Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FmRODnD1S5VcXmjn-AwaPXtqaMg.roa
File: FmRODnD1S5VcXmjn-AwaPXtqaMg.roa (raw, json)
Hash identifier: RQgp4NH7+ea/Xq0YtikDrJxsYO1Rv3KFrxnlr/rId6E=
Subject key identifier: 16:64:4E:0E:70:F5:4B:95:5C:5E:68:E7:F8:0C:1A:3D:7B:6A:68:C8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01954344E445C2DE11B07928BC2D5A1539E8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FmRODnD1S5VcXmjn-AwaPXtqaMg.roa
Signing time: Wed 26 Feb 2025 17:19:03 +0000
ROA not before: Wed 26 Feb 2025 17:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 194.87.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 05:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:44:e4:45:c2:de:11:b0:79:28:bc:2d:5a:15:39:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 26 17:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16644e0e70f54b955c5e68e7f80c1a3d7b6a68c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:42:86:2d:9e:4b:09:c4:be:64:4c:74:b1:be:
09:0f:3e:db:6c:65:fe:a5:bf:64:c7:3e:b1:f8:5c:
dd:89:42:25:bf:f6:3d:56:70:44:ab:21:d3:11:05:
65:d7:89:22:ea:aa:58:2e:dd:80:f1:be:ae:18:7c:
ed:98:81:ff:9d:a0:37:cf:3b:9f:ad:1d:9e:23:ff:
bd:cd:71:bb:ad:49:bd:59:ad:81:b3:04:7d:67:ab:
77:da:18:b6:a9:ea:1a:40:20:87:ec:3b:33:78:f6:
47:70:39:b5:06:e8:ac:a0:8a:ac:0b:c3:0d:af:13:
4a:df:e3:8d:00:3b:fd:0a:37:09:a7:ba:8e:83:75:
35:31:16:c8:55:de:be:f4:49:ed:d9:7f:df:fb:c2:
b5:0f:bc:dc:71:e6:65:ff:b4:1e:57:0d:f7:04:f5:
fc:54:17:42:54:19:53:d9:e3:c0:4e:b1:95:3d:ef:
c2:4e:08:e1:6c:79:4f:32:d8:45:c2:44:f4:5a:87:
99:53:22:02:30:7e:6e:e6:35:90:41:d5:72:f6:e9:
ac:0d:36:e5:b3:d9:97:f5:69:75:c0:ca:c2:f6:2d:
78:37:b2:c7:93:32:91:5b:56:78:44:e6:53:f8:e4:
c1:0d:97:4a:d7:48:d3:2e:af:98:ff:08:48:67:c8:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:64:4E:0E:70:F5:4B:95:5C:5E:68:E7:F8:0C:1A:3D:7B:6A:68:C8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FmRODnD1S5VcXmjn-AwaPXtqaMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.53.0/24
Signature Algorithm: sha256WithRSAEncryption
39:12:3e:6a:37:a6:34:ec:4b:57:78:c4:63:fe:6e:df:74:f0:
48:c3:33:14:5b:01:e2:4b:0e:bd:d1:5c:ac:64:2a:3a:b1:11:
28:95:cd:1a:85:2b:35:9e:3b:6d:dc:fd:ad:11:89:92:af:f1:
74:c2:cd:47:02:85:01:0e:db:9d:83:72:d6:a7:b1:40:5b:eb:
d0:54:1a:3f:6c:e7:0b:07:f0:3b:44:59:4e:45:55:39:51:12:
86:db:e6:d8:19:80:11:25:08:8c:ce:67:e0:85:6d:5e:9b:79:
cb:e0:d8:84:26:51:2f:f8:44:23:d7:28:18:14:8d:03:17:6d:
9f:e2:5a:2b:44:50:aa:b4:72:25:62:b8:08:e3:36:bd:6b:d5:
ba:31:23:58:e1:7c:07:38:86:1e:1b:7f:33:27:86:87:71:ba:
77:80:e1:52:a7:9a:67:85:ed:47:68:77:b2:fe:9a:00:56:01:
33:da:5d:54:fa:49:1e:2f:fb:56:72:d1:fe:d1:46:ac:ae:66:
3e:bb:cc:8a:93:50:99:f6:3c:7c:32:9b:ca:fe:0d:46:93:cc:
6c:29:7d:57:f6:63:63:fa:02:77:f1:d5:5c:e1:01:f1:a8:b4:
07:61:ed:d4:1a:a9:30:0b:c8:fc:cd:39:bc:91:0e:84:fb:6b:
4c:53:ca:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:04:44 2025 by rpki-client