Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/FNC4-abul_jpAytz49cjFYqVo4k.roa
File: FNC4-abul_jpAytz49cjFYqVo4k.roa (raw, json)
Hash identifier: QVOh4XTG3qmxGlxFQedTH/QeB6LBbzGQ00GA9xqm/FM=
Subject key identifier: 14:D0:B8:F9:A6:EE:97:F8:E9:03:2B:73:E3:D7:23:15:8A:95:A3:89
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 018CC86FE28B39B84AD82B84FC7AF357DE32
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/FNC4-abul_jpAytz49cjFYqVo4k.roa
Signing time: Tue 02 Jan 2024 04:30:24 +0000
ROA not before: Tue 02 Jan 2024 04:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60051
IP address blocks: 185.71.205.0/24 maxlen: 24
185.71.206.0/24 maxlen: 24
185.71.204.0/24 maxlen: 24
185.71.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e2:8b:39:b8:4a:d8:2b:84:fc:7a:f3:57:de:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Jan 2 04:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14d0b8f9a6ee97f8e9032b73e3d723158a95a389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:19:d7:4e:de:e5:a2:12:de:1e:95:93:45:
b8:0a:fc:9f:fe:f0:08:eb:0c:b0:b0:91:be:35:f7:
46:80:9d:82:16:73:f9:d6:11:05:5f:7a:74:d6:e7:
3d:1d:51:fe:9e:07:3f:a6:08:8a:0a:00:34:50:87:
97:c0:de:47:54:61:b3:06:57:e9:f7:a7:12:6d:47:
99:0e:39:d1:c4:75:c8:f1:c6:c6:cc:ac:fa:df:6e:
44:60:af:f8:32:10:ea:01:7e:74:a5:ef:59:b8:a3:
21:36:b1:9f:c1:f5:21:2c:07:bf:b5:95:69:47:7a:
37:3f:82:8b:80:e4:fa:e8:48:48:69:04:66:40:21:
af:c7:65:45:e0:4c:52:6e:c0:fb:df:42:86:bb:f9:
eb:cb:33:b2:31:39:a6:9d:16:99:39:40:1d:38:9b:
9c:16:0b:c5:04:41:d3:c0:fe:be:f2:78:9e:ab:b1:
7c:f7:33:4f:bc:39:b2:fe:76:6d:2c:ed:90:2b:76:
1c:18:b6:dd:9a:c5:13:a7:20:1a:6f:24:37:89:1f:
2d:25:56:c1:ce:98:54:59:97:6d:99:4d:01:33:3b:
b4:7f:1e:51:29:7f:5c:e7:7d:28:e6:17:0c:77:0d:
fe:a5:32:d0:0a:cc:7c:4c:dd:3b:d8:e3:04:da:6a:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D0:B8:F9:A6:EE:97:F8:E9:03:2B:73:E3:D7:23:15:8A:95:A3:89
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/FNC4-abul_jpAytz49cjFYqVo4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.204.0/22
Signature Algorithm: sha256WithRSAEncryption
82:ad:2c:87:bb:23:66:ae:90:88:01:de:4b:8a:8c:e0:aa:3d:
26:8a:ad:7a:4e:0b:0c:41:82:b9:23:a2:67:c0:69:77:88:8b:
d5:d1:81:26:51:1c:50:75:a4:27:78:65:c0:0e:96:c7:9d:55:
c5:f0:a1:19:73:62:15:f3:58:12:fb:06:ef:d2:be:6a:ba:82:
8a:66:22:6a:84:06:30:17:c5:f8:71:94:f4:5a:20:7c:68:c8:
42:0e:a7:45:83:d1:41:c7:8b:c9:1a:c8:40:6a:3b:06:4f:e3:
6b:09:a3:6a:04:02:46:2d:a6:be:26:69:c2:04:49:c9:c4:d1:
68:8f:b6:34:3c:e9:f7:39:07:fb:29:a0:18:a7:43:99:10:7d:
a9:c2:4b:27:01:34:fa:17:32:6d:8d:e7:df:1c:3b:e0:90:6d:
a5:62:a6:7f:b6:b2:b6:6e:63:f1:65:98:69:a4:4d:46:38:af:
9f:35:4b:f0:cd:bd:fb:a5:54:9f:83:29:9b:54:a9:35:a0:8b:
4c:0e:c3:af:b7:8b:9c:88:39:1b:7e:2f:84:fe:8f:26:d6:09:
05:56:1b:05:fb:f4:3d:e0:8e:95:9b:6d:2f:dc:6c:18:fb:7d:
fb:d2:0f:05:c6:26:af:32:cd:87:42:98:37:18:f4:a3:94:be:
74:0e:c3:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb+KLObhK2CuE/HrzV94yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx
NTVjZGMwHhcNMjQwMTAyMDQzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGQwYjhmOWE2ZWU5N2Y4ZTkwMzJiNzNlM2Q3MjMxNThhOTVhMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUIZ107e5aIS3h6Vk0W4Cvyf/vAI
6wywsJG+NfdGgJ2CFnP51hEFX3p01uc9HVH+ngc/pgiKCgA0UIeXwN5HVGGzBlfp
96cSbUeZDjnRxHXI8cbGzKz6325EYK/4MhDqAX50pe9ZuKMhNrGfwfUhLAe/tZVp
R3o3P4KLgOT66EhIaQRmQCGvx2VF4ExSbsD730KGu/nryzOyMTmmnRaZOUAdOJuc
FgvFBEHTwP6+8nieq7F89zNPvDmy/nZtLO2QK3YcGLbdmsUTpyAabyQ3iR8tJVbB
zphUWZdtmU0BMzu0fx5RKX9c530o5hcMdw3+pTLQCsx8TN072OME2mp50QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTQuPmm7pf46QMrc+PXIxWKlaOJMB8GA1UdIwQY
MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt
ZDAxMmNhOWVjMTk3LzEvRk5DNC1hYnVsX2pwQXl0ejQ5Y2pGWXFWbzRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3
LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUfMMA0G
CSqGSIb3DQEBCwUAA4IBAQCCrSyHuyNmrpCIAd5Liozgqj0miq16TgsMQYK5I6Jn
wGl3iIvV0YEmURxQdaQneGXADpbHnVXF8KEZc2IV81gS+wbv0r5quoKKZiJqhAYw
F8X4cZT0WiB8aMhCDqdFg9FBx4vJGshAajsGT+NrCaNqBAJGLaa+JmnCBEnJxNFo
j7Y0POn3OQf7KaAYp0OZEH2pwksnATT6FzJtjeffHDvgkG2lYqZ/trK2bmPxZZhp
pE1GOK+fNUvwzb37pVSfgymbVKk1oItMDsOvt4uciDkbfi+E/o8m1gkFVhsF+/Q9
4I6Vm20v3GwY+3370g8FxiavMs2HQpg3GPSjlL50DsOE
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:46:44 2025 by rpki-client