Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UcKQ8Px6J3O9rIl-7kLo1GWSwdU.roa
File: UcKQ8Px6J3O9rIl-7kLo1GWSwdU.roa (raw, json)
Hash identifier: dol6HRhLDQlXhv26K87k5MZpez6Kx+p8m/l783UybcA=
Subject key identifier: 51:C2:90:F0:FC:7A:27:73:BD:AC:89:7E:EE:42:E8:D4:65:92:C1:D5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01960F3A2253C616E6A902F6D96BD1FF82F0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UcKQ8Px6J3O9rIl-7kLo1GWSwdU.roa
Signing time: Mon 07 Apr 2025 07:49:50 +0000
ROA not before: Mon 07 Apr 2025 07:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61138
IP address blocks: 194.87.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Apr 2025 07:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:3a:22:53:c6:16:e6:a9:02:f6:d9:6b:d1:ff:82:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 7 07:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51c290f0fc7a2773bdac897eee42e8d46592c1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:a3:37:3f:31:97:1f:38:fe:a1:8f:26:d8:
6f:f7:4d:4f:7c:f4:3a:8e:39:8a:9c:12:eb:5a:59:
2e:7f:39:71:de:90:35:14:74:23:bd:20:ec:64:4c:
35:6f:94:64:fa:9e:aa:5f:47:38:59:c5:9e:42:fe:
f2:fc:cb:38:a6:a0:e1:63:5c:be:5c:ac:03:cf:0c:
21:2d:8d:e8:75:81:61:33:1f:78:e3:f7:31:d3:57:
ab:db:c0:81:9d:eb:a5:ad:58:3b:59:0d:31:73:b7:
85:76:2b:eb:0b:59:4b:f5:b2:f3:f8:4e:3e:db:e3:
97:a8:37:01:88:00:4e:0d:85:9f:c1:b0:b8:da:46:
43:47:04:42:0b:ee:18:b5:cc:91:2c:0e:56:78:70:
b9:30:8c:aa:d0:ca:2f:51:31:fc:d2:d8:84:e6:dd:
db:ce:31:ce:dd:82:a5:1c:28:96:dc:23:5a:4c:9c:
49:a9:39:df:c3:54:76:19:e5:1d:59:e5:58:77:19:
59:d5:3a:eb:72:c0:36:19:1b:e8:83:eb:35:1c:c3:
3e:4e:99:29:77:7e:d1:ad:11:3d:df:91:f3:7d:51:
8c:64:df:dc:0b:62:f4:92:50:ec:fb:a6:fb:eb:39:
37:85:7a:67:8e:dc:8d:8a:0b:4c:61:90:0d:ba:2e:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C2:90:F0:FC:7A:27:73:BD:AC:89:7E:EE:42:E8:D4:65:92:C1:D5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UcKQ8Px6J3O9rIl-7kLo1GWSwdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.168.0/24
Signature Algorithm: sha256WithRSAEncryption
24:42:0f:1f:da:a6:9d:a3:46:17:ec:ed:f8:84:84:bc:0d:87:
76:f0:8a:a6:ce:92:30:91:e5:e0:f2:de:42:c4:82:95:c8:d9:
8c:1a:98:89:9b:71:f5:b4:36:41:89:74:e0:97:9c:98:11:40:
ec:2c:8e:19:ac:89:e6:36:93:1b:27:42:93:0d:c9:98:5c:f7:
df:56:5f:06:8e:ad:7e:b4:9d:1d:e5:b8:43:ce:d4:bd:16:8f:
2c:bc:ba:14:ef:fe:15:89:9d:31:ef:a6:5f:ad:11:9c:51:d5:
16:3b:31:8f:6b:93:37:09:d1:e0:d7:4a:6e:b2:b3:53:d1:1b:
55:1d:e8:12:63:2e:51:72:63:dd:06:14:87:7e:91:07:45:99:
28:92:ee:c1:ae:a8:a8:62:4d:91:9e:ae:ba:60:0d:b6:df:dd:
7d:7e:ab:83:b7:5e:c4:2e:2f:3d:d1:53:5e:97:e0:5b:24:d2:
74:e5:55:05:97:19:f3:f0:6c:53:65:98:33:da:aa:fe:9b:63:
f3:ae:16:1e:ac:6b:e2:bf:8a:0f:9b:18:0f:a9:cc:c1:86:1c:
a8:f0:cb:6e:95:05:ae:4b:ca:3a:45:6a:f1:97:2f:f9:60:61:
10:e1:6b:f5:00:96:bc:ae:1b:44:f4:48:cb:f9:e7:ee:14:50:
20:c0:5c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:09:13 2025 by rpki-client