Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/86tmETjpA7fLv9m42KVqOfdyfCE.roa
File: 86tmETjpA7fLv9m42KVqOfdyfCE.roa (raw, json)
Hash identifier: wKUwMvMhj7ocHXXCFmJ5kcJ6z1I3AFKqpfncf8vXlmI=
Subject key identifier: F3:AB:66:11:38:E9:03:B7:CB:BF:D9:B8:D8:A5:6A:39:F7:72:7C:21
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193AF345654A6CEF7DEAF1EE40E9D565993
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/86tmETjpA7fLv9m42KVqOfdyfCE.roa
Signing time: Tue 10 Dec 2024 06:14:22 +0000
ROA not before: Tue 10 Dec 2024 06:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398373
IP address blocks: 194.87.41.0/24 maxlen: 24
194.87.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:34:56:54:a6:ce:f7:de:af:1e:e4:0e:9d:56:59:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 10 06:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3ab661138e903b7cbbfd9b8d8a56a39f7727c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:39:8c:c3:81:6e:b5:c0:d7:c8:a8:f2:9d:
c2:70:e0:29:a3:4b:4b:77:0b:e4:ec:9e:26:b1:5f:
c1:13:97:55:be:7a:4d:6a:3e:cf:2f:6a:d6:b8:51:
9d:50:bc:3a:d2:0d:58:0b:2b:a2:16:95:52:0a:22:
c6:7c:77:88:3f:d5:60:83:d3:26:56:15:a3:bb:fd:
d2:8f:f0:a4:f0:28:3f:77:0d:57:db:e7:a3:d0:d7:
27:a3:e6:03:c7:13:53:89:f2:f8:8d:a9:d5:34:da:
ff:d6:00:9b:f0:be:35:96:da:1c:4f:3d:24:64:82:
b5:0e:33:1d:e1:6d:54:e5:60:7d:99:8e:d2:81:1c:
7b:0c:56:24:42:28:83:1e:4e:03:f6:28:dc:cb:b9:
e4:67:c4:b9:50:4f:b0:98:7b:28:84:73:bb:a6:4c:
06:34:4f:a1:dd:69:af:cd:6a:41:24:a8:fb:e5:6d:
03:b0:5c:54:00:1c:bb:5d:73:6c:b3:73:92:a6:59:
64:49:e5:51:6a:b4:c2:bb:82:7b:81:33:a6:dc:f0:
25:fc:56:b5:e2:04:b4:07:53:85:6d:e4:e5:78:27:
35:b8:44:f1:57:e1:5f:28:d4:29:c6:d1:ca:a5:8d:
7e:98:a7:44:40:7d:eb:23:79:6f:9e:72:05:10:e3:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:66:11:38:E9:03:B7:CB:BF:D9:B8:D8:A5:6A:39:F7:72:7C:21
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/86tmETjpA7fLv9m42KVqOfdyfCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.41.0/24
194.87.61.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f0:3a:63:42:a6:ae:f5:58:75:a5:c5:ba:08:af:40:82:7f:
47:08:ef:8f:4f:0f:48:a9:b5:b6:2c:e6:ba:22:ee:43:7d:a8:
7d:b5:95:f6:79:68:06:9f:51:86:20:d4:ab:5c:fe:ae:3e:53:
4c:a0:f5:16:a3:aa:7b:30:f7:43:85:49:65:74:fa:b4:0d:55:
3c:fb:60:81:75:fc:d9:d0:b7:2f:1c:f6:a0:58:4e:2f:e7:87:
67:2a:03:db:6d:ab:b5:3a:34:79:38:19:a6:81:85:52:02:0e:
1c:b5:48:46:c6:4c:bf:4e:a4:99:7d:01:aa:0d:ad:52:03:ea:
c5:07:45:eb:ef:a2:ab:a3:d6:54:d1:a6:4f:fd:03:ac:2c:a3:
4d:cc:86:1a:bb:8a:ea:8f:ae:de:5e:21:41:b3:f9:c9:ab:0a:
7c:ea:83:b2:dd:50:c7:70:6b:56:e3:d4:d1:5f:3e:7c:63:77:
20:40:e1:b7:d2:a5:e7:8a:75:2e:47:cd:60:f3:3e:d3:07:8d:
35:4c:eb:25:0c:c1:d5:b2:84:73:55:32:d5:da:23:a2:fe:c0:
7b:06:45:49:1f:eb:b7:36:62:08:94:ca:59:ba:a2:b4:e9:16:
63:cd:3d:f6:25:e0:8f:d7:63:ce:88:59:6b:86:98:80:67:ff:
63:f2:2d:69
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZOvNFZUps733q8e5A6dVlmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQxMjEwMDYxNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2FiNjYxMTM4ZTkwM2I3Y2JiZmQ5YjhkOGE1NmEzOWY3NzI3YzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg45jMOBbrXA18io8p3CcOApo0tL
dwvk7J4msV/BE5dVvnpNaj7PL2rWuFGdULw60g1YCyuiFpVSCiLGfHeIP9Vgg9Mm
VhWju/3Sj/Ck8Cg/dw1X2+ej0Ncno+YDxxNTifL4janVNNr/1gCb8L41ltocTz0k
ZIK1DjMd4W1U5WB9mY7SgRx7DFYkQiiDHk4D9ijcy7nkZ8S5UE+wmHsohHO7pkwG
NE+h3WmvzWpBJKj75W0DsFxUABy7XXNss3OSpllkSeVRarTCu4J7gTOm3PAl/Fa1
4gS0B1OFbeTleCc1uETxV+FfKNQpxtHKpY1+mKdEQH3rI3lvnnIFEON1UwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPOrZhE46QO3y7/ZuNilajn3cnwhMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvODZ0bUVUanBBN2ZMdjltNDJLVnFPZmR5ZkNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwlcpAwQA
wlc9MA0GCSqGSIb3DQEBCwUAA4IBAQAg8DpjQqau9Vh1pcW6CK9Agn9HCO+PTw9I
qbW2LOa6Iu5Dfah9tZX2eWgGn1GGINSrXP6uPlNMoPUWo6p7MPdDhUlldPq0DVU8
+2CBdfzZ0LcvHPagWE4v54dnKgPbbau1OjR5OBmmgYVSAg4ctUhGxky/TqSZfQGq
Da1SA+rFB0Xr76Kro9ZU0aZP/QOsLKNNzIYau4rqj67eXiFBs/nJqwp86oOy3VDH
cGtW49TRXz58Y3cgQOG30qXninUuR81g8z7TB401TOslDMHVsoRzVTLV2iOi/sB7
BkVJH+u3NmIIlMpZuqK06RZjzT32JeCP12POiFlrhpiAZ/9j8i1p
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:44:02 2025 by rpki-client