B811112B498252CFC3C525AE
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/FlX_HBYUyKciplwmGIeU7OOTPJE.roa
Signing time: Thu 29 Feb 2024 07:04:59 +0000
ROA not before: Thu 29 Feb 2024 07:04:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210220
IP address blocks: 91.213.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 07:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:ae:41:71:b8:11:11:2b:49:82:52:cf:c3:c5:25:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Validity
Not Before: Feb 29 07:04:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1655ff1c1614c8a722a65c26188794ece3933c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9f:1c:33:00:b7:08:93:2a:a4:50:c2:84:b9:
dd:15:f5:31:b5:e3:1a:4f:0f:be:a0:7e:81:29:5d:
93:a8:49:4f:89:d1:79:ac:14:60:47:ec:36:43:7e:
c2:bf:09:d0:76:35:df:b2:66:e6:30:d6:4a:76:e2:
f2:a4:83:56:b3:33:c8:04:2e:93:01:6a:12:49:d7:
f3:3a:87:a1:ed:ae:60:c0:65:be:bf:cd:e8:b4:95:
e8:99:30:e7:20:15:af:c0:6e:8e:fb:a2:eb:f6:1c:
de:31:f4:96:3b:1d:6f:45:da:10:9b:3b:cc:8d:a3:
f5:ad:fd:75:53:2d:8b:1c:5e:49:27:62:ad:fe:39:
6b:13:e6:c3:b1:bc:37:be:9d:c9:2c:23:d6:9f:71:
5f:8a:45:b2:e7:69:ad:78:5f:04:95:cd:df:70:33:
5a:a6:88:72:08:82:09:27:14:2e:d9:b4:9b:23:2b:
7f:b2:32:7e:2d:34:52:d7:77:37:01:43:f3:97:b5:
3e:28:f3:86:af:72:0e:49:32:9f:7a:56:3b:59:7d:
fb:a4:fa:29:4f:cc:a9:4e:ff:30:cc:af:35:97:66:
a0:cd:66:07:cd:4f:08:cf:19:96:2b:24:89:13:9e:
ce:1c:73:14:5c:12:5c:1e:2f:4f:21:b2:b3:fd:d1:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:55:FF:1C:16:14:C8:A7:22:A6:5C:26:18:87:94:EC:E3:93:3C:91
X509v3 Authority Key Identifier:
keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/FlX_HBYUyKciplwmGIeU7OOTPJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.96.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:8d:26:1f:70:2e:d0:d0:59:8a:fb:64:ea:e5:e5:df:6a:67:
a1:97:8b:4d:17:c9:db:69:80:21:5e:85:ad:c9:3b:65:b8:dd:
c5:45:de:4e:95:94:90:e5:c2:72:c7:52:0b:5f:15:32:49:db:
eb:d2:14:20:d0:93:8b:95:08:f4:6d:20:f9:35:e2:0e:85:2a:
de:98:9d:21:33:33:39:93:ca:95:4e:b5:a4:be:86:ad:ee:b4:
d3:c9:7e:a8:b3:00:77:fc:1a:5f:df:3f:18:5e:93:68:40:fb:
a3:e1:b7:45:78:00:64:7b:01:b1:06:56:ed:cc:6d:a7:cf:58:
37:69:19:39:72:f2:d6:3c:c4:37:34:ee:79:e9:b3:9c:dc:e5:
ae:cc:45:4d:98:69:41:94:d8:f2:d6:6c:94:c3:09:fa:d4:4b:
30:42:0c:d2:5f:01:62:25:89:ac:99:03:bb:a6:06:02:72:e0:
c5:a6:99:d3:97:42:04:0e:58:bb:b0:c2:93:eb:a5:d0:d9:6d:
8a:e0:62:34:93:67:65:53:a4:06:e5:f9:2a:8e:46:b9:ec:0b:
8e:f8:09:19:9f:f5:b8:17:d4:99:60:6a:75:9f:d7:a7:89:a2:
70:c6:a1:6f:ae:48:09:4d:7b:a9:87:6b:2b:7f:fd:31:22:07:
e3:72:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:26 2024 by rpki-client on console-fra.rpki-client.org