Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/n26YFu9UutqECTTRONwnS5lVQoE.roa
File: n26YFu9UutqECTTRONwnS5lVQoE.roa (raw, json)
Hash identifier: jP3X4KiFNrpOOTzooTfaRJZhmMMezxy0ZBRGfskTYlQ=
Subject key identifier: 9F:6E:98:16:EF:54:BA:DA:84:09:34:D1:38:DC:27:4B:99:55:42:81
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CAA842D9E073CF1894E77093F101A8290
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/n26YFu9UutqECTTRONwnS5lVQoE.roa
Signing time: Wed 27 Dec 2023 09:03:58 +0000
ROA not before: Wed 27 Dec 2023 09:03:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47757
IP address blocks: 194.120.164.0/24 maxlen: 24
194.120.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:84:2d:9e:07:3c:f1:89:4e:77:09:3f:10:1a:82:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Dec 27 09:03:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f6e9816ef54bada840934d138dc274b99554281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:97:86:b1:0f:2b:a9:9e:8f:19:39:60:4d:
fb:a0:d5:fd:28:0d:61:cf:bf:27:1c:7c:62:51:22:
5c:75:d9:ca:0f:28:05:e2:e3:25:29:6a:ac:cf:92:
88:b0:20:1c:0b:9d:06:05:39:66:a2:9a:09:3d:fb:
1f:6b:07:2d:1f:26:9d:12:0e:5d:c3:52:c5:ab:cc:
b4:c9:b5:49:d8:34:f9:22:76:ba:83:a4:39:6b:dd:
a5:79:72:cc:d8:9c:58:88:44:e4:de:eb:02:37:73:
97:e7:a1:e7:a9:c5:8f:cb:ce:16:14:7b:66:09:89:
23:97:fa:98:20:0e:87:4f:5a:b3:ea:45:b2:1a:c6:
e7:6a:2e:3d:75:fb:4d:81:38:d7:de:b5:0c:db:5f:
21:74:2f:4b:40:32:6d:e6:bb:39:8f:64:41:9d:73:
9d:05:bc:fa:39:0f:e0:2b:0f:3e:f2:9b:58:bd:08:
54:80:65:c7:d7:3d:f2:dd:49:78:19:24:31:2c:01:
d9:b8:9f:2f:3f:c0:ae:3b:f8:f2:95:8b:ba:e9:88:
17:13:e9:cf:a0:98:59:9c:da:ee:69:e4:8a:70:76:
38:c6:af:96:51:8a:53:8e:05:c2:97:fb:ff:f7:80:
4f:4d:47:bf:49:ac:f2:39:32:10:9f:0f:5f:12:58:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6E:98:16:EF:54:BA:DA:84:09:34:D1:38:DC:27:4B:99:55:42:81
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/n26YFu9UutqECTTRONwnS5lVQoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.164.0/24
194.120.171.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1e:bb:24:bc:ac:32:cd:7b:6c:51:58:5a:d6:38:a8:30:d2:
b5:ae:c8:59:33:94:89:e7:40:46:9b:49:3e:0e:d3:64:0a:70:
c4:32:68:df:6b:0a:fb:0e:8a:39:5b:d2:dd:4a:03:4e:8a:82:
55:08:1d:f8:2a:0a:11:05:c9:be:ef:8c:77:0b:3c:16:b2:f1:
a6:a6:2b:3d:ab:c6:ba:6c:aa:5d:f1:29:e9:e3:32:49:ae:e1:
03:43:b2:a7:4e:13:47:2c:78:e6:9a:a5:b3:f2:31:7d:9b:a4:
b3:2c:da:5f:eb:fe:b6:8e:83:57:ac:12:7f:b3:eb:f3:7d:b6:
d6:1a:6c:c0:b9:40:34:1e:bf:97:27:8b:04:02:b8:e0:7b:d8:
f1:1d:fd:95:16:a3:9d:a4:1c:0a:9b:68:1a:11:91:72:15:cb:
9b:dd:c0:e8:93:fd:a2:23:fc:93:ad:06:6c:9f:8a:d6:50:c8:
49:b0:d9:de:9f:d6:10:e6:2b:87:46:70:95:79:0b:09:d7:a5:
16:ba:a3:e8:5d:fa:b6:3c:68:c9:18:f0:8e:c5:e8:a8:c8:e9:
25:9e:24:11:4b:98:45:84:65:65:45:c5:4c:4a:1f:03:7f:b9:
e8:3b:f0:fd:fa:c9:98:b5:19:aa:d8:f1:c4:f5:09:56:b6:75:
bd:88:6b:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYyqhC2eBzzxiU53CT8QGoKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjMxMjI3MDkwMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjZlOTgxNmVmNTRiYWRhODQwOTM0ZDEzOGRjMjc0Yjk5NTU0MjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse2XhrEPK6mejxk5YE37oNX9KA1h
z78nHHxiUSJcddnKDygF4uMlKWqsz5KIsCAcC50GBTlmopoJPfsfawctHyadEg5d
w1LFq8y0ybVJ2DT5Ina6g6Q5a92leXLM2JxYiETk3usCN3OX56HnqcWPy84WFHtm
CYkjl/qYIA6HT1qz6kWyGsbnai49dftNgTjX3rUM218hdC9LQDJt5rs5j2RBnXOd
Bbz6OQ/gKw8+8ptYvQhUgGXH1z3y3Ul4GSQxLAHZuJ8vP8CuO/jylYu66YgXE+nP
oJhZnNruaeSKcHY4xq+WUYpTjgXCl/v/94BPTUe/SazyOTIQnw9fEliRfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ9umBbvVLrahAk00TjcJ0uZVUKBMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvbjI2WUZ1OVV1dHFFQ1RUUk9Od25TNWxWUW9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwnikAwQA
wnirMA0GCSqGSIb3DQEBCwUAA4IBAQClHrskvKwyzXtsUVha1jioMNK1rshZM5SJ
50BGm0k+DtNkCnDEMmjfawr7Doo5W9LdSgNOioJVCB34KgoRBcm+74x3CzwWsvGm
pis9q8a6bKpd8Snp4zJJruEDQ7KnThNHLHjmmqWz8jF9m6SzLNpf6/62joNXrBJ/
s+vzfbbWGmzAuUA0Hr+XJ4sEArjge9jxHf2VFqOdpBwKm2gaEZFyFcub3cDok/2i
I/yTrQZsn4rWUMhJsNnen9YQ5iuHRnCVeQsJ16UWuqPoXfq2PGjJGPCOxeioyOkl
niQRS5hFhGVlRcVMSh8Df7noO/D9+smYtRmq2PHE9QlWtnW9iGum
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:17 2024 by rpki-client on console-fra.rpki-client.org