Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xT9g7iFA9nHkFLNY_K3FL7AhPCE.roa
File: xT9g7iFA9nHkFLNY_K3FL7AhPCE.roa (raw, json)
Hash identifier: hHR7cz/+JDYiHdwnT1X8kKyNyscJebiam/n2yi2wIpU=
Subject key identifier: C5:3F:60:EE:21:40:F6:71:E4:14:B3:58:FC:AD:C5:2F:B0:21:3C:21
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01926827FF70D59B9A65023D33657FD87B5F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xT9g7iFA9nHkFLNY_K3FL7AhPCE.roa
Signing time: Mon 07 Oct 2024 18:05:04 +0000
ROA not before: Mon 07 Oct 2024 18:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400536
IP address blocks: 194.87.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 08:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:68:27:ff:70:d5:9b:9a:65:02:3d:33:65:7f:d8:7b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 7 18:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c53f60ee2140f671e414b358fcadc52fb0213c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:ee:09:1d:1b:71:79:0c:d1:31:5b:57:a5:
ab:5d:1d:20:97:b9:37:f2:01:94:c9:3f:a5:80:4b:
4f:d8:35:29:a5:3e:08:04:23:e2:c3:6d:91:25:02:
d4:15:8f:30:ac:24:52:d3:7a:73:9b:8b:4c:8f:0f:
c1:c2:f0:f3:f9:d0:f7:72:65:5a:d5:56:23:6f:b8:
fa:ac:4d:15:ca:cd:d6:10:a9:2d:60:f6:3a:d7:9e:
e1:a2:0d:11:60:1e:fc:7d:58:af:78:9b:25:ca:9a:
76:f3:55:b9:f7:ad:e0:12:d6:97:d7:1a:1d:9f:0c:
2b:45:17:6e:ff:16:1b:bc:d9:67:be:6e:e1:e0:31:
98:da:ce:24:2a:b6:ae:10:6c:66:b2:70:bf:82:a1:
d9:fa:ee:e7:4f:0c:8f:0b:c0:2e:ba:a7:43:50:4d:
ca:e4:07:42:06:fe:f8:bc:ee:16:d3:24:b9:23:2c:
7f:4b:ab:fb:49:6e:97:8e:eb:cb:16:e8:6e:1c:9c:
fd:35:9c:e9:64:9e:87:3e:78:a4:2e:cd:dd:a7:ef:
fb:31:48:23:ec:e2:70:e1:95:fb:af:a5:01:b7:a8:
f4:c5:9f:2e:85:1c:57:c0:4b:59:63:73:0d:47:02:
1a:51:af:c2:50:3b:46:67:a8:0f:87:f6:a3:35:ec:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3F:60:EE:21:40:F6:71:E4:14:B3:58:FC:AD:C5:2F:B0:21:3C:21
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xT9g7iFA9nHkFLNY_K3FL7AhPCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.17.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d6:9c:c3:da:73:58:96:d9:e3:ff:8e:a9:56:63:f9:16:42:
ed:cf:05:fc:69:07:0f:1f:ca:f7:7d:e4:c0:80:30:63:13:82:
0c:1f:6f:d1:cf:db:2f:fb:11:1c:23:cf:5b:2d:52:2b:4f:50:
4c:68:7b:2d:1f:a6:67:38:0c:f4:79:42:ed:01:0e:cf:6f:b3:
fa:21:57:8a:22:02:3f:d3:ec:2e:c9:96:23:6b:e4:4b:fd:9d:
56:ae:64:eb:30:65:ac:8d:c2:ab:e2:b0:ee:3b:2a:5e:7d:4e:
20:e5:b0:1b:9e:8c:d3:b2:31:d6:71:4c:70:dc:8c:54:d6:3d:
db:1a:30:9f:6c:87:7c:cc:7c:9e:61:fa:38:37:ea:b1:2c:39:
37:02:dc:36:08:61:be:8d:49:48:e5:50:44:22:ce:b6:90:3c:
d5:1b:8e:86:f7:1b:81:5e:40:bf:68:19:d7:4d:b9:ab:39:33:
51:01:de:6e:18:ac:72:c9:64:ab:49:cd:57:59:be:7e:b9:7d:
82:d4:eb:22:9d:28:73:6a:08:8f:55:69:9a:b7:a7:6f:7e:8d:
77:f2:dc:dc:b4:00:dd:17:4e:1d:04:29:f8:46:54:ec:2c:c9:
e3:89:ef:af:b9:c6:32:7d:26:83:1d:da:4a:92:78:4c:45:71:
c4:e7:db:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJoJ/9w1ZuaZQI9M2V/2HtfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQxMDA3MTgwNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTNmNjBlZTIxNDBmNjcxZTQxNGIzNThmY2FkYzUyZmIwMjEzYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLfuCR0bcXkM0TFbV6WrXR0gl7k3
8gGUyT+lgEtP2DUppT4IBCPiw22RJQLUFY8wrCRS03pzm4tMjw/BwvDz+dD3cmVa
1VYjb7j6rE0Vys3WEKktYPY6157hog0RYB78fViveJslypp281W5963gEtaX1xod
nwwrRRdu/xYbvNlnvm7h4DGY2s4kKrauEGxmsnC/gqHZ+u7nTwyPC8AuuqdDUE3K
5AdCBv74vO4W0yS5Iyx/S6v7SW6XjuvLFuhuHJz9NZzpZJ6HPnikLs3dp+/7MUgj
7OJw4ZX7r6UBt6j0xZ8uhRxXwEtZY3MNRwIaUa/CUDtGZ6gPh/ajNeyLoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMU/YO4hQPZx5BSzWPytxS+wITwhMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEveFQ5ZzdpRkE5bkhrRkxOWV9LM0ZMN0FoUENFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlcRMA0G
CSqGSIb3DQEBCwUAA4IBAQAm1pzD2nNYltnj/46pVmP5FkLtzwX8aQcPH8r3feTA
gDBjE4IMH2/Rz9sv+xEcI89bLVIrT1BMaHstH6ZnOAz0eULtAQ7Pb7P6IVeKIgI/
0+wuyZYja+RL/Z1WrmTrMGWsjcKr4rDuOypefU4g5bAbnozTsjHWcUxw3IxU1j3b
GjCfbId8zHyeYfo4N+qxLDk3Atw2CGG+jUlI5VBEIs62kDzVG46G9xuBXkC/aBnX
TbmrOTNRAd5uGKxyyWSrSc1XWb5+uX2C1OsinShzagiPVWmat6dvfo138tzctADd
F04dBCn4RlTsLMnjie+vucYyfSaDHdpKknhMRXHE59v8
-----END CERTIFICATE-----
Generated at Fri Nov 8 10:13:29 2024 by rpki-client on console-ams.rpki-client.org