Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/ecPCC1cLAqW-CkyOBqvsZu6gLV4.roa
File: ecPCC1cLAqW-CkyOBqvsZu6gLV4.roa (raw, json)
Hash identifier: ONJikeqfT7+azlXFa8GZ+MNq46upu+1Rvv/WepRT3dk=
Subject key identifier: 79:C3:C2:0B:57:0B:02:A5:BE:0A:4C:8E:06:AB:EC:66:EE:A0:2D:5E
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 01856D5CF4CB29D9EC0C3E32E2BCA030188F
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/ecPCC1cLAqW-CkyOBqvsZu6gLV4.roa
Signing time: Sun 01 Jan 2023 12:44:46 +0000
ROA not before: Sun 01 Jan 2023 12:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49957
IP address blocks: 91.206.184.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:f4:cb:29:d9:ec:0c:3e:32:e2:bc:a0:30:18:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: Jan 1 12:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79c3c20b570b02a5be0a4c8e06abec66eea02d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:b3:08:33:20:5c:6b:1b:3e:61:58:ef:23:
24:5f:e2:22:73:37:86:93:4b:b8:0d:2d:71:20:55:
52:7a:8c:f5:58:59:ed:34:59:bd:c3:b1:74:00:0b:
42:f4:28:41:a2:b1:fd:f3:35:b1:4f:a3:3c:5a:ac:
4f:52:13:1c:79:60:b6:b7:a0:ac:ea:f7:e3:d2:57:
ed:64:d3:71:35:2b:69:23:49:69:7f:23:15:69:c0:
9f:3c:d0:16:b8:a2:a2:18:5c:f3:f6:10:50:a6:7e:
e1:b1:28:b8:44:ac:d3:cc:44:f1:a9:f6:93:18:be:
63:ac:7a:a2:ad:98:d9:1c:d7:67:39:52:aa:d2:00:
bd:a4:f7:59:72:e9:57:c1:e9:09:34:96:ac:5d:95:
d1:ab:9d:6d:71:65:4b:f6:e6:67:f0:8b:d4:de:f6:
d7:2c:10:12:59:10:f8:c9:21:c4:20:89:b8:fa:ca:
67:ad:a3:31:06:23:a7:0a:92:1b:42:f9:d0:b3:60:
4c:ee:82:6a:78:6e:53:11:36:59:b2:74:ac:d3:0e:
a4:17:c1:82:e7:d5:9e:0f:3f:cb:c1:7d:5f:ec:7d:
55:98:f3:b6:c6:c3:d5:d9:a4:f1:ce:51:00:87:a2:
a3:e9:07:35:4e:35:ca:f6:be:c3:5b:7a:13:9b:ef:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C3:C2:0B:57:0B:02:A5:BE:0A:4C:8E:06:AB:EC:66:EE:A0:2D:5E
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/ecPCC1cLAqW-CkyOBqvsZu6gLV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.184.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:09:b4:70:db:31:3d:1f:39:8f:b1:02:f9:aa:5a:0b:40:db:
86:59:e0:11:d1:71:2d:17:8c:f8:cd:ab:05:36:b1:d6:3e:ba:
ab:94:f1:28:51:ad:58:26:61:04:ee:16:49:74:95:c2:26:8a:
e9:ff:ed:49:99:dd:d5:66:fe:1e:3a:8f:78:45:c3:27:7a:da:
27:67:18:e1:69:12:e2:7d:cd:fa:da:ad:ee:bc:e6:bf:97:e5:
c3:ef:c7:00:36:45:21:4a:9f:9e:6c:63:bc:13:cb:fc:ab:2d:
f8:d1:6e:fd:13:d1:48:95:0b:4f:6f:22:44:b9:a6:e3:be:bf:
cf:fb:e5:cd:f1:9d:56:a7:80:de:ce:c1:76:17:f0:b0:78:52:
40:3e:38:1e:ec:03:3b:64:c0:db:fa:f3:b7:9d:d3:b2:04:99:
da:cb:91:d6:5b:de:5d:d9:47:b4:8a:d5:01:fa:19:d1:30:e3:
d6:b3:66:0e:29:47:5e:18:dd:42:f8:2e:94:d7:01:d3:c1:f6:
20:8a:ec:56:e5:65:86:f2:0b:10:1b:85:a0:7f:cb:1c:b8:90:
a4:12:13:bf:66:bf:33:75:c1:47:1c:d0:c9:f5:8e:d0:7f:f9:
84:70:fa:39:b8:4b:db:49:37:92:ce:f8:28:4e:1d:72:9a:6f:
2d:79:df:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtXPTLKdnsDD4y4rygMBiPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMGUwOTQ5ZGY1OTMwZjZiNzllZmNiZDljYmExNzRjYTIx
M2Y1NjkwHhcNMjMwMTAxMTI0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWMzYzIwYjU3MGIwMmE1YmUwYTRjOGUwNmFiZWM2NmVlYTAyZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtezCDMgXGsbPmFY7yMkX+IiczeG
k0u4DS1xIFVSeoz1WFntNFm9w7F0AAtC9ChBorH98zWxT6M8WqxPUhMceWC2t6Cs
6vfj0lftZNNxNStpI0lpfyMVacCfPNAWuKKiGFzz9hBQpn7hsSi4RKzTzETxqfaT
GL5jrHqirZjZHNdnOVKq0gC9pPdZculXwekJNJasXZXRq51tcWVL9uZn8IvU3vbX
LBASWRD4ySHEIIm4+spnraMxBiOnCpIbQvnQs2BM7oJqeG5TETZZsnSs0w6kF8GC
59WeDz/LwX1f7H1VmPO2xsPV2aTxzlEAh6Kj6Qc1TjXK9r7DW3oTm++T+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnDwgtXCwKlvgpMjgar7GbuoC1eMB8GA1UdIwQY
MBaAFEMOCUnfWTD2t578vZy6F0yiE/VpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81MmE5N2YtMmFkNi00MDU5LTg2NDYt
MDY4NjE2MGE3ZTY4LzEvZWNQQ0MxY0xBcVctQ2t5T0JxdnNadTZnTFY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81MmE5N2YtMmFkNi00MDU5LTg2NDYtMDY4NjE2MGE3ZTY4
LzEvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW864MA0G
CSqGSIb3DQEBCwUAA4IBAQAeCbRw2zE9HzmPsQL5qloLQNuGWeAR0XEtF4z4zasF
NrHWPrqrlPEoUa1YJmEE7hZJdJXCJorp/+1Jmd3VZv4eOo94RcMnetonZxjhaRLi
fc362q3uvOa/l+XD78cANkUhSp+ebGO8E8v8qy340W79E9FIlQtPbyJEuabjvr/P
++XN8Z1Wp4DezsF2F/CweFJAPjge7AM7ZMDb+vO3ndOyBJnay5HWW95d2Ue0itUB
+hnRMOPWs2YOKUdeGN1C+C6U1wHTwfYgiuxW5WWG8gsQG4Wgf8scuJCkEhO/Zr8z
dcFHHNDJ9Y7Qf/mEcPo5uEvbSTeSzvgoTh1ymm8ted+5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:31 2024 by rpki-client on console-ams.rpki-client.org