Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/N9CDWCP63W__wF2N6ejOLpnm_1c.roa
File: N9CDWCP63W__wF2N6ejOLpnm_1c.roa (raw, json)
Hash identifier: EOwJJroD9Zfkj2LGU/w/M/40cMzwhPfqeRjbNpGWnUQ=
Subject key identifier: 37:D0:83:58:23:FA:DD:6F:FF:C0:5D:8D:E9:E8:CE:2E:99:E6:FF:57
Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial: 01888F3CE206A84A4BD50739BCCF49CB61E4
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/N9CDWCP63W__wF2N6ejOLpnm_1c.roa
Signing time: Tue 06 Jun 2023 05:45:11 +0000
ROA not before: Tue 06 Jun 2023 05:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199424
IP address blocks: 195.2.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:3c:e2:06:a8:4a:4b:d5:07:39:bc:cf:49:cb:61:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Validity
Not Before: Jun 6 05:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37d0835823fadd6fffc05d8de9e8ce2e99e6ff57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:bd:3c:11:e6:2b:70:d5:31:7f:3d:22:15:
b0:d2:c4:40:01:87:f6:46:aa:3d:da:bd:38:61:b5:
c4:96:47:59:93:06:d3:19:f7:7e:28:c3:4e:65:5f:
b9:53:b4:39:ef:27:a5:84:10:5d:e4:73:7b:6b:4a:
f7:42:bd:4e:36:62:fe:a3:e4:32:24:6b:38:b7:ad:
d0:4d:79:da:6b:57:3f:1d:40:d4:ef:17:a5:c9:cb:
a2:52:c1:9b:bb:6b:68:7b:c0:c9:d1:8f:88:82:6c:
69:68:df:13:4d:e6:e8:9c:23:75:19:79:f9:9f:f0:
12:d1:4d:46:a5:34:72:2b:08:0d:98:76:a8:22:09:
4f:48:85:87:f0:7a:d9:f7:28:a6:e8:23:da:66:c6:
5e:3f:37:be:59:b3:f6:41:47:c7:86:f6:a3:47:8d:
e8:66:a4:b6:b7:f4:85:db:30:4a:de:23:e7:ec:49:
61:00:15:40:04:e2:58:c4:ce:65:52:20:ce:f3:a5:
06:41:00:de:0f:87:d4:9c:d5:e1:d1:fe:fa:27:42:
9a:33:0e:43:4c:36:3b:f6:f5:19:96:ee:5d:9c:70:
69:01:d8:6c:55:cd:9c:b1:bb:e5:80:f3:1b:e9:a9:
c6:b4:ad:5c:35:57:7b:7c:93:46:37:ee:cd:67:f2:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D0:83:58:23:FA:DD:6F:FF:C0:5D:8D:E9:E8:CE:2E:99:E6:FF:57
X509v3 Authority Key Identifier:
keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/N9CDWCP63W__wF2N6ejOLpnm_1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.226.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c0:73:98:e0:3e:11:48:9c:3f:72:c2:88:8e:01:14:6d:79:
e2:09:9b:bb:c2:3b:0a:b7:20:d2:1a:09:c4:df:76:bb:f7:a5:
4a:f9:77:8a:07:ff:4d:fc:14:86:0f:41:aa:e1:6c:0e:da:30:
46:18:f2:8a:b8:d7:78:65:a4:71:5c:9f:3c:a8:1a:62:71:fd:
84:a4:a4:fb:f9:0f:76:11:25:20:47:dc:8e:4e:91:49:a3:cd:
77:cd:18:6f:0f:e5:1b:30:84:2a:1e:31:41:8e:f4:91:d2:15:
79:92:a8:00:24:b8:20:e0:30:c5:99:b2:62:9d:71:7c:e5:da:
13:f3:71:bf:9a:53:23:43:c8:c3:25:cc:a7:37:89:08:a6:cd:
0f:92:e0:c6:44:07:7f:6d:60:59:18:0a:34:a0:77:22:f4:32:
8e:04:9f:cd:c1:0b:e1:a9:24:e1:54:6b:e0:3b:81:c3:88:e0:
81:29:42:07:11:a7:6f:ec:93:43:d9:3d:f8:8c:67:0c:07:22:
ba:a9:45:04:a7:a4:33:e0:0d:28:95:48:e5:68:a3:80:6e:96:
7b:29:f2:60:23:09:6b:ea:f5:2a:69:c9:27:73:a9:78:5c:ba:
35:99:ea:ea:64:4a:3d:ce:04:83:15:b6:10:80:74:6b:db:4b:
6a:d8:a6:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiPPOIGqEpL1Qc5vM9Jy2HkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2M4NjI2MTM4YmYxZTljYjNmZDFmZWMyNmM2OGM0YTYz
NDA5NmIwHhcNMjMwNjA2MDU0NTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2QwODM1ODIzZmFkZDZmZmZjMDVkOGRlOWU4Y2UyZTk5ZTZmZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ia9PBHmK3DVMX89IhWw0sRAAYf2
Rqo92r04YbXElkdZkwbTGfd+KMNOZV+5U7Q57yelhBBd5HN7a0r3Qr1ONmL+o+Qy
JGs4t63QTXnaa1c/HUDU7xelycuiUsGbu2toe8DJ0Y+IgmxpaN8TTebonCN1GXn5
n/AS0U1GpTRyKwgNmHaoIglPSIWH8HrZ9yim6CPaZsZePze+WbP2QUfHhvajR43o
ZqS2t/SF2zBK3iPn7ElhABVABOJYxM5lUiDO86UGQQDeD4fUnNXh0f76J0KaMw5D
TDY79vUZlu5dnHBpAdhsVc2csbvlgPMb6anGtK1cNVd7fJNGN+7NZ/JxpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfQg1gj+t1v/8Bdjenozi6Z5v9XMB8GA1UdIwQY
MBaAFOfMhiYTi/Hpyz/R/sJsaMSmNAlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWIt
ZjVjMDlmZjM4YTAwLzEvTjlDRFdDUDYzV19fd0YyTjZlak9McG5tXzFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWItZjVjMDlmZjM4YTAw
LzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwLiMA0G
CSqGSIb3DQEBCwUAA4IBAQBTwHOY4D4RSJw/csKIjgEUbXniCZu7wjsKtyDSGgnE
33a796VK+XeKB/9N/BSGD0Gq4WwO2jBGGPKKuNd4ZaRxXJ88qBpicf2EpKT7+Q92
ESUgR9yOTpFJo813zRhvD+UbMIQqHjFBjvSR0hV5kqgAJLgg4DDFmbJinXF85doT
83G/mlMjQ8jDJcynN4kIps0PkuDGRAd/bWBZGAo0oHci9DKOBJ/NwQvhqSThVGvg
O4HDiOCBKUIHEadv7JND2T34jGcMByK6qUUEp6Qz4A0olUjlaKOAbpZ7KfJgIwlr
6vUqacknc6l4XLo1merqZEo9zgSDFbYQgHRr20tq2KYj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:22 2024 by rpki-client on console-ams.rpki-client.org