Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q_MxR5jW7pteVQ1blOFjL4eaCaU.roa
File: Q_MxR5jW7pteVQ1blOFjL4eaCaU.roa (raw, json)
Hash identifier: rdD0wgDQ+xgmH9jfATqgj/O6hAQaheJfz5TFvqVxN+I=
Subject key identifier: 43:F3:31:47:98:D6:EE:9B:5E:55:0D:5B:94:E1:63:2F:87:9A:09:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A814DBABB4E9E0637D94B0D6E0FB7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q_MxR5jW7pteVQ1blOFjL4eaCaU.roa
Signing time: Tue 02 Jan 2024 12:33:52 +0000
ROA not before: Tue 02 Jan 2024 12:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 194.87.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 10:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:81:4d:ba:bb:4e:9e:06:37:d9:4b:0d:6e:0f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43f3314798d6ee9b5e550d5b94e1632f879a09a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c2:e1:b5:b9:2f:be:21:89:1b:89:ea:09:9a:
2d:f4:74:3e:06:dc:01:47:6e:5a:14:c4:eb:cf:23:
05:d3:ac:98:02:7d:f3:50:5c:d9:94:9d:2b:46:ec:
43:4b:79:b9:0e:ce:6a:12:1d:54:04:7e:6e:af:4b:
31:3d:55:2f:b7:0e:ba:a1:d9:c4:f0:32:0d:cf:1f:
1b:bd:f5:4d:05:48:1b:fa:92:ce:86:c5:16:06:c8:
38:f7:9f:99:7c:b7:a9:bd:58:a5:f7:2d:3f:c5:e1:
05:bc:9c:d4:a6:41:df:26:e4:48:11:7e:51:df:b2:
a7:2f:6d:d2:27:16:83:1c:f1:71:60:9d:13:44:1e:
82:20:86:41:ce:0c:72:d2:65:3f:0e:27:7f:12:b3:
d5:77:13:ec:93:d3:92:51:3d:8e:61:c7:39:78:8c:
8e:5f:8a:92:67:80:89:ed:aa:58:e1:30:4d:26:0a:
bb:7e:bd:6b:8d:c9:3a:5d:53:ce:5b:c0:20:ff:cb:
ed:76:07:45:6e:89:25:d2:b4:af:db:30:8e:20:3e:
11:bf:74:44:25:98:f0:49:37:e8:a9:07:73:42:40:
20:05:09:cb:bb:e9:de:0e:23:bd:46:79:58:f0:a7:
b8:c7:bf:50:76:61:74:2e:27:f6:d1:d9:6a:4e:a6:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F3:31:47:98:D6:EE:9B:5E:55:0D:5B:94:E1:63:2F:87:9A:09:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q_MxR5jW7pteVQ1blOFjL4eaCaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.27.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d3:bc:de:1d:54:8d:2f:f9:6d:c0:1d:c5:b1:4e:7f:0b:11:
77:38:fd:04:b7:5b:2e:d4:1d:a5:ac:7a:a3:43:23:34:eb:f6:
8c:67:a2:db:f9:60:7e:ac:72:5b:3e:a4:a6:02:68:ba:1f:02:
8a:ae:ce:64:ab:46:cc:06:df:07:ff:46:d7:fb:4e:b0:d1:d8:
f1:5f:65:e3:44:28:3d:4b:4e:b2:04:ec:6c:50:27:32:af:b8:
98:3f:b2:38:02:2e:2c:db:68:78:1c:92:dc:e9:f8:36:ae:17:
27:41:c5:b0:8e:44:1b:bf:ea:3b:f7:67:5b:7a:69:bb:52:16:
12:31:71:6d:a3:38:5b:e2:10:b8:b5:ed:b6:54:60:ef:a9:27:
13:54:43:f5:d2:8c:2a:64:02:18:a5:f8:98:4b:13:73:4d:c2:
a7:fb:ae:33:a4:81:94:83:e0:93:69:0f:f6:5a:82:e2:51:d9:
ea:b0:eb:3d:e4:4b:3a:63:7d:a3:dc:72:d8:0d:4d:84:eb:c7:
d9:ff:b2:a2:c9:12:02:cd:4a:f8:0d:ff:e8:02:00:ff:5a:a7:
4c:1c:14:93:be:db:63:d4:bd:c2:5d:21:e0:30:1e:de:60:89:
0a:00:e4:22:94:e3:9e:09:7c:60:c4:c9:d3:df:d9:44:e8:0d:
32:34:e3:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKoFNurtOngY32UsNbg+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTIzMzUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2YzMzE0Nzk4ZDZlZTliNWU1NTBkNWI5NGUxNjMyZjg3OWEwOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcLhtbkvviGJG4nqCZot9HQ+BtwB
R25aFMTrzyMF06yYAn3zUFzZlJ0rRuxDS3m5Ds5qEh1UBH5ur0sxPVUvtw66odnE
8DINzx8bvfVNBUgb+pLOhsUWBsg495+ZfLepvVil9y0/xeEFvJzUpkHfJuRIEX5R
37KnL23SJxaDHPFxYJ0TRB6CIIZBzgxy0mU/Did/ErPVdxPsk9OSUT2OYcc5eIyO
X4qSZ4CJ7apY4TBNJgq7fr1rjck6XVPOW8Ag/8vtdgdFbokl0rSv2zCOID4Rv3RE
JZjwSTfoqQdzQkAgBQnLu+neDiO9RnlY8Ke4x79QdmF0Lif20dlqTqaWtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEPzMUeY1u6bXlUNW5ThYy+HmgmlMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvUV9NeFI1alc3cHRlVlExYmxPRmpMNGVhQ2FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlcbMA0G
CSqGSIb3DQEBCwUAA4IBAQAD07zeHVSNL/ltwB3FsU5/CxF3OP0Et1su1B2lrHqj
QyM06/aMZ6Lb+WB+rHJbPqSmAmi6HwKKrs5kq0bMBt8H/0bX+06w0djxX2XjRCg9
S06yBOxsUCcyr7iYP7I4Ai4s22h4HJLc6fg2rhcnQcWwjkQbv+o792dbemm7UhYS
MXFtozhb4hC4te22VGDvqScTVEP10owqZAIYpfiYSxNzTcKn+64zpIGUg+CTaQ/2
WoLiUdnqsOs95Es6Y32j3HLYDU2E68fZ/7KiyRICzUr4Df/oAgD/WqdMHBSTvttj
1L3CXSHgMB7eYIkKAOQilOOeCXxgxMnT39lE6A0yNONN
-----END CERTIFICATE-----
Generated at Wed Jan 10 13:54:54 2024 by rpki-client on console-ams.rpki-client.org