Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/_jG9TyT1h1_ES5xOTE3w7u3Yi3Q.roa
File: _jG9TyT1h1_ES5xOTE3w7u3Yi3Q.roa (raw, json)
Hash identifier: tpBOciA524iiqNvK43NICBWbI//cnkNuRjl0M00dmTE=
Subject key identifier: FE:31:BD:4F:24:F5:87:5F:C4:4B:9C:4E:4C:4D:F0:EE:ED:D8:8B:74
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 018D7DDE76CBD4DBD6B72F20AF5309D1BF60
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/_jG9TyT1h1_ES5xOTE3w7u3Yi3Q.roa
Signing time: Tue 06 Feb 2024 10:02:27 +0000
ROA not before: Tue 06 Feb 2024 10:02:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12479
IP address blocks: 62.151.128.0/19 maxlen: 24
62.151.168.0/21 maxlen: 24
62.151.184.0/21 maxlen: 24
62.151.192.0/18 maxlen: 24
89.128.0.0/14 maxlen: 24
92.56.0.0/14 maxlen: 24
185.124.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:de:76:cb:d4:db:d6:b7:2f:20:af:53:09:d1:bf:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Feb 6 10:02:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe31bd4f24f5875fc44b9c4e4c4df0eeedd88b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:cf:6e:ac:ce:f3:2d:b4:c4:99:f6:c2:aa:
ec:de:75:0f:fe:dc:bd:f5:a5:61:2b:36:71:3d:9c:
6a:65:3d:c6:93:ce:af:b2:fa:f8:8f:de:88:85:ee:
88:16:7c:1e:85:b4:e3:ca:0a:dd:69:14:97:f1:b9:
e7:d6:6e:83:f5:5e:fa:a3:c0:f5:b6:bc:93:e3:b4:
63:bd:82:31:6d:d9:f8:f2:ad:fa:d4:bc:b7:40:f9:
b6:c1:2f:2f:00:f9:75:9a:4d:ad:af:c1:55:d5:1d:
ca:7d:c8:35:3c:1b:fd:b7:29:30:4c:31:a1:23:d1:
33:86:f7:19:8d:45:1f:bb:67:c9:9b:a0:82:f2:ee:
4a:e0:03:2d:f9:6c:38:0d:3b:5c:15:c8:a6:fc:ff:
49:f0:b1:7c:75:51:83:a8:ef:d1:f2:67:36:dd:00:
1f:c0:19:b2:a8:fb:04:6d:ff:a7:54:69:f9:26:a8:
13:fe:c1:27:93:f8:d7:b1:2c:71:70:45:41:0d:46:
5f:8a:52:a5:79:3a:c2:40:02:cc:95:58:cc:e2:d4:
7c:ca:55:b6:9f:20:8f:f7:17:83:f3:8d:e4:23:2c:
3a:cf:4d:5a:c2:26:34:59:85:78:6e:e1:a6:b3:09:
8f:01:57:ba:f4:4f:bc:5c:ca:2c:cf:82:3e:68:20:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:31:BD:4F:24:F5:87:5F:C4:4B:9C:4E:4C:4D:F0:EE:ED:D8:8B:74
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/_jG9TyT1h1_ES5xOTE3w7u3Yi3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.151.128.0/19
62.151.168.0/21
62.151.184.0-62.151.255.255
89.128.0.0/14
92.56.0.0/14
185.124.24.0/22
Signature Algorithm: sha256WithRSAEncryption
62:db:19:10:85:58:80:d3:fd:4b:a2:36:11:cd:e1:53:f1:ac:
7c:fe:34:c5:cf:b8:04:9f:03:5a:3e:6b:02:93:5e:f4:7e:24:
b6:07:41:26:67:c9:d5:8c:ce:1f:dc:ec:6c:38:a8:58:aa:a4:
b5:47:7d:d5:b8:aa:5f:56:54:09:f6:17:23:76:09:46:16:e0:
73:fa:d6:ef:96:6d:8e:ff:e6:4f:93:59:3e:72:07:cc:64:f8:
67:98:6a:ab:c9:02:5a:64:2e:23:5d:7d:c7:8d:6b:0b:e3:4a:
c3:4d:2e:31:26:5d:e2:e7:60:57:39:e3:90:29:02:94:b5:e5:
45:89:be:9d:22:91:84:ac:b7:71:da:73:a0:27:56:dd:55:d0:
94:3a:b8:1d:71:70:c8:69:6a:c0:92:3f:3d:fd:4c:18:a3:91:
14:0b:cb:bc:bf:96:81:14:17:d3:ec:f2:a0:f3:f5:d7:8e:5d:
5f:a6:ad:0d:90:d4:08:7d:0d:dc:3a:8b:7c:f4:90:34:06:0b:
ad:a7:08:3b:27:46:e3:6c:76:93:64:c5:82:93:c9:55:2d:02:
ee:66:6b:3c:6e:b3:17:34:40:77:9e:a5:32:53:48:1d:5a:b2:
2e:6c:a3:71:a4:47:d7:94:d3:b2:99:ed:1e:a8:16:ee:7f:8c:
74:8e:1b:df
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAY193nbL1NvWty8gr1MJ0b9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTQ4NGY3ZDBmZmY0MjBmNmI3NzEzYTkzY2RjYjBjNTEw
MDcyNjcwHhcNMjQwMjA2MTAwMjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTMxYmQ0ZjI0ZjU4NzVmYzQ0YjljNGU0YzRkZjBlZWVkZDg4Yjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodfPbqzO8y20xJn2wqrs3nUP/ty9
9aVhKzZxPZxqZT3Gk86vsvr4j96Ihe6IFnwehbTjygrdaRSX8bnn1m6D9V76o8D1
tryT47RjvYIxbdn48q361Ly3QPm2wS8vAPl1mk2tr8FV1R3Kfcg1PBv9tykwTDGh
I9EzhvcZjUUfu2fJm6CC8u5K4AMt+Ww4DTtcFcim/P9J8LF8dVGDqO/R8mc23QAf
wBmyqPsEbf+nVGn5JqgT/sEnk/jXsSxxcEVBDUZfilKleTrCQALMlVjM4tR8ylW2
nyCP9xeD843kIyw6z01awiY0WYV4buGmswmPAVe69E+8XMosz4I+aCBN3wIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFP4xvU8k9YdfxEucTkxN8O7t2It0MB8GA1UdIwQY
MBaAFD/khPfQ//Qg9rdxOpPNywxRAHJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2Mt
OTMyNjA2OTNhZGQ1LzEvX2pHOVR5VDFoMV9FUzV4T1RFM3c3dTNZaTNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xYjcxMGItZDJmMS00ZTE1LWFhM2MtOTMyNjA2OTNhZGQ1
LzEvUC1TRTk5RF85Q0QydDNFNms4M0xERkVBY21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAvBAIAATApAwQFPpeAAwQD
PpeoMAsDBAM+l7gDAwM+kAMDAlmAAwMCXDgDBAK5fBgwDQYJKoZIhvcNAQELBQAD
ggEBAGLbGRCFWIDT/UuiNhHN4VPxrHz+NMXPuASfA1o+awKTXvR+JLYHQSZnydWM
zh/c7Gw4qFiqpLVHfdW4ql9WVAn2FyN2CUYW4HP61u+WbY7/5k+TWT5yB8xk+GeY
aqvJAlpkLiNdfceNawvjSsNNLjEmXeLnYFc545ApApS15UWJvp0ikYSst3Hac6An
Vt1V0JQ6uB1xcMhpasCSPz39TBijkRQLy7y/loEUF9Ps8qDz9deOXV+mrQ2Q1Ah9
Ddw6i3z0kDQGC62nCDsnRuNsdpNkxYKTyVUtAu5mazxusxc0QHeepTJTSB1asi5s
o3GkR9eU07KZ7R6oFu5/jHSOG98=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:23 2025 by rpki-client