Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/a5YytpJwPdD0HFkvjf0FscO3YNU.roa
File: a5YytpJwPdD0HFkvjf0FscO3YNU.roa (raw, json)
Hash identifier: Dr5MLl/op7mcNBaX0W7b4OmCAYvkCTBhckxg7Ic6St8=
Subject key identifier: 6B:96:32:B6:92:70:3D:D0:F4:1C:59:2F:8D:FD:05:B1:C3:B7:60:D5
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DD92774BEB6B09F41C1817D767320
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/a5YytpJwPdD0HFkvjf0FscO3YNU.roa
Signing time: Sun 01 Jan 2023 20:55:05 +0000
ROA not before: Sun 01 Jan 2023 20:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204994
IP address blocks: 194.36.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:d9:27:74:be:b6:b0:9f:41:c1:81:7d:76:73:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b9632b692703dd0f41c592f8dfd05b1c3b760d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:80:7a:fb:36:f8:d8:60:1b:e7:07:9a:7d:
f2:76:d3:47:17:ef:c1:11:c3:b4:ae:2d:9f:83:2c:
6d:cd:20:89:ce:72:20:ec:da:3e:59:02:ce:2b:94:
65:fd:de:cb:bc:60:4d:da:3e:4d:bd:2b:c5:8b:93:
7b:c3:9a:06:7f:e8:ce:1b:f6:3f:df:27:af:21:40:
c3:0b:a3:e2:17:ed:87:42:76:d5:0e:8d:68:e3:5c:
66:93:a7:b2:78:4f:7f:4d:61:69:4b:8d:33:25:db:
e3:23:a4:d6:1b:b9:31:cb:f0:e2:e1:b7:54:60:21:
5a:b9:50:d3:f3:69:d5:fd:9d:f3:69:97:74:ef:6d:
85:77:ec:95:59:2e:88:1d:ab:db:8e:8d:9b:5b:0a:
3f:0c:ed:41:cd:ba:4f:61:eb:ce:97:8d:e8:22:9b:
03:bc:82:dc:49:73:30:3f:09:02:e5:45:ea:a6:12:
02:17:d6:72:e6:f2:5f:17:25:f4:b2:12:49:7f:0f:
aa:e7:9d:2c:d8:69:ef:03:68:12:69:51:43:fe:a4:
1f:10:9f:e3:64:f5:46:95:36:0f:2f:cf:12:bd:f5:
12:a6:17:79:bc:94:7b:ba:1f:4a:9a:94:b0:16:3f:
31:2e:75:92:e4:fc:98:59:83:d6:a2:a4:03:6b:75:
78:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:96:32:B6:92:70:3D:D0:F4:1C:59:2F:8D:FD:05:B1:C3:B7:60:D5
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/a5YytpJwPdD0HFkvjf0FscO3YNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.26.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6a:85:21:50:fb:62:02:4e:b4:d8:7d:c3:2b:d8:a1:a1:d6:
7f:4b:ce:60:19:1a:45:fe:2b:fe:b1:dc:9a:f4:4f:2c:fb:b6:
60:47:94:f3:21:1e:01:fa:8f:56:9a:80:c9:a2:1d:82:dc:94:
e7:81:a5:78:56:de:71:24:db:ee:72:95:0e:16:0c:90:f6:d2:
dc:ad:e0:18:0a:73:70:b2:1c:06:2e:67:08:c6:c7:cc:ea:99:
13:2d:65:17:60:0e:13:0e:f3:85:a1:36:76:1a:cf:50:42:5c:
e1:34:61:13:bb:b4:1b:29:6a:dc:aa:71:fb:d5:2f:1b:ea:df:
ff:26:85:d3:3b:09:59:05:54:7b:32:8d:3b:d5:e6:9c:42:a8:
97:8b:d2:e8:ba:91:17:77:6e:41:ae:e3:b1:57:47:15:11:6f:
3f:0a:67:6a:c1:35:26:10:4e:ec:21:8c:6d:64:5b:58:e2:9b:
f1:73:c2:04:d5:c3:a9:93:0a:3e:c7:66:73:a9:03:ca:4a:07:
d2:80:1b:bc:3e:5c:19:0e:4a:11:f9:05:72:b4:ea:6e:2c:e7:
40:28:0d:90:cb:cd:d8:b4:a7:de:82:9e:3f:86:5a:bc:6d:00:
44:d8:5c:90:51:f9:c3:8b:b2:ff:0a:61:c0:e1:38:b7:6f:bd:
92:cb:fe:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvHdkndL62sJ9BwYF9dnMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjMwMTAxMjA1NTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yjk2MzJiNjkyNzAzZGQwZjQxYzU5MmY4ZGZkMDViMWMzYjc2MGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+iAevs2+NhgG+cHmn3ydtNHF+/B
EcO0ri2fgyxtzSCJznIg7No+WQLOK5Rl/d7LvGBN2j5NvSvFi5N7w5oGf+jOG/Y/
3yevIUDDC6PiF+2HQnbVDo1o41xmk6eyeE9/TWFpS40zJdvjI6TWG7kxy/Di4bdU
YCFauVDT82nV/Z3zaZd0722Fd+yVWS6IHavbjo2bWwo/DO1BzbpPYevOl43oIpsD
vILcSXMwPwkC5UXqphICF9Zy5vJfFyX0shJJfw+q550s2GnvA2gSaVFD/qQfEJ/j
ZPVGlTYPL88SvfUSphd5vJR7uh9KmpSwFj8xLnWS5PyYWYPWoqQDa3V4CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGuWMraScD3Q9BxZL439BbHDt2DVMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvYTVZeXRwSndQZEQwSEZrdmpmMEZzY08zWU5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiQaMA0G
CSqGSIb3DQEBCwUAA4IBAQCRaoUhUPtiAk602H3DK9ihodZ/S85gGRpF/iv+sdya
9E8s+7ZgR5TzIR4B+o9WmoDJoh2C3JTngaV4Vt5xJNvucpUOFgyQ9tLcreAYCnNw
shwGLmcIxsfM6pkTLWUXYA4TDvOFoTZ2Gs9QQlzhNGETu7QbKWrcqnH71S8b6t//
JoXTOwlZBVR7Mo071eacQqiXi9LoupEXd25BruOxV0cVEW8/CmdqwTUmEE7sIYxt
ZFtY4pvxc8IE1cOpkwo+x2ZzqQPKSgfSgBu8PlwZDkoR+QVytOpuLOdAKA2Qy83Y
tKfegp4/hlq8bQBE2FyQUfnDi7L/CmHA4Ti3b72Sy/5z
-----END CERTIFICATE-----
Generated at Sat Nov 18 23:37:56 2023 by rpki-client on console-fra.rpki-client.org