Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/FmEm4VkylsTnPnlnFl6xvbAxDfs.roa
File: FmEm4VkylsTnPnlnFl6xvbAxDfs.roa (raw, json)
Hash identifier: T8R+r3KWFSphoKJQTQwOeI07X5kV71ClFg3RMt8GyDg=
Subject key identifier: 16:61:26:E1:59:32:96:C4:E7:3E:79:67:16:5E:B1:BD:B0:31:0D:FB
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFA9B8957DAE39686ECE52BA7B51F7
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/FmEm4VkylsTnPnlnFl6xvbAxDfs.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198652
IP address blocks: 194.120.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 14:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a9:b8:95:7d:ae:39:68:6e:ce:52:ba:7b:51:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=166126e1593296c4e73e7967165eb1bdb0310dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:a5:61:0c:73:80:99:b2:22:df:1c:9a:03:
e2:e3:0c:cc:ca:8c:30:0f:eb:2b:29:eb:64:25:67:
d5:3e:49:41:08:3a:a5:e2:02:ef:16:64:cc:1a:23:
30:5a:db:97:59:0b:b9:fa:d1:9a:aa:9e:b2:e7:22:
6a:a5:74:25:4e:33:50:ac:18:e1:a0:fe:38:f1:75:
e5:52:35:b8:7d:28:d4:3d:c2:8f:34:d6:c3:97:1c:
a7:38:e2:9e:1b:61:3d:bc:f1:cb:08:4f:67:96:5b:
9d:13:86:f8:4d:ad:f4:fc:9f:73:9a:60:63:ed:93:
99:97:0c:00:02:54:45:07:dc:2c:af:84:a6:80:a9:
6d:7d:cc:91:07:53:4e:fc:64:2f:9e:f7:2d:22:9d:
b7:f7:77:52:e0:c2:b4:74:d4:71:49:bd:a7:89:6a:
21:79:28:a0:e4:d7:4d:64:ae:82:99:13:17:aa:80:
bf:a7:13:5a:1a:6a:af:7a:83:19:91:70:66:e5:63:
e4:46:3a:6c:24:fd:29:8f:ca:6e:a0:7c:e4:c2:78:
67:5c:0c:53:13:f1:f5:e7:6f:98:0e:b1:7a:6b:8b:
22:7c:17:01:cb:1d:6e:ef:30:28:6f:57:87:5d:af:
c6:c3:9b:b5:08:5f:a9:b1:fd:40:dd:85:69:ca:87:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:61:26:E1:59:32:96:C4:E7:3E:79:67:16:5E:B1:BD:B0:31:0D:FB
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/FmEm4VkylsTnPnlnFl6xvbAxDfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:30:bc:9b:65:39:ae:52:57:1b:57:e8:2f:a0:0b:35:99:da:
f2:65:9d:8a:62:71:a1:7a:a3:af:3a:ee:da:fc:b6:f2:7e:01:
ab:70:34:2f:05:9b:38:0f:db:10:3e:9d:29:4f:73:bd:7a:72:
39:99:4e:1a:91:07:88:23:33:81:77:78:cb:7c:0b:df:88:94:
3a:43:50:66:be:c9:a4:07:56:c8:42:c3:b7:05:cf:4e:59:46:
94:f9:9c:05:b6:ad:17:f3:26:21:01:ff:0f:af:99:c2:60:eb:
17:01:60:de:e6:48:08:80:36:ba:0a:c3:a0:72:b0:84:9b:a4:
f1:b8:7a:d9:df:88:8c:91:1d:6f:b3:52:d0:19:78:cf:49:f8:
d8:82:2b:e7:28:fe:2f:12:93:16:55:89:8b:16:eb:7c:39:28:
5f:41:42:4c:21:03:e2:93:e1:ae:1d:c6:78:39:fc:bf:ac:c5:
02:d6:b0:1b:1c:60:56:79:71:bf:70:91:7c:8c:8b:0b:d5:5f:
d0:f0:1c:2e:e8:df:6c:02:ec:5b:8d:8c:a4:45:d8:97:f8:0c:
dc:f2:e6:57:fa:85:3c:db:8b:44:38:1d:52:3c:b5:9e:74:25:
46:c6:d1:f8:df:bb:8a:4d:2b:32:b9:12:d4:66:b4:68:21:d9:
9a:c0:2d:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI36m4lX2uOWhuzlK6e1H3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwMTAyMDYzMjMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjYxMjZlMTU5MzI5NmM0ZTczZTc5NjcxNjVlYjFiZGIwMzEwZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O2lYQxzgJmyIt8cmgPi4wzMyoww
D+srKetkJWfVPklBCDql4gLvFmTMGiMwWtuXWQu5+tGaqp6y5yJqpXQlTjNQrBjh
oP448XXlUjW4fSjUPcKPNNbDlxynOOKeG2E9vPHLCE9nlludE4b4Ta30/J9zmmBj
7ZOZlwwAAlRFB9wsr4SmgKltfcyRB1NO/GQvnvctIp2393dS4MK0dNRxSb2niWoh
eSig5NdNZK6CmRMXqoC/pxNaGmqveoMZkXBm5WPkRjpsJP0pj8puoHzkwnhnXAxT
E/H152+YDrF6a4sifBcByx1u7zAob1eHXa/Gw5u1CF+psf1A3YVpyocF7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZhJuFZMpbE5z55ZxZesb2wMQ37MB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvRm1FbTRWa3lsc1RuUG5sbkZsNnh2YkF4RGZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwniQMA0G
CSqGSIb3DQEBCwUAA4IBAQB+MLybZTmuUlcbV+gvoAs1mdryZZ2KYnGheqOvOu7a
/LbyfgGrcDQvBZs4D9sQPp0pT3O9enI5mU4akQeIIzOBd3jLfAvfiJQ6Q1Bmvsmk
B1bIQsO3Bc9OWUaU+ZwFtq0X8yYhAf8Pr5nCYOsXAWDe5kgIgDa6CsOgcrCEm6Tx
uHrZ34iMkR1vs1LQGXjPSfjYgivnKP4vEpMWVYmLFut8OShfQUJMIQPik+GuHcZ4
Ofy/rMUC1rAbHGBWeXG/cJF8jIsL1V/Q8Bwu6N9sAuxbjYykRdiX+Azc8uZX+oU8
24tEOB1SPLWedCVGxtH437uKTSsyuRLUZrRoIdmawC0Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org