Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/WVCec6GNR2pbTVoX9dQAxQ9NknA.roa
File: WVCec6GNR2pbTVoX9dQAxQ9NknA.roa (raw, json)
Hash identifier: sfGHeYPLwM2Y6Zi0NEfFCmobJHsAD0kCZYDUaLQ0WA8=
Subject key identifier: 59:50:9E:73:A1:8D:47:6A:5B:4D:5A:17:F5:D4:00:C5:0F:4D:92:70
Certificate issuer: /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial: 01856FF96282877D250D746706FBA7EE52D9
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/WVCec6GNR2pbTVoX9dQAxQ9NknA.roa
Signing time: Mon 02 Jan 2023 00:54:52 +0000
ROA not before: Mon 02 Jan 2023 00:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205376
IP address blocks: 194.121.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:62:82:87:7d:25:0d:74:67:06:fb:a7:ee:52:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Validity
Not Before: Jan 2 00:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59509e73a18d476a5b4d5a17f5d400c50f4d9270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:bb:11:22:66:7f:da:44:58:a5:31:be:d1:
fa:b4:35:c5:c3:b8:79:b7:b8:85:3f:1c:31:04:81:
50:98:08:37:e3:a8:77:4f:16:4f:84:df:9a:5f:c5:
90:67:2e:1e:6d:08:0f:09:c6:36:77:81:c3:05:ab:
8c:41:e0:05:54:17:e7:34:10:35:bb:8c:f1:b2:4e:
1c:63:40:46:38:25:d6:72:e0:85:8e:d5:23:96:16:
25:26:6d:23:83:cc:19:c2:fb:dd:1b:e9:00:c4:6d:
2a:76:b7:81:d2:3c:73:77:1d:77:34:67:3c:03:47:
31:a9:85:98:a9:d6:b6:05:a4:54:94:3b:fb:77:9f:
0a:7a:ac:94:08:99:ac:fe:92:51:62:f6:e2:96:dd:
d9:26:26:cf:ca:66:52:2f:9c:75:82:8b:0e:a5:a7:
5e:4e:43:44:83:9a:dc:7c:f5:04:2e:c5:32:2e:4b:
68:e7:75:d3:55:8e:cf:f4:86:9a:5e:67:28:01:69:
45:21:f8:1b:a6:e0:c9:5e:8f:ac:2a:9a:79:84:ec:
56:c3:02:f5:0c:63:6c:90:7c:bb:8f:80:27:56:23:
b8:7c:f8:60:67:19:b3:d5:23:13:8f:f0:a6:46:ad:
a4:3b:36:7c:6b:5e:4c:f2:30:1a:ac:af:e6:86:58:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:50:9E:73:A1:8D:47:6A:5B:4D:5A:17:F5:D4:00:C5:0F:4D:92:70
X509v3 Authority Key Identifier:
keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/WVCec6GNR2pbTVoX9dQAxQ9NknA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.121.26.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ad:b8:ce:4c:ab:29:42:0f:a7:70:77:fa:6f:60:37:89:08:
18:4a:e2:ce:ba:45:9a:b6:07:a1:6a:99:6f:8b:3d:57:1f:8a:
79:a7:82:72:6f:2c:48:f9:ff:02:21:92:9a:47:c9:f9:af:20:
70:56:ba:ff:d7:89:e9:11:53:18:9e:87:ce:25:98:e0:03:06:
27:b4:4b:9e:0d:a7:f6:16:1a:09:81:53:be:3a:ce:54:a0:d7:
1b:8e:60:d4:34:0d:61:03:07:74:c5:02:fd:98:24:38:32:94:
3e:a1:cc:09:db:d5:66:53:4a:46:aa:72:e5:19:32:7c:41:08:
51:f0:26:15:96:2b:57:ca:43:4b:85:d7:cc:d7:74:e7:eb:37:
df:42:b9:69:ca:ad:67:6f:d9:bd:c0:70:30:4a:87:ec:d2:96:
77:7d:b6:cc:92:3e:65:21:3a:78:ed:5c:00:90:3f:1a:b6:17:
57:28:ca:3d:2d:12:74:30:da:f3:2e:15:0e:98:e6:4e:c8:12:
5e:a5:d6:43:ec:7a:30:0e:3e:e0:16:ad:72:7c:95:4d:e6:f4:
b8:72:30:77:83:f9:fb:46:de:93:43:2b:63:1f:cf:02:02:33:
93:25:c8:5c:37:7f:e8:da:72:a9:44:f6:4f:d7:62:0c:43:78:
b9:3c:62:a9
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVv+WKCh30lDXRnBvun7lLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NWIyN2MxZDU0M2FlMWVmZTgzYTE0MWJlMTI0NDRlOTI0
MThmZjMwHhcNMjMwMTAyMDA1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTUwOWU3M2ExOGQ0NzZhNWI0ZDVhMTdmNWQ0MDBjNTBmNGQ5MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2e7ESJmf9pEWKUxvtH6tDXFw7h5
t7iFPxwxBIFQmAg346h3TxZPhN+aX8WQZy4ebQgPCcY2d4HDBauMQeAFVBfnNBA1
u4zxsk4cY0BGOCXWcuCFjtUjlhYlJm0jg8wZwvvdG+kAxG0qdreB0jxzdx13NGc8
A0cxqYWYqda2BaRUlDv7d58KeqyUCJms/pJRYvbilt3ZJibPymZSL5x1gosOpade
TkNEg5rcfPUELsUyLkto53XTVY7P9IaaXmcoAWlFIfgbpuDJXo+sKpp5hOxWwwL1
DGNskHy7j4AnViO4fPhgZxmz1SMTj/CmRq2kOzZ8a15M8jAarK/mhlhEjwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFlQnnOhjUdqW01aF/XUAMUPTZJwMB8GA1UdIwQY
MBaAFPlbJ8HVQ64e/oOhQb4SRE6SQY/zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Wc253ZFZEcmg3LWc2RkJ2aEpFVHBKQmpfTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYWU4NTU0LTc0NGEtNDJkOS1iNTE4
LWFiYWQxZmZiODExYy8xL1dWQ2VjNkdOUjJwYlRWb1g5ZFFBeFE5TmtuQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvY2IvYWU4NTU0LTc0NGEtNDJkOS1iNTE4LWFiYWQxZmZiODEx
Yy8xLzEtVnNud2RWRHJoNy1nNkZCdmhKRVRwSkJqX00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCeRow
DQYJKoZIhvcNAQELBQADggEBAEmtuM5MqylCD6dwd/pvYDeJCBhK4s66RZq2B6Fq
mW+LPVcfinmngnJvLEj5/wIhkppHyfmvIHBWuv/XiekRUxieh84lmOADBie0S54N
p/YWGgmBU746zlSg1xuOYNQ0DWEDB3TFAv2YJDgylD6hzAnb1WZTSkaqcuUZMnxB
CFHwJhWWK1fKQ0uF18zXdOfrN99CuWnKrWdv2b3AcDBKh+zSlnd9tsySPmUhOnjt
XACQPxq2F1coyj0tEnQw2vMuFQ6Y5k7IEl6l1kPsejAOPuAWrXJ8lU3m9LhyMHeD
+ftG3pNDK2MfzwICM5MlyFw3f+jacqlE9k/XYgxDeLk8Yqk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:30 2024 by rpki-client on console-ams.rpki-client.org