Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/FVat7UD-CozBETG0saU29Vkszf8.roa
File: FVat7UD-CozBETG0saU29Vkszf8.roa (raw, json)
Hash identifier: F98ifQIxyXcMXll4XJCyVYNfsU2RDvaCynA3XqKd/YQ=
Subject key identifier: 15:56:AD:ED:40:FE:0A:8C:C1:11:31:B4:B1:A5:36:F5:59:2C:CD:FF
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0192FAFA039F8C8A7FCBEF3635011F82F849
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/FVat7UD-CozBETG0saU29Vkszf8.roa
Signing time: Tue 05 Nov 2024 06:19:01 +0000
ROA not before: Tue 05 Nov 2024 06:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3758
IP address blocks: 45.86.188.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 06:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fa:fa:03:9f:8c:8a:7f:cb:ef:36:35:01:1f:82:f8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Nov 5 06:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1556aded40fe0a8cc11131b4b1a536f5592ccdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:15:30:bb:4b:66:85:46:2e:fe:94:1c:62:
b6:70:e0:99:ec:d5:b4:e5:68:99:84:76:a6:c6:bc:
50:92:92:e4:92:6b:48:7d:6c:0a:76:95:b9:9f:65:
68:64:24:5b:7e:52:b6:77:79:c4:5a:13:08:37:ba:
ab:8a:74:92:ea:e1:26:c3:0f:7b:8d:6d:94:4c:7e:
fa:0a:4f:b3:dc:de:d2:85:14:97:49:77:6a:ec:52:
85:53:43:07:ac:be:4b:27:bf:3d:ef:1c:63:e2:b7:
98:b7:af:6a:72:ae:65:cf:23:e6:87:3f:19:62:c1:
ec:10:e2:b5:3b:c5:de:97:8a:73:9c:58:5a:5f:2c:
2d:18:8b:47:c1:2a:71:0e:e0:22:da:e6:48:0d:6c:
29:c1:5a:e5:cc:f9:1f:c5:dd:43:7e:5e:e6:ee:64:
16:16:34:c9:50:62:a5:a7:03:80:45:58:c4:0f:ad:
c6:71:23:c6:35:88:a8:dd:af:98:ea:1e:70:c2:ac:
5a:9a:17:00:90:a4:c7:49:23:8b:00:b4:fe:75:43:
36:06:16:c1:8d:2f:e3:61:a9:92:51:e8:ca:1e:85:
4d:e2:12:9b:ab:58:0e:75:7b:2a:ac:e6:8f:da:30:
94:6a:59:06:e4:14:30:88:01:25:2f:49:16:9d:cf:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:56:AD:ED:40:FE:0A:8C:C1:11:31:B4:B1:A5:36:F5:59:2C:CD:FF
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/FVat7UD-CozBETG0saU29Vkszf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.188.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:49:a4:61:b4:dd:92:d5:8f:01:e2:25:1e:d6:f1:e4:ab:ce:
19:b7:c5:3d:29:2b:d3:8a:08:da:4f:3d:13:4a:53:ae:95:99:
6e:57:cd:7e:c5:62:58:27:0b:ad:2e:06:8d:18:05:17:95:b2:
77:eb:55:69:2a:3b:7f:0b:d4:f8:93:54:56:1e:b8:d9:a0:52:
e8:97:c5:16:eb:b3:df:9a:c4:6d:cb:f5:48:ce:e3:46:92:12:
73:d9:89:ba:1f:63:11:99:1a:a0:5f:03:de:d7:fe:19:7b:58:
24:3a:8b:59:a2:3c:31:5b:fe:2b:6f:5a:79:59:7e:b3:5a:07:
21:4d:3e:b9:a8:c3:af:72:34:cf:08:f3:e8:a8:d5:6e:71:29:
0a:b8:b7:5e:ba:a1:ee:31:46:e3:92:7b:5c:a8:5e:7f:9f:05:
33:a3:b1:c1:f8:1a:e4:0c:fb:11:a9:78:ff:9b:c5:7f:7c:9d:
e0:a0:c0:1f:89:d7:eb:d1:49:b6:15:e0:d6:24:56:e2:68:5a:
93:c6:3b:31:81:a0:27:a4:37:36:e3:ca:c6:e0:70:f5:be:d7:
a9:36:db:96:c7:41:de:cb:bb:3b:56:c4:18:38:34:e6:e2:20:
4a:9d:e8:fd:01:18:d0:86:8e:75:10:55:05:17:fe:b6:c6:71:
39:22:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:52:22 2025 by rpki-client