Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/FNGmHS_DeZMajMtNuJsGNRvN3tA.roa
File: FNGmHS_DeZMajMtNuJsGNRvN3tA.roa (raw, json)
Hash identifier: RUjU69FgRacf7GOvz00wH7jm0+WuiUoqLNGuWCMua8w=
Subject key identifier: 14:D1:A6:1D:2F:C3:79:93:1A:8C:CB:4D:B8:9B:06:35:1B:CD:DE:D0
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 0185BC3A64E3AB16CA363D6413BE046FCFEC
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/FNGmHS_DeZMajMtNuJsGNRvN3tA.roa
Signing time: Mon 16 Jan 2023 20:17:01 +0000
ROA not before: Mon 16 Jan 2023 20:17:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 185.138.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bc:3a:64:e3:ab:16:ca:36:3d:64:13:be:04:6f:cf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jan 16 20:17:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14d1a61d2fc379931a8ccb4db89b06351bcdded0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:5f:98:3e:2d:41:4a:83:29:fe:2e:05:9f:
54:07:5b:92:39:d0:c0:bb:5a:36:43:77:53:a4:63:
47:41:ea:62:6d:27:ae:9b:7f:63:06:9d:19:d5:94:
34:03:b6:cd:b1:be:f2:2e:9a:11:2d:d9:cd:92:68:
78:97:2f:47:9b:26:e1:ea:9e:52:e3:74:84:68:dd:
d6:e9:9f:62:4b:8d:35:ec:fc:12:9b:6c:1c:66:12:
48:84:b1:72:0e:d1:04:31:8e:4e:16:95:d5:af:f0:
e6:18:fe:6b:09:1c:4e:e4:f4:25:0d:55:59:87:52:
7b:bf:fa:70:57:72:51:f0:84:b2:2a:36:bb:6e:9c:
02:de:3c:c8:ba:18:4c:24:9f:e2:5d:06:d5:ab:94:
30:f8:34:c3:90:4d:12:5b:a1:bc:2e:9e:52:7b:15:
c0:ee:77:ec:50:a2:d9:a0:88:58:b0:bc:1c:f5:9b:
24:12:01:88:00:e9:17:88:5a:12:a8:63:66:ba:81:
0b:16:28:72:21:fc:36:dc:e0:db:5d:9a:29:1d:cc:
1f:6a:df:18:93:8b:9a:6b:17:8e:5b:97:85:24:97:
b8:3a:11:5f:4d:a5:56:02:73:07:48:d1:20:56:5c:
ab:4a:fc:6f:fa:74:61:3c:ff:84:57:90:c4:0c:08:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D1:A6:1D:2F:C3:79:93:1A:8C:CB:4D:B8:9B:06:35:1B:CD:DE:D0
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/FNGmHS_DeZMajMtNuJsGNRvN3tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.235.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4f:55:61:6f:76:95:4b:ed:27:ec:ad:2b:77:11:95:4d:e7:
32:97:a5:b8:46:92:87:77:96:87:63:43:93:47:98:72:8c:8f:
11:55:dd:4f:f4:7d:3e:ec:f3:de:f0:36:6e:ec:46:aa:18:9e:
a8:2a:38:56:3c:5e:15:67:77:d8:bf:89:0f:9e:f6:31:45:05:
50:63:7e:3f:09:89:c4:94:f3:20:c0:29:41:8e:d4:dc:b2:aa:
fd:65:41:98:a9:a7:db:d4:9a:ea:76:49:96:b2:84:e4:85:37:
47:73:b6:86:18:55:06:09:c3:aa:3e:0c:d6:89:90:00:b4:c9:
a1:2a:b1:09:b5:e6:8c:fb:a9:a1:45:48:ab:61:e5:3b:28:b3:
cf:d8:9e:3a:6e:5f:2d:91:40:92:6b:d0:e0:64:3a:3d:a9:db:
28:99:c5:e3:45:88:bb:0c:95:17:57:4b:9a:8b:b8:ba:33:6d:
3b:cd:54:6c:a7:97:cb:d7:57:a8:ab:04:78:c9:4b:ad:9e:06:
64:1f:9c:22:80:23:f3:20:a4:77:61:4b:a8:2c:43:3f:81:a6:
7d:5b:e6:01:7f:0a:3b:0d:64:1b:1e:98:f8:68:fb:e9:a7:f6:
c4:96:1e:de:87:51:11:cd:1e:1f:40:05:74:4a:d5:9a:7f:8a:
d2:3a:df:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYW8OmTjqxbKNj1kE74Eb8/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDZhODJiYjExNWQ3MzkzZTM5ZmQ1OGI3M2JiZjIwZjZj
ZDBiMWYwHhcNMjMwMTE2MjAxNzAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGQxYTYxZDJmYzM3OTkzMWE4Y2NiNGRiODliMDYzNTFiY2RkZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQZfmD4tQUqDKf4uBZ9UB1uSOdDA
u1o2Q3dTpGNHQepibSeum39jBp0Z1ZQ0A7bNsb7yLpoRLdnNkmh4ly9Hmybh6p5S
43SEaN3W6Z9iS4017PwSm2wcZhJIhLFyDtEEMY5OFpXVr/DmGP5rCRxO5PQlDVVZ
h1J7v/pwV3JR8ISyKja7bpwC3jzIuhhMJJ/iXQbVq5Qw+DTDkE0SW6G8Lp5SexXA
7nfsUKLZoIhYsLwc9ZskEgGIAOkXiFoSqGNmuoELFihyIfw23ODbXZopHcwfat8Y
k4uaaxeOW5eFJJe4OhFfTaVWAnMHSNEgVlyrSvxv+nRhPP+EV5DEDAjBOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTRph0vw3mTGozLTbibBjUbzd7QMB8GA1UdIwQY
MBaAFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvRk5HbUhTX0RlWk1hak10TnVKc0dOUnZOM3RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvSEFhb0s3RVYxemstT2YxWXR6dV9JUGJOQ3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYrrMA0G
CSqGSIb3DQEBCwUAA4IBAQBnT1Vhb3aVS+0n7K0rdxGVTecyl6W4RpKHd5aHY0OT
R5hyjI8RVd1P9H0+7PPe8DZu7EaqGJ6oKjhWPF4VZ3fYv4kPnvYxRQVQY34/CYnE
lPMgwClBjtTcsqr9ZUGYqafb1JrqdkmWsoTkhTdHc7aGGFUGCcOqPgzWiZAAtMmh
KrEJteaM+6mhRUirYeU7KLPP2J46bl8tkUCSa9DgZDo9qdsomcXjRYi7DJUXV0ua
i7i6M207zVRsp5fL11eoqwR4yUutngZkH5wigCPzIKR3YUuoLEM/gaZ9W+YBfwo7
DWQbHpj4aPvpp/bElh7eh1ERzR4fQAV0StWaf4rSOt9I
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:58 2023 by rpki-client on console-fra.rpki-client.org