Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/nAzcH-CYXRSwp5_ggFSCNF0ZdAk.roa
File: nAzcH-CYXRSwp5_ggFSCNF0ZdAk.roa (raw, json)
Hash identifier: 5k90LZ+LvPMdD5B6W1T7yN304xdgrQ68EYhdNETm+4U=
Subject key identifier: 9C:0C:DC:1F:E0:98:5D:14:B0:A7:9F:E0:80:54:82:34:5D:19:74:09
Certificate issuer: /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial: 0185BB2E5AD0314AC9E8D71EC57B47DB590F
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/nAzcH-CYXRSwp5_ggFSCNF0ZdAk.roa
Signing time: Mon 16 Jan 2023 15:24:15 +0000
ROA not before: Mon 16 Jan 2023 15:24:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20886
IP address blocks: 194.55.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:2e:5a:d0:31:4a:c9:e8:d7:1e:c5:7b:47:db:59:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Validity
Not Before: Jan 16 15:24:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c0cdc1fe0985d14b0a79fe0805482345d197409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:1f:93:83:7a:a1:d8:14:18:0b:e7:14:13:
33:f7:a9:cc:cd:7e:4f:bd:5a:52:a5:2a:12:56:1d:
25:a7:41:ac:b7:4a:16:90:ac:a7:d7:8c:0b:cf:e2:
57:9c:6d:22:57:55:19:0c:57:10:19:aa:10:f0:37:
58:cf:0b:fd:99:e0:cf:b3:b8:d1:86:dc:73:df:17:
e5:5e:4d:77:eb:df:04:d5:2f:7a:1f:3b:81:a2:3e:
76:5f:f5:92:0c:ad:9d:33:6e:0f:b9:21:7c:13:bf:
c7:03:00:56:ae:74:ba:9c:a7:a5:b3:c5:5a:66:ba:
82:2d:54:2a:22:4c:b2:1a:fe:85:6d:b5:be:46:94:
c3:24:26:83:26:eb:0a:32:1a:a0:64:64:a8:66:8a:
71:82:4f:01:c2:bf:61:8d:00:ab:3f:a5:cd:75:91:
5e:ac:7f:34:80:6d:20:c3:59:a0:4c:20:f1:2f:4c:
1b:17:07:17:64:1e:29:59:0c:41:7d:8d:42:b5:c2:
31:5d:62:26:81:a7:cd:35:e0:c1:3b:7e:74:52:d5:
ff:a7:92:f1:c4:c5:09:0d:df:a9:1a:a7:a9:aa:d5:
ec:da:a9:e2:f4:c9:02:c5:18:75:19:3e:55:55:69:
4a:11:49:af:a0:88:a4:ac:21:fc:42:d8:16:9e:ac:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0C:DC:1F:E0:98:5D:14:B0:A7:9F:E0:80:54:82:34:5D:19:74:09
X509v3 Authority Key Identifier:
keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/nAzcH-CYXRSwp5_ggFSCNF0ZdAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:33:5a:ec:88:c4:98:da:b2:58:4c:b9:be:63:4b:e6:85:20:
b5:5e:2b:c0:02:01:13:91:98:b8:40:e9:be:bd:58:78:90:11:
5d:54:32:e0:20:c1:59:5b:df:49:06:18:04:8e:80:35:82:93:
e9:49:5e:9f:2c:0a:cb:4b:98:8e:12:f1:a3:56:10:78:06:d1:
fb:94:92:eb:0e:64:c9:38:ea:c7:0e:31:38:fb:63:70:99:2e:
bb:23:82:8e:d6:f5:3d:45:30:e0:77:14:22:9e:60:9a:9f:50:
59:8a:be:f0:2e:c2:51:ac:46:0f:aa:9d:55:48:d5:a1:14:a6:
de:24:75:5b:87:f8:2d:ad:53:9c:6b:bd:dc:8d:63:b5:c3:37:
28:24:fa:54:a6:5d:6a:7c:6b:07:1f:50:e3:7b:dd:03:97:4c:
03:45:2c:3f:0c:29:4b:6b:68:14:4b:8f:77:b2:2c:6e:5b:75:
a4:c0:ee:84:3b:94:7d:cb:ba:d0:48:f2:53:b9:c0:ff:4a:a6:
07:8f:8b:11:56:04:a4:64:69:a7:f0:bd:e7:79:b2:51:4f:1a:
8a:fa:60:0b:95:65:86:88:c1:15:84:a7:1e:bd:3c:38:38:93:
59:a1:95:1d:a2:d8:3b:90:b6:d9:ae:0a:53:86:9e:9b:6e:6d:
a8:eb:e0:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYW7LlrQMUrJ6NcexXtH21kPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDY0YzhjMTY3ZGQyYzg3YWEzZDg4YWNiZmFlNGMyMzNm
Zjc3YjAwHhcNMjMwMTE2MTUyNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzBjZGMxZmUwOTg1ZDE0YjBhNzlmZTA4MDU0ODIzNDVkMTk3NDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vQfk4N6odgUGAvnFBMz96nMzX5P
vVpSpSoSVh0lp0Gst0oWkKyn14wLz+JXnG0iV1UZDFcQGaoQ8DdYzwv9meDPs7jR
htxz3xflXk13698E1S96HzuBoj52X/WSDK2dM24PuSF8E7/HAwBWrnS6nKels8Va
ZrqCLVQqIkyyGv6FbbW+RpTDJCaDJusKMhqgZGSoZopxgk8Bwr9hjQCrP6XNdZFe
rH80gG0gw1mgTCDxL0wbFwcXZB4pWQxBfY1CtcIxXWImgafNNeDBO350UtX/p5Lx
xMUJDd+pGqepqtXs2qni9MkCxRh1GT5VVWlKEUmvoIikrCH8QtgWnqxR3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJwM3B/gmF0UsKef4IBUgjRdGXQJMB8GA1UdIwQY
MBaAFOhGTIwWfdLIeqPYisv65MIz/3ewMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgt
NmVhYTU5YjBkNzUwLzEvbkF6Y0gtQ1lYUlN3cDVfZ2dGU0NORjBaZEFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgtNmVhYTU5YjBkNzUw
LzEvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjcaMA0G
CSqGSIb3DQEBCwUAA4IBAQB6M1rsiMSY2rJYTLm+Y0vmhSC1XivAAgETkZi4QOm+
vVh4kBFdVDLgIMFZW99JBhgEjoA1gpPpSV6fLArLS5iOEvGjVhB4BtH7lJLrDmTJ
OOrHDjE4+2NwmS67I4KO1vU9RTDgdxQinmCan1BZir7wLsJRrEYPqp1VSNWhFKbe
JHVbh/gtrVOca73cjWO1wzcoJPpUpl1qfGsHH1Dje90Dl0wDRSw/DClLa2gUS493
sixuW3WkwO6EO5R9y7rQSPJTucD/SqYHj4sRVgSkZGmn8L3nebJRTxqK+mALlWWG
iMEVhKcevTw4OJNZoZUdotg7kLbZrgpThp6bbm2o6+Bv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:42 2024 by rpki-client on console-ams.rpki-client.org