Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/0ZlN-m9B2hY6RbW0MbFVnjSCApQ.roa
File: 0ZlN-m9B2hY6RbW0MbFVnjSCApQ.roa (raw, json)
Hash identifier: A16AbcZCh5J9QwTosdOWtbSP5kylUIAAlvIsPSx7Jk4=
Subject key identifier: D1:99:4D:FA:6F:41:DA:16:3A:45:B5:B4:31:B1:55:9E:34:82:02:94
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 0192417FD185D28AF236DCF2BEC17997F502
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/0ZlN-m9B2hY6RbW0MbFVnjSCApQ.roa
Signing time: Mon 30 Sep 2024 05:55:48 +0000
ROA not before: Mon 30 Sep 2024 05:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215992
IP address blocks: 147.78.88.0/22 maxlen: 22
147.78.91.0/24 maxlen: 24
2a09:2040::/29 maxlen: 29
2a09:2040:1::/48 maxlen: 48
2a09:2040:4::/48 maxlen: 48
2a09:2040:5::/48 maxlen: 48
2a09:2040:7::/48 maxlen: 48
2a09:2040:a::/48 maxlen: 48
2a09:2040:b::/48 maxlen: 48
2a09:2040:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Oct 2024 09:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:41:7f:d1:85:d2:8a:f2:36:dc:f2:be:c1:79:97:f5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Sep 30 05:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1994dfa6f41da163a45b5b431b1559e34820294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:21:c2:28:e9:18:7f:8b:b8:13:e0:9f:49:
c8:b7:14:06:b9:a5:2a:25:8b:a3:12:c6:89:5c:1c:
58:2a:f9:ce:88:f0:31:ac:50:ce:80:65:67:3e:74:
d9:1e:55:04:a3:d4:c0:49:59:a6:03:0a:6e:7b:89:
67:ca:d5:f2:97:2a:15:dc:89:02:bc:da:43:79:3d:
0c:dd:be:4d:0b:ab:8b:4b:49:3c:f6:bf:f7:22:84:
e1:e1:2a:8f:4e:44:c8:91:d4:db:5c:20:4e:0b:18:
b3:5d:05:5b:79:ed:ab:1d:a8:5b:33:2a:f4:6b:42:
13:1d:d8:bd:14:d0:38:de:56:af:5d:e9:43:37:50:
2c:4a:50:87:d6:7b:3f:d7:d9:c3:c6:1a:e1:87:66:
8c:20:c3:5d:bc:bb:c9:83:73:a7:35:00:f3:16:72:
4a:2f:a0:73:fe:65:bd:81:c9:69:bf:66:e3:12:cf:
83:d9:de:18:1d:98:63:61:fe:be:2d:d9:7d:41:03:
9c:fb:d4:0b:9e:39:db:ae:d0:43:6c:8f:25:d6:5a:
79:41:3c:f5:18:a9:eb:41:54:0c:da:7c:8b:47:32:
58:81:b7:41:e2:33:bc:89:f6:f3:4b:bb:62:ea:27:
58:c5:13:83:fa:0d:2f:05:f3:07:87:9e:cf:b2:9a:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:99:4D:FA:6F:41:DA:16:3A:45:B5:B4:31:B1:55:9E:34:82:02:94
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/0ZlN-m9B2hY6RbW0MbFVnjSCApQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.88.0/22
IPv6:
2a09:2040::/29
Signature Algorithm: sha256WithRSAEncryption
78:e3:c1:cb:e3:e4:11:a7:16:98:b9:ae:07:22:e3:9f:10:69:
e6:73:b8:79:76:f0:23:75:be:87:25:02:83:c9:7a:35:da:aa:
a1:a7:45:0c:81:3f:65:35:99:34:4a:95:3c:52:74:4f:43:bf:
82:71:86:3b:d0:06:04:5f:07:a1:1d:34:56:48:9a:bb:2d:3e:
f0:f5:2c:99:94:55:13:cb:ca:dd:17:01:b6:a7:a8:44:6a:a4:
80:17:22:f4:2a:2f:21:89:2e:27:3a:61:73:e8:be:3c:a7:97:
f9:b8:aa:70:ff:7c:1b:18:0c:dc:20:22:8c:e9:a1:51:bb:b1:
9b:bb:28:c5:5d:e0:96:9f:74:15:b3:ec:21:c7:c8:bf:ee:d7:
05:e1:97:22:da:24:7f:9b:a7:7d:fb:91:da:c3:06:29:60:81:
46:09:df:57:38:02:fa:8b:fa:d3:9c:4d:e7:0d:21:5f:ea:17:
ba:8e:9c:35:16:27:ae:e5:67:87:b6:39:87:d1:cf:b0:1a:c2:
31:7b:2f:e4:3b:d8:17:6d:4d:14:67:c8:d1:da:af:e9:57:60:
a7:f5:a8:f9:ee:18:50:1d:b9:9a:57:65:e8:3c:b9:5e:1b:6b:
c2:7c:99:cb:b9:45:66:0a:b9:c7:49:07:e8:56:86:43:46:45:
65:88:f4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 13:33:05 2024 by rpki-client on console-fra.rpki-client.org