Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/EculcxnoTP0zZUK2pOE83gKGRvM.roa
File: EculcxnoTP0zZUK2pOE83gKGRvM.roa (raw, json)
Hash identifier: y9rjASUZw5UtNOBK37RczKTYvWNbxo4NzA2dInzL95E=
Subject key identifier: 11:CB:A5:73:19:E8:4C:FD:33:65:42:B6:A4:E1:3C:DE:02:86:46:F3
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 018998967E88EE27E4CE0EAA174B05DBA3F7
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/EculcxnoTP0zZUK2pOE83gKGRvM.roa
Signing time: Thu 27 Jul 2023 18:22:26 +0000
ROA not before: Thu 27 Jul 2023 18:22:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48146
IP address blocks: 5.59.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:96:7e:88:ee:27:e4:ce:0e:aa:17:4b:05:db:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jul 27 18:22:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11cba57319e84cfd336542b6a4e13cde028646f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b8:2f:f7:cb:75:00:ec:55:ab:0b:ae:9e:73:
b3:1d:93:92:e6:18:7d:95:7d:7d:c3:71:45:4b:05:
9d:c8:81:bb:35:62:bc:1a:4b:f3:26:1e:11:53:48:
2a:a9:9b:fd:2c:c1:83:e7:57:cc:48:52:ac:28:52:
e3:56:9c:dc:ad:9b:5e:64:16:d6:7c:d0:46:fc:fb:
d8:8a:ee:d5:01:9c:27:e4:7c:38:88:ed:0b:5b:4a:
0f:09:e8:08:a7:61:69:d2:0a:8c:f9:3d:de:4b:c2:
53:4c:9b:3a:59:37:eb:98:87:bc:1d:ac:b3:d7:5b:
bb:b2:bf:d0:a9:56:dd:df:9f:42:7f:9c:63:f8:4d:
c1:c8:d2:9b:a2:95:17:87:47:f1:a5:54:80:10:34:
d8:b4:7a:09:4a:f4:5e:77:8d:42:ba:cb:bb:0b:e9:
1e:ce:aa:e8:27:90:00:41:c4:22:19:4d:08:e3:fb:
51:4d:ff:51:12:b6:b8:75:31:0c:7d:9d:e2:49:b4:
0f:1e:36:75:47:dd:67:34:3d:69:00:69:39:15:99:
24:a2:b3:a5:a4:f1:52:4e:61:19:2e:19:80:50:67:
f9:10:12:86:11:e4:d8:f0:e0:85:69:46:d8:84:fb:
08:e2:0f:16:d7:4f:ac:f1:b3:5d:50:cb:8c:cf:f5:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:A5:73:19:E8:4C:FD:33:65:42:B6:A4:E1:3C:DE:02:86:46:F3
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/EculcxnoTP0zZUK2pOE83gKGRvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:bc:8b:02:db:2c:9c:72:31:55:c0:2a:65:81:97:02:27:25:
c5:d3:f6:89:9a:fe:a2:de:dc:15:b7:5e:8b:74:9d:5c:e7:8c:
a1:8d:47:e0:61:66:a5:5d:36:60:69:85:fc:0b:68:f6:b9:74:
41:5d:71:b0:d5:83:c2:90:c4:59:30:29:60:e7:60:b4:b0:06:
e9:94:29:05:d3:b8:86:0b:c6:af:04:4c:af:91:65:fb:fa:c3:
5a:da:7c:41:7e:25:35:27:22:8a:82:57:77:29:d5:6a:59:a7:
bb:5f:56:a1:70:b6:e9:7f:17:d1:ae:94:8c:44:16:65:55:e7:
d6:37:1d:42:ae:ed:60:cd:ec:a9:32:e5:47:9d:6a:bc:e4:50:
91:1f:fb:be:51:17:cb:07:b0:9c:1f:0c:d1:a6:ad:6d:70:dd:
1e:34:87:d4:dc:ed:90:c9:db:1c:3f:e4:bd:a5:d2:4d:8e:ed:
fe:6d:5b:17:fb:71:33:8a:17:ca:89:42:04:45:23:3e:41:aa:
69:31:b4:34:e7:67:ee:04:57:db:72:5a:2f:d3:ea:51:63:6e:
69:f7:13:3b:99:ff:88:01:cc:c7:19:b4:9a:17:a1:91:7f:53:
67:f2:65:3e:fe:d2:1d:12:d0:e0:0f:e3:78:cb:a1:47:dd:08:
7f:35:67:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmYln6I7ifkzg6qF0sF26P3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh
YmVhZjIwHhcNMjMwNzI3MTgyMjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWNiYTU3MzE5ZTg0Y2ZkMzM2NTQyYjZhNGUxM2NkZTAyODY0NmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLgv98t1AOxVqwuunnOzHZOS5hh9
lX19w3FFSwWdyIG7NWK8GkvzJh4RU0gqqZv9LMGD51fMSFKsKFLjVpzcrZteZBbW
fNBG/PvYiu7VAZwn5Hw4iO0LW0oPCegIp2Fp0gqM+T3eS8JTTJs6WTfrmIe8Hayz
11u7sr/QqVbd359Cf5xj+E3ByNKbopUXh0fxpVSAEDTYtHoJSvRed41Cusu7C+ke
zqroJ5AAQcQiGU0I4/tRTf9REra4dTEMfZ3iSbQPHjZ1R91nND1pAGk5FZkkorOl
pPFSTmEZLhmAUGf5EBKGEeTY8OCFaUbYhPsI4g8W10+s8bNdUMuMz/XCUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBHLpXMZ6Ez9M2VCtqThPN4ChkbzMB8GA1UdIwQY
MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt
OWI5YmNlMTVlMGM2LzEvRWN1bGN4bm9UUDB6WlVLMnBPRTgzZ0tHUnZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2
LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTs8MA0G
CSqGSIb3DQEBCwUAA4IBAQAOvIsC2yyccjFVwCplgZcCJyXF0/aJmv6i3twVt16L
dJ1c54yhjUfgYWalXTZgaYX8C2j2uXRBXXGw1YPCkMRZMClg52C0sAbplCkF07iG
C8avBEyvkWX7+sNa2nxBfiU1JyKKgld3KdVqWae7X1ahcLbpfxfRrpSMRBZlVefW
Nx1Cru1gzeypMuVHnWq85FCRH/u+URfLB7CcHwzRpq1tcN0eNIfU3O2QydscP+S9
pdJNju3+bVsX+3EzihfKiUIERSM+QappMbQ052fuBFfbclov0+pRY25p9xM7mf+I
AczHGbSaF6GRf1Nn8mU+/tIdEtDgD+N4y6FH3Qh/NWeO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org