Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/FLMAFEy0_AALy0UT4o0aNcZh1IM.roa
File: FLMAFEy0_AALy0UT4o0aNcZh1IM.roa (raw, json)
Hash identifier: ry7TmzceTlooecGlvhzSojalJMSUMZfM/lDLFZAeqm0=
Subject key identifier: 14:B3:00:14:4C:B4:FC:00:0B:CB:45:13:E2:8D:1A:35:C6:61:D4:83
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 01886401447C0EB5C9DA37465D534EB13352
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/FLMAFEy0_AALy0UT4o0aNcZh1IM.roa
Signing time: Sun 28 May 2023 20:16:24 +0000
ROA not before: Sun 28 May 2023 20:16:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43019
IP address blocks: 77.75.91.0/24 maxlen: 24
77.75.89.0/24 maxlen: 24
77.75.90.0/24 maxlen: 24
77.75.88.0/24 maxlen: 24
185.206.201.212/30 maxlen: 30
77.75.94.0/24 maxlen: 24
77.75.95.0/24 maxlen: 24
77.75.93.0/24 maxlen: 24
77.75.92.0/24 maxlen: 24
185.206.203.0/24 maxlen: 24
185.206.201.0/24 maxlen: 24
185.206.202.0/24 maxlen: 24
185.206.200.0/24 maxlen: 24
185.206.201.144/28 maxlen: 28
77.75.95.128/27 maxlen: 27
2a0b:3f80:0:204::/64 maxlen: 64
2a0b:3f87:fc1b::/48 maxlen: 48
2a0b:3f87::/32 maxlen: 32
2a0b:3f87:fc20::/48 maxlen: 48
2a0b:3f80::/32 maxlen: 32
2a0b:3f86::/32 maxlen: 32
2a0b:3f87:fc19::/48 maxlen: 48
2a0b:3f85::/32 maxlen: 32
2a0b:3f82::/32 maxlen: 32
2a0b:3f80:0:203::/64 maxlen: 64
2a0b:3f80:3::/126 maxlen: 126
2a0b:3f80:2::/126 maxlen: 126
2a0b:3f83::/32 maxlen: 32
2a0b:3f80::/29 maxlen: 29
2a0b:3f80:15::/48 maxlen: 48
2a0b:3f87:fc1a::/48 maxlen: 48
2a0b:3f80:0:201::/64 maxlen: 64
2a0b:3f81::/32 maxlen: 32
2a0b:3f80:0:202::/64 maxlen: 64
2a0b:3f87:fc18::/48 maxlen: 48
2a0b:3f84::/32 maxlen: 32
2a0b:3f81::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:64:01:44:7c:0e:b5:c9:da:37:46:5d:53:4e:b1:33:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: May 28 20:16:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14b300144cb4fc000bcb4513e28d1a35c661d483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:37:02:90:7b:fa:48:a1:f9:e2:0d:db:99:
4b:9c:42:d9:81:46:f1:1f:43:27:ac:82:ab:4c:3f:
0a:23:a5:8b:02:d9:fc:c4:f8:95:96:c9:77:3e:b4:
97:5a:89:d6:a2:c0:15:19:62:8f:c9:de:92:a0:da:
c7:79:15:34:7f:65:b3:5e:bb:fa:95:7c:10:e5:ea:
1d:4c:ea:5d:1a:6d:47:15:c2:a2:66:b0:02:0c:47:
4c:9d:0d:c7:1b:35:92:28:f9:81:99:89:48:da:37:
83:37:af:45:26:51:54:89:48:24:81:55:ac:e4:44:
3b:3c:98:dc:90:44:4e:1c:db:b9:9f:be:c8:86:ca:
ef:00:43:d6:e6:f7:4b:40:c6:78:a5:df:cc:32:16:
de:7f:ea:e1:67:89:bb:a7:81:e4:6b:7f:aa:7f:be:
b7:b8:a7:29:98:d9:e3:34:eb:ab:b4:fd:bd:3b:30:
bb:f6:d6:00:1d:62:91:6b:f0:85:42:fd:b3:2a:9a:
fc:8d:9a:ab:bf:bd:cf:2a:3c:38:d2:f5:e9:94:eb:
a7:eb:89:e0:79:93:be:7a:ae:fe:6e:17:a6:71:f8:
2e:60:de:19:f8:43:91:ba:84:74:4e:2e:d1:45:08:
51:2c:fc:5d:a6:db:99:eb:d6:7a:5a:85:ce:4a:2e:
d2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B3:00:14:4C:B4:FC:00:0B:CB:45:13:E2:8D:1A:35:C6:61:D4:83
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/FLMAFEy0_AALy0UT4o0aNcZh1IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.88.0/21
185.206.200.0/22
IPv6:
2a0b:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
06:b7:3d:56:5e:23:f4:c2:29:67:aa:38:3a:01:aa:8c:cb:f2:
0e:5d:7f:c6:46:68:15:8c:b3:93:01:36:00:7c:9b:c6:5f:e1:
8d:42:3b:65:5b:02:39:4c:1e:c9:f7:75:2b:d1:18:9d:95:d7:
31:dd:65:6b:43:f7:88:18:ac:78:50:79:04:3f:92:f2:63:89:
d2:32:58:87:28:cf:6d:e2:91:aa:f7:97:90:be:ff:78:ef:6c:
81:8f:2c:fe:21:3e:bf:9e:f7:48:90:32:56:c4:30:4c:0f:6e:
ba:fc:bb:14:71:6e:8e:97:27:62:a5:f8:ca:22:dc:bc:9b:b0:
f8:d9:0b:2c:5f:08:40:bb:db:dc:28:4a:2e:2e:2e:41:d8:85:
65:5a:f5:5a:c7:6b:f1:f6:b7:e0:70:45:e4:71:fd:72:7f:1c:
68:b5:76:45:2f:89:01:9c:19:21:76:9e:73:fc:c1:ae:5a:ee:
8c:c8:bc:18:e1:b7:29:5e:07:59:96:9c:91:50:8f:b4:43:f0:
5d:bc:a8:8d:9f:ea:22:2e:60:11:cb:ec:5b:8e:0e:f2:6c:9c:
5b:cf:4b:f7:76:05:db:02:0c:d3:62:61:ba:20:d1:a0:d3:4e:
bf:2e:c8:59:a0:cf:51:dd:ec:d5:47:8e:27:57:33:82:f7:47:
0c:40:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:43 2024 by rpki-client on console.sobornost.net