Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/FLVTjqxABNBc8KupweWQ1tRdvWM.roa
File: FLVTjqxABNBc8KupweWQ1tRdvWM.roa (raw, json)
Hash identifier: i6T8FMNnA27Of2HBRld/bzBR3v8KtDpUUNUyHIC5vEE=
Subject key identifier: 14:B5:53:8E:AC:40:04:D0:5C:F0:AB:A9:C1:E5:90:D6:D4:5D:BD:63
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 0194221F9BD46F4986CD536C00C4EA79A459
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/FLVTjqxABNBc8KupweWQ1tRdvWM.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58154
IP address blocks: 45.131.220.0/22 maxlen: 24
2a0e:6340::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 14 Jan 2025 09:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9b:d4:6f:49:86:cd:53:6c:00:c4:ea:79:a4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14b5538eac4004d05cf0aba9c1e590d6d45dbd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:65:08:42:87:e4:cc:ae:32:36:95:2c:09:
21:e3:9d:73:b7:e5:d0:b2:b3:b4:ce:ea:b6:49:a1:
df:f3:a7:48:3b:11:08:75:77:51:a7:03:5c:43:a7:
6c:cd:6d:47:78:bd:ea:94:a6:63:cb:f0:ac:0d:7f:
1d:37:2a:29:50:f1:09:68:47:6d:fc:b7:12:ce:76:
b7:c5:7e:35:a9:3f:2a:88:99:68:96:8a:bb:e8:40:
7a:ba:f6:77:42:ec:d6:02:f6:25:cd:1a:5b:03:1c:
01:55:92:cb:41:a3:78:93:dc:6a:a2:a9:76:23:78:
d3:74:51:f9:b0:d6:ec:ff:22:78:1b:8a:14:28:32:
4b:40:23:cf:6d:10:b0:4d:35:28:e1:69:25:69:13:
e6:69:7d:3e:7f:a5:97:00:b2:0e:39:5f:66:57:85:
fe:2f:c6:a5:58:3f:74:be:a3:69:8a:1d:9b:fb:25:
55:c0:c1:58:7b:de:8d:e2:01:0f:8f:6b:2e:09:d5:
c3:85:55:48:a6:d0:68:74:85:9d:08:78:8d:e0:7f:
71:81:cc:bf:bf:75:ae:85:97:cf:aa:a2:a2:f8:6c:
2a:0b:df:2f:10:ed:63:0a:71:f8:f8:92:85:c4:db:
1c:3c:7f:a2:83:cb:ff:7d:7c:e7:d6:bd:d3:4a:53:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B5:53:8E:AC:40:04:D0:5C:F0:AB:A9:C1:E5:90:D6:D4:5D:BD:63
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/FLVTjqxABNBc8KupweWQ1tRdvWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.220.0/22
IPv6:
2a0e:6340::/29
Signature Algorithm: sha256WithRSAEncryption
bf:4a:1f:f8:48:61:54:76:c2:90:c9:44:5d:fc:bf:74:fb:cc:
b9:66:d5:3e:89:64:da:17:a9:cb:9d:8e:a1:ec:51:d6:d3:46:
37:81:28:62:ca:25:a0:0d:57:63:a7:59:b2:6a:d8:a8:c8:58:
7a:a3:01:5b:e1:0d:65:e5:05:d1:57:bc:99:52:62:62:c8:79:
f6:8f:29:1e:15:51:fc:c7:aa:2c:45:ad:64:7b:28:c0:74:1f:
2a:ae:b6:b9:06:46:99:66:6f:33:b7:d6:0c:91:16:97:91:82:
28:69:d0:d6:4d:66:cf:d2:f5:45:6e:0b:30:38:eb:61:e3:51:
18:f1:8b:ba:f7:e0:b4:9c:c3:16:09:20:c8:1f:f8:6c:f9:0c:
4e:eb:a1:2d:8a:e8:07:ea:6e:57:88:e5:b6:48:e4:7b:a2:65:
00:fc:e7:15:8a:07:70:3f:bf:2b:54:e9:de:0a:5c:ed:74:c3:
d7:ab:ce:64:7c:a7:c6:55:32:d3:52:46:d9:cb:d8:cd:a1:cd:
3f:34:14:62:02:d7:98:4b:62:72:fe:89:68:a4:d4:a1:08:37:
73:b6:dd:ca:dd:a3:a1:f9:60:56:c8:5e:3c:7e:fc:2d:27:50:
86:c5:46:22:cf:c4:13:f6:63:8b:74:25:ca:16:f2:f1:5b:ac:
87:1e:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:24:48 2025 by rpki-client