Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ABYxYF4hhZZWX0GnBV5MtlYHVNI.roa
File: ABYxYF4hhZZWX0GnBV5MtlYHVNI.roa (raw, json)
Hash identifier: eNYpXhqUTejXBmwjto0+Ar6x5oF0AHIG5ZOzrEwmoHE=
Subject key identifier: 00:16:31:60:5E:21:85:96:56:5F:41:A7:05:5E:4C:B6:56:07:54:D2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018E4805D3EF4EADF6CCDF2F4F3DCBF6CBE2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ABYxYF4hhZZWX0GnBV5MtlYHVNI.roa
Signing time: Sat 16 Mar 2024 16:08:45 +0000
ROA not before: Sat 16 Mar 2024 16:08:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147186
IP address blocks: 194.87.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 12:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:05:d3:ef:4e:ad:f6:cc:df:2f:4f:3d:cb:f6:cb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 16 16:08:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=001631605e218596565f41a7055e4cb6560754d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:a0:3c:19:40:44:13:8b:6b:31:cc:a7:ba:
5b:53:3e:57:a1:74:d2:53:28:14:3c:7e:6b:a1:4b:
3c:98:95:81:f7:5d:d2:e1:ce:66:68:31:28:7b:70:
37:ca:76:91:d7:e4:70:2d:db:3f:1a:31:54:1d:22:
f0:1f:f8:1e:ad:32:12:33:94:5c:84:ec:3f:06:2c:
bd:95:6c:49:74:a4:49:86:e7:b8:46:dc:10:1f:75:
e0:16:fd:5a:4e:84:0c:a5:ef:44:2f:d2:78:d3:6e:
b8:24:87:a3:a1:75:64:e3:85:96:3e:e2:1f:16:ff:
6e:49:85:55:a5:48:fd:dc:86:f9:7e:ff:c3:36:67:
52:2c:4a:13:cc:01:44:ba:03:c3:e9:a1:79:af:fd:
bb:69:34:f2:f8:8b:35:26:94:36:d3:92:6f:6d:d1:
3c:57:c8:31:54:92:58:c0:7e:83:36:bb:d8:ac:ec:
41:05:8c:08:1e:00:13:ba:f8:de:df:87:0e:60:ca:
07:7f:01:ec:bf:35:51:c9:55:ff:b6:5f:ca:e3:c3:
c0:bb:b1:70:b5:72:91:79:29:86:7d:6c:e4:d1:e7:
63:34:73:7b:8d:98:1d:e3:76:92:19:d7:da:fa:a8:
ec:64:56:ff:00:09:d0:d4:f0:38:62:27:d7:ed:0e:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:16:31:60:5E:21:85:96:56:5F:41:A7:05:5E:4C:B6:56:07:54:D2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ABYxYF4hhZZWX0GnBV5MtlYHVNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.141.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3a:b0:da:7e:a6:93:ec:01:eb:b0:c3:23:08:f6:b4:3e:f9:
9f:2c:4b:c9:c9:0f:89:04:d3:54:f2:ca:1d:84:9c:a6:f5:01:
50:39:ba:e7:68:97:3a:0d:2b:d1:78:cd:32:87:ee:ff:c1:88:
61:ca:9f:d7:53:f0:58:b0:35:fb:68:32:46:40:23:75:af:2f:
f7:59:41:72:77:f2:8e:be:61:5a:96:cf:61:7b:0a:61:0a:2a:
7d:ec:47:d5:42:7c:b3:c4:93:e0:ef:a3:a8:62:e5:07:14:7d:
c1:41:8e:49:99:75:5c:14:79:75:14:e8:06:4e:69:42:2a:84:
f4:0a:90:16:5d:80:65:66:f0:54:3e:8a:f7:2a:08:d6:8e:35:
07:82:de:12:4f:ee:50:e8:65:37:38:39:c8:ac:76:57:64:5e:
05:32:6d:92:94:e1:ae:bc:f5:8e:47:ac:9f:b9:49:80:8c:25:
01:ee:d4:13:b3:4a:7a:3b:18:19:8f:10:d3:82:26:c3:58:2d:
f1:de:be:09:11:1b:c6:a7:76:47:6c:d9:f0:a1:6a:48:70:a8:
72:46:75:89:57:66:15:33:11:94:8b:03:16:a5:39:0c:cb:af:
dc:b2:51:c5:56:1b:32:42:3f:fe:fb:d2:10:79:9f:a8:5c:c5:
11:69:91:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5IBdPvTq32zN8vTz3L9sviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMzE2MTYwODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDE2MzE2MDVlMjE4NTk2NTY1ZjQxYTcwNTVlNGNiNjU2MDc1NGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bygPBlARBOLazHMp7pbUz5XoXTS
UygUPH5roUs8mJWB913S4c5maDEoe3A3ynaR1+RwLds/GjFUHSLwH/gerTISM5Rc
hOw/Biy9lWxJdKRJhue4RtwQH3XgFv1aToQMpe9EL9J40264JIejoXVk44WWPuIf
Fv9uSYVVpUj93Ib5fv/DNmdSLEoTzAFEugPD6aF5r/27aTTy+Is1JpQ205JvbdE8
V8gxVJJYwH6DNrvYrOxBBYwIHgATuvje34cOYMoHfwHsvzVRyVX/tl/K48PAu7Fw
tXKReSmGfWzk0edjNHN7jZgd43aSGdfa+qjsZFb/AAnQ1PA4YifX7Q5c3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAAWMWBeIYWWVl9BpwVeTLZWB1TSMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvQUJZeFlGNGhoWlpXWDBHbkJWNU10bFlIVk5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwleNMA0G
CSqGSIb3DQEBCwUAA4IBAQByOrDafqaT7AHrsMMjCPa0PvmfLEvJyQ+JBNNU8sod
hJym9QFQObrnaJc6DSvReM0yh+7/wYhhyp/XU/BYsDX7aDJGQCN1ry/3WUFyd/KO
vmFals9hewphCip97EfVQnyzxJPg76OoYuUHFH3BQY5JmXVcFHl1FOgGTmlCKoT0
CpAWXYBlZvBUPor3KgjWjjUHgt4ST+5Q6GU3ODnIrHZXZF4FMm2SlOGuvPWOR6yf
uUmAjCUB7tQTs0p6OxgZjxDTgibDWC3x3r4JERvGp3ZHbNnwoWpIcKhyRnWJV2YV
MxGUiwMWpTkMy6/cslHFVhsyQj/++9IQeZ+oXMURaZGC
-----END CERTIFICATE-----
Generated at Thu Apr 11 16:20:20 2024 by rpki-client on console-ams.rpki-client.org