Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/FPhyV6CBRYZYgBeaMeqkFd6NQxE.roa
File: FPhyV6CBRYZYgBeaMeqkFd6NQxE.roa (raw, json)
Hash identifier: HVwjWgPQ8sf1K5NTgSSojXbc322oKC+UYpcCCtIs1nc=
Subject key identifier: 14:F8:72:57:A0:81:45:86:58:80:17:9A:31:EA:A4:15:DE:8D:43:11
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 018CC56E6EF0F17AA586F6315C824C0DC3F6
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/FPhyV6CBRYZYgBeaMeqkFd6NQxE.roa
Signing time: Mon 01 Jan 2024 14:29:58 +0000
ROA not before: Mon 01 Jan 2024 14:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209178
IP address blocks: 195.190.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 07:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:6e:f0:f1:7a:a5:86:f6:31:5c:82:4c:0d:c3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Jan 1 14:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14f87257a08145865880179a31eaa415de8d4311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:1f:a2:6b:e0:b0:a2:4a:73:50:77:6e:e2:
42:0b:02:f6:cd:e7:94:7f:79:31:ec:d2:3f:0c:12:
ff:26:3d:85:ae:71:12:7a:4e:1f:a2:2e:31:39:9d:
d2:c1:28:30:8c:bb:2a:06:4d:fd:13:eb:aa:fe:fa:
3f:d3:7a:7e:00:e1:76:be:d7:63:3c:b4:99:5a:90:
88:bf:2b:5e:6d:b7:ac:60:0b:76:5d:32:f5:bf:7e:
20:2d:c8:a9:78:90:75:5c:52:31:d6:c3:39:2d:a5:
a3:91:8d:94:22:48:0a:d7:f1:77:88:84:a9:9f:c9:
ec:83:11:00:c7:09:06:30:b7:d7:ef:23:2f:b4:9d:
c5:f5:d1:f5:69:85:24:74:6f:09:67:08:fa:25:1f:
c1:b6:81:42:99:1c:b1:97:2f:49:6c:0e:26:2f:6a:
9b:50:4c:d6:64:1f:a6:99:40:d7:11:3c:a8:07:58:
60:6e:46:51:70:8d:fe:f8:a4:a1:ff:fe:05:86:24:
98:53:7e:88:42:6f:66:82:99:33:be:a7:8f:60:2e:
53:a7:49:e7:2d:36:56:89:54:eb:9d:35:51:ec:ea:
35:99:62:92:05:dc:e3:d2:1b:a4:c0:e6:c7:22:cf:
cc:03:fe:87:bd:9f:ab:4f:ea:e3:4c:fa:2c:ab:d1:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F8:72:57:A0:81:45:86:58:80:17:9A:31:EA:A4:15:DE:8D:43:11
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/FPhyV6CBRYZYgBeaMeqkFd6NQxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:62:60:d0:0c:9d:01:cb:44:ba:22:e1:13:1c:d1:2c:c7:40:
8c:6a:ad:4c:89:ef:aa:47:4a:d6:03:e5:e5:8a:79:24:d0:bb:
2e:11:97:69:21:a1:64:40:12:21:de:1b:1b:42:19:64:fa:41:
6e:5f:25:8a:8a:63:ee:d5:d9:e0:2a:b4:69:95:32:a2:fe:22:
66:dd:b6:f7:d7:f5:49:b8:6a:e3:40:bd:2d:71:49:ac:c5:13:
01:c0:3d:32:00:df:a3:fe:20:78:e2:87:75:e1:e2:ba:fc:d2:
1c:c9:a4:f5:f7:95:ea:00:95:f3:e5:76:4e:67:38:69:e4:cd:
d2:db:60:62:95:d3:3c:fb:2f:27:6f:cf:a1:b5:2d:89:1a:64:
21:5b:fe:33:bb:ee:da:81:c7:ab:91:6f:93:47:dd:36:aa:93:
b9:17:70:14:30:3b:b1:65:99:00:59:56:5e:25:bb:21:89:78:
bf:17:ea:0c:12:f0:fc:96:3a:f2:c1:f9:aa:54:79:98:a0:70:
46:97:10:6f:8f:bf:75:97:65:a9:8f:a8:87:e5:40:10:0f:a0:
b4:18:2c:4b:07:0c:ab:c2:16:1d:a6:65:8d:9f:73:2d:09:19:
1b:47:31:b0:d7:31:93:5e:02:3b:73:c3:69:45:a7:02:89:18:
80:b0:dc:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbm7w8XqlhvYxXIJMDcP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODQ2NzQxMTM5MjYzMzg4ZDk4NGRiMWU5N2UwMzE2Njlj
NjQ4NmUwHhcNMjQwMTAxMTQyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGY4NzI1N2EwODE0NTg2NTg4MDE3OWEzMWVhYTQxNWRlOGQ0MzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryofomvgsKJKc1B3buJCCwL2zeeU
f3kx7NI/DBL/Jj2FrnESek4foi4xOZ3SwSgwjLsqBk39E+uq/vo/03p+AOF2vtdj
PLSZWpCIvytebbesYAt2XTL1v34gLcipeJB1XFIx1sM5LaWjkY2UIkgK1/F3iISp
n8nsgxEAxwkGMLfX7yMvtJ3F9dH1aYUkdG8JZwj6JR/BtoFCmRyxly9JbA4mL2qb
UEzWZB+mmUDXETyoB1hgbkZRcI3++KSh//4FhiSYU36IQm9mgpkzvqePYC5Tp0nn
LTZWiVTrnTVR7Oo1mWKSBdzj0hukwObHIs/MA/6HvZ+rT+rjTPosq9HCZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBT4cleggUWGWIAXmjHqpBXejUMRMB8GA1UdIwQY
MBaAFJSEZ0ETkmM4jZhNsel+AxZpxkhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElSblFST1NZemlObUUyeDZYNERGbW5HU0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hNDkxMDItMDYxMi00N2EwLTgxMTct
Y2IxMTI1MDA3ZGZiLzEvRlBoeVY2Q0JSWVpZZ0JlYU1lcWtGZDZOUXhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hNDkxMDItMDYxMi00N2EwLTgxMTctY2IxMTI1MDA3ZGZi
LzEvbElSblFST1NZemlObUUyeDZYNERGbW5HU0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw76LMA0G
CSqGSIb3DQEBCwUAA4IBAQChYmDQDJ0By0S6IuETHNEsx0CMaq1Mie+qR0rWA+Xl
inkk0LsuEZdpIaFkQBIh3hsbQhlk+kFuXyWKimPu1dngKrRplTKi/iJm3bb31/VJ
uGrjQL0tcUmsxRMBwD0yAN+j/iB44od14eK6/NIcyaT195XqAJXz5XZOZzhp5M3S
22BildM8+y8nb8+htS2JGmQhW/4zu+7agcerkW+TR902qpO5F3AUMDuxZZkAWVZe
JbshiXi/F+oMEvD8ljrywfmqVHmYoHBGlxBvj791l2Wpj6iH5UAQD6C0GCxLBwyr
whYdpmWNn3MtCRkbRzGw1zGTXgI7c8NpRacCiRiAsNy0
-----END CERTIFICATE-----
Generated at Tue Feb 27 10:26:53 2024 by rpki-client on console-ams.rpki-client.org