Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/4qDueF9kCae3OzJ6ldEvTlUxigg.roa
File: 4qDueF9kCae3OzJ6ldEvTlUxigg.roa (raw, json)
Hash identifier: H4IjBIcAyScvGynLFBBm3uRKu5BPgnrHKukCXnokDUw=
Subject key identifier: E2:A0:EE:78:5F:64:09:A7:B7:3B:32:7A:95:D1:2F:4E:55:31:8A:08
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 0191BBF2E291F20526858A97CAFC393E17FD
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/4qDueF9kCae3OzJ6ldEvTlUxigg.roa
Signing time: Wed 04 Sep 2024 07:32:22 +0000
ROA not before: Wed 04 Sep 2024 07:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215992
IP address blocks: 147.78.88.0/22 maxlen: 22
147.78.91.0/24 maxlen: 24
2a09:2040::/29 maxlen: 29
2a09:2040:4::/48 maxlen: 48
2a09:2040:5::/48 maxlen: 48
2a09:2040:7::/48 maxlen: 48
2a09:2040:a::/48 maxlen: 48
2a09:2040:b::/48 maxlen: 48
2a09:2040:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 30 Sep 2024 05:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:f2:e2:91:f2:05:26:85:8a:97:ca:fc:39:3e:17:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Sep 4 07:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2a0ee785f6409a7b73b327a95d12f4e55318a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:82:0d:2c:f8:07:12:14:01:3a:c5:7c:39:
48:9b:2c:2a:20:c0:b5:d8:28:9b:2a:19:b2:4b:c3:
ec:d2:bd:8a:2b:b5:3d:0e:98:35:80:f0:21:5a:01:
0c:23:12:5a:68:fd:8d:03:c4:b4:28:2d:bd:30:9b:
ba:4b:79:19:b0:67:52:64:52:3d:ac:22:4a:10:bd:
29:83:09:f7:1f:94:0c:70:a0:9b:59:fc:de:b2:07:
21:c5:4f:3a:8f:3b:1e:60:86:c1:f5:83:8e:d7:f8:
dd:19:3b:54:4f:28:23:b0:f9:da:20:7d:d8:9b:55:
5d:4b:b2:30:ed:a2:ad:f1:eb:82:06:75:74:83:27:
08:57:58:7a:a0:86:74:36:54:30:32:21:cd:86:24:
bf:90:33:b0:44:9e:39:16:14:3e:85:ae:9d:34:6f:
61:55:f2:23:c8:07:2a:54:a9:4c:78:fb:4f:ea:99:
e8:13:c5:24:36:68:28:3d:73:59:52:fe:92:e0:47:
f8:db:9b:26:7a:29:c6:30:e5:b2:4a:57:b9:4f:4b:
da:59:63:af:58:4e:e2:40:9f:98:4b:fb:70:14:04:
32:83:e5:a7:b4:79:92:9d:c5:18:1a:32:e0:59:58:
43:30:f9:5d:a7:43:3b:e1:fb:4b:cb:8c:71:06:70:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:EE:78:5F:64:09:A7:B7:3B:32:7A:95:D1:2F:4E:55:31:8A:08
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/4qDueF9kCae3OzJ6ldEvTlUxigg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.88.0/22
IPv6:
2a09:2040::/29
Signature Algorithm: sha256WithRSAEncryption
08:86:d1:f9:53:87:5b:7e:c7:e9:8c:92:29:65:b0:34:99:fb:
9f:e4:b6:66:04:0d:30:05:89:f5:15:80:11:3c:5a:5e:2e:5c:
05:2f:a4:cd:86:23:ab:02:d0:d7:d9:ea:73:92:6a:3a:7a:e8:
8e:cd:91:7c:62:48:b8:1e:d5:af:b3:2f:0f:69:a0:a7:f9:f6:
bc:06:76:da:f1:9d:a6:e2:4c:60:c9:a8:53:9e:74:4e:59:32:
25:7c:62:32:6d:3a:97:58:37:4a:ca:04:f7:a8:71:5d:d0:81:
41:48:03:f5:80:4e:0c:39:f5:96:e3:e8:66:75:27:95:3f:cb:
bc:74:38:0a:7c:8e:dc:28:8b:25:91:b0:de:4f:b3:ab:1f:71:
40:b2:9c:a0:dc:8f:25:6a:69:89:82:57:02:21:2f:6e:1a:7d:
0b:42:bb:e7:23:6a:18:bd:bd:ff:da:96:e8:84:c4:fa:bf:87:
05:45:d3:1c:d8:b1:ac:f6:5f:c7:ee:e1:86:5c:5d:79:fc:b6:
61:a2:e2:94:32:30:58:77:da:f2:67:ad:91:53:55:96:30:2d:
1a:76:e6:ba:8a:e4:c9:ea:f7:78:8f:28:ce:11:a6:57:45:4b:
be:10:71:d4:1e:41:bc:04:49:2c:1e:82:ab:7f:da:c1:3d:5a:
eb:1e:98:60
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZG78uKR8gUmhYqXyvw5Phf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTQ1M2Y0ODJjZGE3OGViYzk5NjI1ZDgwYjBmZmMzNjYw
Zjk1ZjIwHhcNMjQwOTA0MDczMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmEwZWU3ODVmNjQwOWE3YjczYjMyN2E5NWQxMmY0ZTU1MzE4YTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKCCDSz4BxIUATrFfDlImywqIMC1
2CibKhmyS8Ps0r2KK7U9Dpg1gPAhWgEMIxJaaP2NA8S0KC29MJu6S3kZsGdSZFI9
rCJKEL0pgwn3H5QMcKCbWfzesgchxU86jzseYIbB9YOO1/jdGTtUTygjsPnaIH3Y
m1VdS7Iw7aKt8euCBnV0gycIV1h6oIZ0NlQwMiHNhiS/kDOwRJ45FhQ+ha6dNG9h
VfIjyAcqVKlMePtP6pnoE8UkNmgoPXNZUv6S4Ef425smeinGMOWySle5T0vaWWOv
WE7iQJ+YS/twFAQyg+WntHmSncUYGjLgWVhDMPldp0M74ftLy4xxBnB5fQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOKg7nhfZAmntzsyepXRL05VMYoIMB8GA1UdIwQY
MBaAFBUUU/SCzaeOvJliXYCw/8NmD5XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODct
M2JjYjhiZjhiYmZlLzEvNHFEdWVGOWtDYWUzT3pKNmxkRXZUbFV4aWdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODctM2JjYjhiZjhiYmZl
LzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCk05YMA0E
AgACMAcDBQMqCSBAMA0GCSqGSIb3DQEBCwUAA4IBAQAIhtH5U4dbfsfpjJIpZbA0
mfuf5LZmBA0wBYn1FYARPFpeLlwFL6TNhiOrAtDX2epzkmo6euiOzZF8Yki4HtWv
sy8PaaCn+fa8Bnba8Z2m4kxgyahTnnROWTIlfGIybTqXWDdKygT3qHFd0IFBSAP1
gE4MOfWW4+hmdSeVP8u8dDgKfI7cKIslkbDeT7OrH3FAspyg3I8lammJglcCIS9u
Gn0LQrvnI2oYvb3/2pbohMT6v4cFRdMc2LGs9l/H7uGGXF15/LZhouKUMjBYd9ry
Z62RU1WWMC0adua6iuTJ6vd4jyjOEaZXRUu+EHHUHkG8BEksHoKrf9rBPVrrHphg
-----END CERTIFICATE-----
Generated at Mon Sep 30 07:43:54 2024 by rpki-client on console-fra.rpki-client.org