Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/9w526XYUIg2_wbScOiYBgPK-H04.roa
File: 9w526XYUIg2_wbScOiYBgPK-H04.roa (raw, json)
Hash identifier: c+fveklk/3MW7oBzuVveUCI/wI6dJgcNgxZ55LM3fkM=
Subject key identifier: F7:0E:76:E9:76:14:22:0D:BF:C1:B4:9C:3A:26:01:80:F2:BE:1F:4E
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01882B380F952C2221BA438C6E9C9F7CAA3B
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/9w526XYUIg2_wbScOiYBgPK-H04.roa
Signing time: Wed 17 May 2023 19:37:54 +0000
ROA not before: Wed 17 May 2023 19:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35830
IP address blocks: 91.243.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 10:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2b:38:0f:95:2c:22:21:ba:43:8c:6e:9c:9f:7c:aa:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: May 17 19:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f70e76e97614220dbfc1b49c3a260180f2be1f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:46:9b:0d:76:d2:37:89:e8:0a:2a:2c:79:
06:75:d1:5a:0a:bb:7f:c5:13:be:39:20:0a:5d:57:
75:b8:d6:7d:d8:ac:14:f3:26:fa:32:02:2c:9e:a8:
23:61:cf:d4:3b:7c:9d:ba:40:4a:a8:4c:99:1f:ed:
f7:43:08:ae:e2:8e:66:60:ec:37:bb:e9:85:ef:a6:
16:60:7c:69:3f:e0:f7:7b:a8:d2:2f:d5:24:0c:fe:
67:e0:5b:63:b1:eb:28:2a:12:47:eb:81:86:e8:d5:
02:05:54:a0:82:70:4f:f8:4d:e8:b2:e0:94:ce:c6:
c5:02:74:fd:31:68:f8:df:7a:2e:ea:bd:08:83:83:
9c:5d:18:dc:b2:2d:1c:70:30:c8:bf:56:40:ca:70:
b1:f5:a9:03:1e:0f:af:56:90:d6:9e:fd:bf:d5:17:
fa:83:cb:44:33:df:60:9f:d2:49:ad:e1:b1:af:46:
26:39:b5:de:7a:8b:c3:87:83:97:1d:05:ba:c9:cc:
4d:43:69:c1:df:78:fc:16:fb:18:17:97:ce:9b:1b:
95:8f:61:0e:43:bb:bc:88:c7:23:74:c0:f5:c5:6a:
5a:75:72:cb:ed:7e:6e:76:94:7f:47:a4:1a:64:e4:
bb:e6:bf:a7:2e:1d:7f:52:9f:4e:1d:5c:c6:59:18:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0E:76:E9:76:14:22:0D:BF:C1:B4:9C:3A:26:01:80:F2:BE:1F:4E
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/9w526XYUIg2_wbScOiYBgPK-H04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:70:f3:08:03:06:54:db:52:08:36:be:65:7a:62:75:62:02:
2c:fd:c2:c0:3d:0e:d3:76:69:de:98:f5:62:c8:78:30:5e:50:
09:df:d4:68:ac:68:0b:68:23:2b:30:5c:0c:2b:61:40:c9:83:
c2:ee:e2:75:ce:60:b8:68:db:b0:75:97:31:4a:b2:ef:76:58:
3b:ab:67:e3:31:cb:5d:61:ad:41:a7:b3:17:3d:cf:23:ef:f3:
1b:dd:c1:3d:a4:44:12:00:5d:26:d4:88:39:ba:92:a3:15:77:
31:a7:aa:c4:c0:2e:ac:bc:62:f4:40:17:34:fc:65:14:d2:ee:
35:51:0a:1e:ac:de:06:7e:5e:99:2c:fa:2c:8a:7e:fd:db:6a:
56:18:f1:ff:66:f3:2a:ae:57:e1:13:21:32:06:d8:04:1b:25:
69:ce:fd:23:39:57:13:bd:10:31:a2:5a:b4:35:09:1d:34:63:
a8:b4:70:14:a0:76:3b:38:11:1f:23:a3:74:5a:97:69:32:e0:
62:04:c3:f9:71:2d:3e:5a:3a:63:bd:98:0b:01:be:3c:7c:0a:
b0:84:8d:fd:d9:ef:6f:6d:70:28:85:cf:ee:76:a7:97:3f:46:
af:b6:8e:02:48:d8:fa:00:f0:6c:29:9c:9b:8d:1e:50:d7:a9:
35:9f:01:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgrOA+VLCIhukOMbpyffKo7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjMwNTE3MTkzNzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzBlNzZlOTc2MTQyMjBkYmZjMWI0OWMzYTI2MDE4MGYyYmUxZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmNGmw120jeJ6AoqLHkGddFaCrt/
xRO+OSAKXVd1uNZ92KwU8yb6MgIsnqgjYc/UO3ydukBKqEyZH+33Qwiu4o5mYOw3
u+mF76YWYHxpP+D3e6jSL9UkDP5n4FtjsesoKhJH64GG6NUCBVSggnBP+E3osuCU
zsbFAnT9MWj433ou6r0Ig4OcXRjcsi0ccDDIv1ZAynCx9akDHg+vVpDWnv2/1Rf6
g8tEM99gn9JJreGxr0YmObXeeovDh4OXHQW6ycxNQ2nB33j8FvsYF5fOmxuVj2EO
Q7u8iMcjdMD1xWpadXLL7X5udpR/R6QaZOS75r+nLh1/Up9OHVzGWRgdZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPcOdul2FCINv8G0nDomAYDyvh9OMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvOXc1MjZYWVVJZzJfd2JTY09pWUJnUEstSDA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/O+MA0G
CSqGSIb3DQEBCwUAA4IBAQA8cPMIAwZU21IINr5lemJ1YgIs/cLAPQ7TdmnemPVi
yHgwXlAJ39RorGgLaCMrMFwMK2FAyYPC7uJ1zmC4aNuwdZcxSrLvdlg7q2fjMctd
Ya1Bp7MXPc8j7/Mb3cE9pEQSAF0m1Ig5upKjFXcxp6rEwC6svGL0QBc0/GUU0u41
UQoerN4Gfl6ZLPosin7922pWGPH/ZvMqrlfhEyEyBtgEGyVpzv0jOVcTvRAxolq0
NQkdNGOotHAUoHY7OBEfI6N0WpdpMuBiBMP5cS0+WjpjvZgLAb48fAqwhI392e9v
bXAohc/udqeXP0avto4CSNj6APBsKZybjR5Q16k1nwGJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org