Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/FblpDeCziEORE7Fr6udtzecCNf4.roa
File: FblpDeCziEORE7Fr6udtzecCNf4.roa (raw, json)
Hash identifier: pV7n1I/bKsiLzPUtI0uk3HlT3X9xfZIM8uZ3I7AIfuU=
Subject key identifier: 15:B9:69:0D:E0:B3:88:43:91:13:B1:6B:EA:E7:6D:CD:E7:02:35:FE
Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial: 019344F04EEC031CEB4D05DFBC5216086C47
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/FblpDeCziEORE7Fr6udtzecCNf4.roa
Signing time: Tue 19 Nov 2024 15:00:19 +0000
ROA not before: Tue 19 Nov 2024 15:00:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 109.245.96.0/24 maxlen: 24
109.245.97.0/24 maxlen: 24
109.245.98.0/24 maxlen: 24
109.245.99.0/24 maxlen: 24
109.245.100.0/24 maxlen: 24
109.245.101.0/24 maxlen: 24
109.245.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 14:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:f0:4e:ec:03:1c:eb:4d:05:df:bc:52:16:08:6c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Validity
Not Before: Nov 19 15:00:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15b9690de0b388439113b16beae76dcde70235fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cd:61:8a:03:d7:3f:46:bf:66:d0:b3:a7:96:
9d:46:e0:a8:97:4b:84:10:1d:25:8b:2e:b9:37:d3:
0d:20:7f:e7:a8:78:ca:33:3a:d1:3a:43:4a:d9:e6:
3f:93:76:93:e1:d1:67:75:0e:b9:92:37:2d:dc:2c:
4f:a4:7b:2a:c5:7e:12:da:64:aa:6c:e4:e4:61:1d:
09:9d:15:1b:cf:b8:23:97:9a:df:90:63:25:80:4a:
31:98:45:92:8c:cb:61:93:16:b2:f6:32:1b:e4:64:
0b:9b:08:99:7e:4a:51:cd:71:53:76:95:79:1d:3c:
e8:7d:fb:ff:89:99:57:ea:a6:d4:6e:0d:b9:17:84:
2b:7a:d7:6d:26:91:79:02:a4:0f:bd:34:88:63:92:
52:3c:82:89:55:03:c6:48:be:14:0a:2a:8f:9a:6e:
d2:92:f8:89:1c:d9:49:32:cc:c7:f2:24:6d:c7:b4:
b7:ce:4b:19:fe:e5:a7:cd:aa:cd:01:2b:e9:d7:37:
0c:a7:96:99:35:cb:a5:c5:bf:cf:bc:fc:07:32:3b:
bf:66:1a:f7:be:e2:25:bf:98:a1:f0:c9:a8:66:44:
9c:03:25:61:8f:4e:d8:7e:5b:0c:e6:73:94:a2:e1:
5f:dc:13:7b:d8:89:04:a7:1a:84:98:5d:9c:ed:65:
01:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:69:0D:E0:B3:88:43:91:13:B1:6B:EA:E7:6D:CD:E7:02:35:FE
X509v3 Authority Key Identifier:
keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/FblpDeCziEORE7Fr6udtzecCNf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.245.96.0-109.245.101.255
109.245.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:6a:81:74:4b:28:ee:29:ab:bb:e9:12:ef:93:b6:8d:c9:cd:
87:b6:6f:ce:b6:ad:e2:c8:81:63:a9:76:90:42:67:41:eb:0b:
82:3d:f8:b9:ed:a6:66:9a:6c:1e:e6:56:17:4d:28:3c:0d:42:
c2:91:57:45:0d:18:4b:44:46:ab:2d:db:19:7c:b2:dd:95:6b:
0e:9e:eb:58:2f:86:0f:55:80:0e:b5:d2:b2:fc:70:4d:97:97:
3c:59:e4:53:7e:83:a5:88:ba:de:68:c7:f1:1b:90:c5:aa:ae:
95:de:77:2c:5f:b2:60:ba:21:2f:b8:17:85:ba:1a:df:51:2c:
d0:b6:a0:60:08:91:3b:e0:09:3d:d3:5d:d9:68:b4:e8:41:07:
d8:c4:00:ab:b0:b6:d2:6e:5e:89:26:22:d3:8d:81:ec:65:f1:
da:10:bc:2d:d6:5b:4e:fa:8a:f1:2e:16:a7:e0:5d:fa:72:6d:
8d:bc:a0:df:57:8d:88:de:a1:a9:3b:23:62:60:bd:48:78:85:
09:81:74:72:66:2c:8c:44:dd:4a:38:79:30:ec:79:b7:6a:0b:
92:96:23:1d:ae:b5:2e:01:d3:fa:f8:72:8e:89:40:fb:4f:0a:
55:e6:72:dc:f9:b3:10:70:9b:f5:b4:bf:db:4f:62:83:85:41:
41:d5:fc:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:46 2025 by rpki-client