Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FG28s_YCWVRNDeeg_x_RwzaohZg.roa
File: FG28s_YCWVRNDeeg_x_RwzaohZg.roa (raw, json)
Hash identifier: 8veRJZXQqdRDX4mcSty7nytXTLlQlWBaQRKl0c6KlEc=
Subject key identifier: 14:6D:BC:B3:F6:02:59:54:4D:0D:E7:A0:FF:1F:D1:C3:36:A8:85:98
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369F76C415670E9FF3CC16177F88AA4
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FG28s_YCWVRNDeeg_x_RwzaohZg.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 146.19.21.0/24 maxlen: 24
185.244.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 09:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f7:6c:41:56:70:e9:ff:3c:c1:61:77:f8:8a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=146dbcb3f60259544d0de7a0ff1fd1c336a88598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:c3:17:7d:ec:c2:af:df:dc:aa:e4:dc:85:
c8:27:75:ef:b3:55:05:40:44:23:5c:4a:7a:f9:84:
99:60:d0:86:78:01:d7:26:fa:0b:c8:fb:20:9a:53:
35:36:a2:72:16:2b:91:58:16:95:92:6b:63:44:61:
db:3a:65:5a:17:a0:0f:01:d8:33:7b:d5:75:1c:4a:
37:80:ef:ce:78:08:b0:8a:be:3f:f0:b3:6a:29:ff:
9c:50:0c:fa:36:f7:2c:cc:b2:e6:ad:21:fc:31:03:
19:18:bc:2a:e7:e5:05:fb:3c:38:f6:64:83:3a:6e:
fb:ab:e0:84:79:95:17:93:9d:1f:34:94:53:71:1d:
25:33:64:d5:30:3c:46:c6:94:38:ee:f3:22:bb:cb:
f4:8d:f2:54:16:58:ad:fb:11:1e:05:0c:74:71:53:
86:d6:8d:94:0a:4a:1a:09:23:95:e9:a2:20:cb:e3:
fc:06:04:ab:de:8e:4c:48:5d:fc:6d:51:61:13:da:
56:55:a4:0e:b2:1c:33:f7:93:ca:aa:37:f3:85:14:
e2:ce:b9:43:d2:4f:99:0d:23:92:ec:30:01:95:f6:
c6:9d:f0:d9:9d:ad:51:4b:a3:09:0f:26:02:30:29:
10:80:2b:a1:3d:ab:05:b3:77:c1:34:ed:6b:2e:7b:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6D:BC:B3:F6:02:59:54:4D:0D:E7:A0:FF:1F:D1:C3:36:A8:85:98
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FG28s_YCWVRNDeeg_x_RwzaohZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.21.0/24
185.244.106.0/24
Signature Algorithm: sha256WithRSAEncryption
70:57:60:d0:f1:ea:c4:0e:bc:bd:e8:e9:92:c3:00:60:de:d7:
0e:b4:71:fa:03:2f:33:47:c5:5d:d2:f4:1d:f5:51:bf:14:dc:
ab:18:42:08:76:bd:49:38:e6:d7:2d:47:b2:e0:5f:7c:00:3f:
9a:bd:da:64:03:1f:d3:09:29:89:96:da:d4:ef:1e:a7:d7:64:
1b:67:51:91:f8:5c:1d:d9:05:84:7e:c5:48:7c:f6:cd:ac:24:
c1:32:03:63:6d:6e:03:60:41:5c:aa:37:86:3f:00:70:fd:40:
5e:2b:4e:c0:4f:e7:d3:e9:91:10:b9:87:27:26:d8:fd:0c:87:
6f:a0:01:38:61:85:71:f5:6c:4c:6b:d9:84:4a:69:00:05:22:
5a:13:d7:06:ed:92:50:be:a2:9c:50:d7:de:3d:a2:28:15:0f:
91:31:98:64:7b:89:26:aa:43:0e:ea:36:a3:4e:a9:e3:45:a2:
ae:ab:93:12:40:4d:32:20:48:f2:c7:09:cc:e1:b9:87:4c:30:
61:1d:2c:06:4e:01:c9:b9:79:2c:44:1d:25:7d:c5:a5:8c:74:
b3:c9:70:81:c9:07:14:5a:5b:a2:03:b6:64:bf:8a:56:bb:f9:
53:4a:cf:18:b9:3a:da:49:dc:70:63:31:20:b2:44:7c:6f:08:
20:e9:6c:ed
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjafdsQVZw6f88wWF3+IqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwMTAxMTk0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDZkYmNiM2Y2MDI1OTU0NGQwZGU3YTBmZjFmZDFjMzM2YTg4NTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ/DF33swq/f3Krk3IXIJ3Xvs1UF
QEQjXEp6+YSZYNCGeAHXJvoLyPsgmlM1NqJyFiuRWBaVkmtjRGHbOmVaF6APAdgz
e9V1HEo3gO/OeAiwir4/8LNqKf+cUAz6NvcszLLmrSH8MQMZGLwq5+UF+zw49mSD
Om77q+CEeZUXk50fNJRTcR0lM2TVMDxGxpQ47vMiu8v0jfJUFlit+xEeBQx0cVOG
1o2UCkoaCSOV6aIgy+P8BgSr3o5MSF38bVFhE9pWVaQOshwz95PKqjfzhRTizrlD
0k+ZDSOS7DABlfbGnfDZna1RS6MJDyYCMCkQgCuhPasFs3fBNO1rLnuKkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBRtvLP2AllUTQ3noP8f0cM2qIWYMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvRkcyOHNfWUNXVlJORGVlZ194X1J3emFvaFpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhMVAwQA
ufRqMA0GCSqGSIb3DQEBCwUAA4IBAQBwV2DQ8erEDry96OmSwwBg3tcOtHH6Ay8z
R8Vd0vQd9VG/FNyrGEIIdr1JOObXLUey4F98AD+avdpkAx/TCSmJltrU7x6n12Qb
Z1GR+Fwd2QWEfsVIfPbNrCTBMgNjbW4DYEFcqjeGPwBw/UBeK07AT+fT6ZEQuYcn
Jtj9DIdvoAE4YYVx9WxMa9mESmkABSJaE9cG7ZJQvqKcUNfePaIoFQ+RMZhke4km
qkMO6jajTqnjRaKuq5MSQE0yIEjyxwnM4bmHTDBhHSwGTgHJuXksRB0lfcWljHSz
yXCByQcUWluiA7Zkv4pWu/lTSs8YuTraSdxwYzEgskR8bwgg6Wzt
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:17:37 2025 by rpki-client