Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/EccLKUVjyNWxZdoiXy_eq6A6tgI.roa
File: EccLKUVjyNWxZdoiXy_eq6A6tgI.roa (raw, json)
Hash identifier: sU+COu3AMK7e2r9tOwWDOJImQ6xYAL3XdLPO90Us8TM=
Subject key identifier: 11:C7:0B:29:45:63:C8:D5:B1:65:DA:22:5F:2F:DE:AB:A0:3A:B6:02
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 01856BD33F48730613996A334AED2A686A4B
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/EccLKUVjyNWxZdoiXy_eq6A6tgI.roa
Signing time: Sun 01 Jan 2023 05:34:44 +0000
ROA not before: Sun 01 Jan 2023 05:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49367
IP address blocks: 91.230.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:3f:48:73:06:13:99:6a:33:4a:ed:2a:68:6a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 1 05:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11c70b294563c8d5b165da225f2fdeaba03ab602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:69:5d:53:ac:5b:ef:6f:09:84:cb:bf:d3:
e4:9c:24:f5:bd:e0:0b:01:34:32:dc:e7:1f:b8:e1:
ce:ed:b8:90:0a:fe:f4:9f:a5:8e:48:a4:1e:5b:d1:
f4:93:5e:fb:d3:36:07:1e:26:c9:d2:70:8e:14:89:
29:35:c7:42:40:dd:30:82:78:6d:fa:ce:8a:6d:f2:
cb:d2:6c:1f:89:65:ac:be:0d:d0:5b:ab:71:fc:32:
d5:40:6a:f1:bd:3b:67:69:8c:ac:07:c5:71:0a:37:
43:56:63:86:47:bb:3a:76:ca:9a:c7:a6:55:1c:94:
b7:1a:2a:a4:49:83:da:ae:05:95:47:ee:69:6e:db:
1e:a8:ff:64:d7:c7:d1:a7:12:3f:f9:61:0c:92:b9:
5a:3b:6f:a6:03:07:5c:97:13:1d:77:35:47:be:c0:
ee:87:57:ee:f7:e4:6e:32:b4:f9:bc:08:de:05:8f:
b5:70:da:20:f6:9f:b0:b4:a3:b3:fc:e8:51:12:d9:
0c:ed:52:9c:f8:36:bb:9f:1f:ae:bb:a0:fc:56:68:
51:33:34:9f:0b:3b:78:f9:a7:b0:ee:6f:a6:9c:ec:
a2:69:94:0a:ad:07:38:bc:9a:55:18:eb:0f:c5:a8:
11:d3:46:42:ac:76:4a:f3:ed:43:4a:bf:8a:dd:81:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C7:0B:29:45:63:C8:D5:B1:65:DA:22:5F:2F:DE:AB:A0:3A:B6:02
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/EccLKUVjyNWxZdoiXy_eq6A6tgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:52:49:90:55:48:56:74:86:ec:1d:a5:7c:82:3b:40:32:4b:
61:10:34:f9:ff:c6:81:6c:87:9a:f7:ba:16:9b:e6:66:93:f1:
b9:e6:97:ed:46:25:83:80:23:84:0e:f5:d8:27:17:e0:6b:54:
16:b9:56:ac:f6:65:e2:bc:3c:78:31:f1:f3:e5:de:f7:46:42:
46:1e:31:4a:12:ea:ef:ea:ba:ef:6e:a3:03:50:e5:d1:cc:d2:
90:dc:e5:05:54:4e:0c:a8:50:13:bd:96:af:ce:81:11:12:e2:
69:b5:e7:8e:88:29:d1:7f:d3:74:83:08:fd:25:73:59:ca:c0:
f6:71:54:bc:17:c0:e2:ec:90:c2:9a:87:53:c1:c4:25:57:63:
4a:2c:b4:c7:a3:c7:c0:8f:37:17:bb:9e:3a:9a:99:2b:6c:50:
0e:05:d8:0a:98:c5:0e:cc:ad:62:5f:22:5f:7d:b5:f0:1b:be:
4b:3e:d7:69:64:0c:50:29:34:a5:16:6f:14:34:ba:ff:4f:dc:
02:04:f5:31:52:a4:3c:16:fe:3c:c7:df:02:9e:35:7e:18:25:
94:59:0b:57:65:3e:84:78:0e:3d:f2:b7:86:32:5e:28:88:84:
d5:1b:e5:ff:4a:7f:c5:9f:6a:be:5d:c0:f8:a4:f7:ad:a0:b5:
9d:97:2b:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr0z9IcwYTmWozSu0qaGpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3
NmFlYjIwHhcNMjMwMTAxMDUzNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWM3MGIyOTQ1NjNjOGQ1YjE2NWRhMjI1ZjJmZGVhYmEwM2FiNjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc1pXVOsW+9vCYTLv9PknCT1veAL
ATQy3OcfuOHO7biQCv70n6WOSKQeW9H0k1770zYHHibJ0nCOFIkpNcdCQN0wgnht
+s6KbfLL0mwfiWWsvg3QW6tx/DLVQGrxvTtnaYysB8VxCjdDVmOGR7s6dsqax6ZV
HJS3GiqkSYPargWVR+5pbtseqP9k18fRpxI/+WEMkrlaO2+mAwdclxMddzVHvsDu
h1fu9+RuMrT5vAjeBY+1cNog9p+wtKOz/OhREtkM7VKc+Da7nx+uu6D8VmhRMzSf
Czt4+aew7m+mnOyiaZQKrQc4vJpVGOsPxagR00ZCrHZK8+1DSr+K3YGeKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBHHCylFY8jVsWXaIl8v3qugOrYCMB8GA1UdIwQY
MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt
N2UwNWFkMDE5MGNlLzEvRWNjTEtVVmp5Tld4WmRvaVh5X2VxNkE2dGdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl
LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+b3MA0G
CSqGSIb3DQEBCwUAA4IBAQBqUkmQVUhWdIbsHaV8gjtAMkthEDT5/8aBbIea97oW
m+Zmk/G55pftRiWDgCOEDvXYJxfga1QWuVas9mXivDx4MfHz5d73RkJGHjFKEurv
6rrvbqMDUOXRzNKQ3OUFVE4MqFATvZavzoEREuJpteeOiCnRf9N0gwj9JXNZysD2
cVS8F8Di7JDCmodTwcQlV2NKLLTHo8fAjzcXu546mpkrbFAOBdgKmMUOzK1iXyJf
fbXwG75LPtdpZAxQKTSlFm8UNLr/T9wCBPUxUqQ8Fv48x98CnjV+GCWUWQtXZT6E
eA498reGMl4oiITVG+X/Sn/Fn2q+XcD4pPetoLWdlysN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:09 2024 by rpki-client on console-fra.rpki-client.org