Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/FKnIB-eSN3IgFEX7CQmeVgqgNT4.roa
File: FKnIB-eSN3IgFEX7CQmeVgqgNT4.roa (raw, json)
Hash identifier: /58Y2krJKTxzITfF0Lpw0CDU+JpRUwfZ+b5/t698Mfw=
Subject key identifier: 14:A9:C8:07:E7:92:37:72:20:14:45:FB:09:09:9E:56:0A:A0:35:3E
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 018CC50124108BB229BDCC3DADC8E4F6A2B9
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/FKnIB-eSN3IgFEX7CQmeVgqgNT4.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15511
IP address blocks: 185.115.103.0/24 maxlen: 24
185.115.102.0/24 maxlen: 24
185.115.101.0/24 maxlen: 24
185.115.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 08:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:24:10:8b:b2:29:bd:cc:3d:ad:c8:e4:f6:a2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14a9c807e7923772201445fb09099e560aa0353e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:12:71:64:54:98:fb:8a:0f:09:a7:2b:88:
3a:24:a0:c1:87:8b:53:9c:e8:78:62:71:7c:19:46:
63:53:db:e1:1d:13:48:5a:b4:2f:4d:6e:1a:26:c2:
44:f9:90:89:5a:e3:0c:ad:35:30:6f:4e:35:74:9d:
09:36:05:c5:08:44:07:2a:6c:97:27:18:3e:07:fd:
ff:4b:a8:2e:11:00:9f:e0:a4:98:15:73:0a:d1:98:
a2:45:65:d1:47:4b:14:8a:96:60:1c:2b:a2:c3:c7:
94:a2:7d:6f:80:41:36:3f:33:c9:20:4a:3d:b1:62:
c3:2a:17:18:68:d2:17:93:ff:5d:f8:58:86:54:aa:
7e:3a:9f:5e:0c:68:4a:ae:a0:50:b9:ba:f8:a5:88:
b0:62:e6:03:cb:38:d9:5a:89:d2:83:b9:39:bf:82:
60:fa:51:e4:9f:dd:b8:2e:fe:08:a8:ed:e4:f3:16:
8b:80:c4:d2:4f:ab:d2:5e:f4:6e:3b:4b:3a:2c:1b:
71:b0:2b:19:dc:11:a4:f4:28:a5:b0:fa:58:c1:89:
c9:6e:e5:8f:52:7f:9e:f3:85:ad:03:db:6f:0f:ae:
74:b9:7e:a4:cf:5c:4d:e5:0e:3b:b0:34:e3:e0:81:
a9:9b:65:1e:69:b8:e4:07:ab:dd:6e:3c:c0:30:a2:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A9:C8:07:E7:92:37:72:20:14:45:FB:09:09:9E:56:0A:A0:35:3E
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/FKnIB-eSN3IgFEX7CQmeVgqgNT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
68:18:89:e4:cf:21:64:a2:85:74:4a:29:c6:74:fc:8f:dc:e6:
14:3a:40:a5:73:3b:8a:25:9a:f0:28:7c:bf:e5:b1:1f:9a:c8:
2e:ce:10:88:4b:74:30:00:d4:3c:03:24:6c:51:fc:b9:0a:4c:
85:c8:20:c3:ed:89:5a:18:5a:71:22:7e:45:3a:cc:a4:65:dc:
5f:5f:70:cf:da:9b:90:3b:a0:95:1f:8d:e8:be:e9:93:1c:fb:
46:7f:d2:e1:db:b9:c2:b6:7d:67:64:62:1a:ab:65:f4:43:12:
c1:97:80:8b:a5:e7:66:41:40:05:85:7d:14:50:78:d9:04:01:
2a:e3:3b:34:35:3c:0d:7c:51:9d:0c:00:72:af:3d:f6:fe:a6:
74:c9:1d:91:24:38:b1:fd:13:39:2d:be:73:8f:51:86:60:c3:
4f:39:bf:95:28:8d:45:ea:d8:85:1e:08:97:20:57:d5:ef:7d:
d8:32:48:5c:ba:4a:60:e1:44:f3:75:c0:96:67:67:80:29:99:
f2:63:e9:80:0b:4c:4f:d9:89:99:cc:a2:94:28:2b:7b:cf:5e:
09:70:83:7b:12:c3:9c:de:b8:e2:c8:bf:8c:25:32:1e:66:e4:
1b:85:eb:31:b8:ea:7e:96:7f:e9:29:cd:51:01:c9:00:36:d2:
4c:7e:d5:e1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzFASQQi7Ipvcw9rcjk9qK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NTU1YTc4ODNmOTJiOWY5YmE0MjJhOTZiNGUzOTdiZjVm
YjhmYzcwHhcNMjQwMTAxMTIzMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGE5YzgwN2U3OTIzNzcyMjAxNDQ1ZmIwOTA5OWU1NjBhYTAzNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsgScWRUmPuKDwmnK4g6JKDBh4tT
nOh4YnF8GUZjU9vhHRNIWrQvTW4aJsJE+ZCJWuMMrTUwb041dJ0JNgXFCEQHKmyX
Jxg+B/3/S6guEQCf4KSYFXMK0ZiiRWXRR0sUipZgHCuiw8eUon1vgEE2PzPJIEo9
sWLDKhcYaNIXk/9d+FiGVKp+Op9eDGhKrqBQubr4pYiwYuYDyzjZWonSg7k5v4Jg
+lHkn924Lv4IqO3k8xaLgMTST6vSXvRuO0s6LBtxsCsZ3BGk9CilsPpYwYnJbuWP
Un+e84WtA9tvD650uX6kz1xN5Q47sDTj4IGpm2UeabjkB6vdbjzAMKIw1wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBSpyAfnkjdyIBRF+wkJnlYKoDU+MB8GA1UdIwQY
MBaAFPhVWniD+Sufm6QiqWtOOXv1+4/HMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GVmFlSVA1SzUtYnBDS3BhMDQ1ZV9YN2o4Yy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRm
LTc2NmMwNmU1ZjA3NS8xL0ZLbklCLWVTTjNJZ0ZFWDdDUW1lVmdxZ05UNC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRmLTc2NmMwNmU1ZjA3
NS8xLzEtRlZhZUlQNUs1LWJwQ0twYTA0NWVfWDdqOGMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK5c2Qw
DQYJKoZIhvcNAQELBQADggEBAGgYieTPIWSihXRKKcZ0/I/c5hQ6QKVzO4olmvAo
fL/lsR+ayC7OEIhLdDAA1DwDJGxR/LkKTIXIIMPtiVoYWnEifkU6zKRl3F9fcM/a
m5A7oJUfjei+6ZMc+0Z/0uHbucK2fWdkYhqrZfRDEsGXgIul52ZBQAWFfRRQeNkE
ASrjOzQ1PA18UZ0MAHKvPfb+pnTJHZEkOLH9EzktvnOPUYZgw085v5UojUXq2IUe
CJcgV9XvfdgySFy6SmDhRPN1wJZnZ4ApmfJj6YALTE/ZiZnMopQoK3vPXglwg3sS
w5zeuOLIv4wlMh5m5BuF6zG46n6Wf+kpzVEByQA20kx+1eE=
-----END CERTIFICATE-----
Generated at Tue Apr 15 08:04:12 2025 by rpki-client