Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/BG7C6zaqcLe6avAXmUGvYNLecXc.roa
File: BG7C6zaqcLe6avAXmUGvYNLecXc.roa (raw, json)
Hash identifier: 7+X8g0MI1DC2f0bbsX+05s/EJIOD7BXHDQmjoOGDdAc=
Subject key identifier: 04:6E:C2:EB:36:AA:70:B7:BA:6A:F0:17:99:41:AF:60:D2:DE:71:77
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 019256C735C2049F55F3BCAD73C35E848B5B
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/BG7C6zaqcLe6avAXmUGvYNLecXc.roa
Signing time: Fri 04 Oct 2024 09:05:48 +0000
ROA not before: Fri 04 Oct 2024 09:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215992
IP address blocks: 147.78.88.0/22 maxlen: 22
147.78.91.0/24 maxlen: 24
2a09:2040::/29 maxlen: 29
2a09:2040:1::/48 maxlen: 48
2a09:2040:2::/48 maxlen: 48
2a09:2040:4::/48 maxlen: 48
2a09:2040:5::/48 maxlen: 48
2a09:2040:7::/48 maxlen: 48
2a09:2040:a::/48 maxlen: 48
2a09:2040:b::/48 maxlen: 48
2a09:2040:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 10 Oct 2024 07:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:c7:35:c2:04:9f:55:f3:bc:ad:73:c3:5e:84:8b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Oct 4 09:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=046ec2eb36aa70b7ba6af0179941af60d2de7177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:e8:1a:df:5a:24:4c:6a:91:ee:f8:4e:8a:
95:7f:15:5d:17:03:49:b2:d7:95:57:9e:f0:dd:0c:
ff:4f:f8:cc:e0:59:42:69:15:9c:08:f8:19:0c:c6:
39:db:68:f5:e1:da:80:d4:81:56:26:ee:ce:7f:4a:
15:cc:cb:22:2a:90:67:90:f9:4f:1e:c6:70:bc:c6:
b4:14:23:b8:cd:89:58:b6:b0:d8:00:cc:f3:d6:a6:
32:c5:09:93:e0:96:7e:2d:41:20:e1:1d:aa:05:05:
27:42:70:ad:55:c8:05:ba:4a:6d:87:50:15:46:fb:
15:d4:6f:bb:5b:d0:b1:45:a0:b4:41:8a:87:96:d5:
c8:fe:c9:6d:b6:89:8e:0a:01:0a:2d:c6:8e:62:c5:
ce:1e:ca:59:5b:7f:50:53:f1:79:3f:70:f3:23:f9:
1a:1a:32:55:59:91:f9:2a:1a:b4:64:ca:e7:88:9f:
7b:e9:49:e1:a8:1e:62:b9:90:ed:78:8d:ea:3a:d8:
85:a1:91:1a:15:2a:d3:45:6c:4e:11:24:51:91:7e:
2f:85:33:1d:ff:78:97:9d:69:7e:2d:db:35:07:46:
00:70:2e:b6:6b:08:b4:e6:58:4d:a4:80:4c:f8:2e:
9d:c5:f3:88:fa:88:57:40:d0:c4:1f:46:73:89:c7:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6E:C2:EB:36:AA:70:B7:BA:6A:F0:17:99:41:AF:60:D2:DE:71:77
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/BG7C6zaqcLe6avAXmUGvYNLecXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.88.0/22
IPv6:
2a09:2040::/29
Signature Algorithm: sha256WithRSAEncryption
7e:c9:84:d2:a4:a2:a8:1f:99:20:ab:7d:6a:01:7f:4c:33:45:
60:98:0d:85:37:5b:1b:06:99:91:f0:39:91:6d:5f:4a:67:f8:
04:ed:17:c6:11:7b:74:94:0d:a6:5b:04:eb:6c:c8:4b:20:32:
25:f3:78:74:a8:28:64:15:6a:a9:a8:fc:8d:3c:e2:f1:cd:1c:
e0:6f:15:57:ab:ec:2b:7b:dc:5d:60:c6:05:36:3c:dd:cc:9e:
13:60:8f:6c:72:ac:11:6b:73:d6:24:c4:f7:df:91:70:17:12:
b4:7d:e7:0d:f5:bb:61:2d:f1:ac:0b:ff:01:da:f3:90:75:3f:
19:da:0e:bb:a7:1d:a3:04:16:32:ee:a0:7f:33:62:3f:9b:c1:
37:ad:01:0a:d7:7b:22:ec:b5:9e:3f:71:82:44:82:dc:49:db:
4e:a4:fb:1b:19:e0:75:41:88:49:7f:56:fa:90:ec:e1:8a:c4:
62:47:5d:28:80:71:a0:e5:ef:d4:3c:51:9e:db:25:40:51:c0:
11:7c:a4:69:20:58:8f:ca:a6:fe:21:a7:b2:b0:06:76:0c:4a:
54:c1:23:57:7d:5c:8d:8e:13:64:18:96:3a:01:76:a6:a5:19:
aa:50:60:f6:81:1a:49:ff:b5:7b:7a:7f:2b:1e:04:be:58:76:
7f:5c:f9:2b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZJWxzXCBJ9V87ytc8NehItbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTQ1M2Y0ODJjZGE3OGViYzk5NjI1ZDgwYjBmZmMzNjYw
Zjk1ZjIwHhcNMjQxMDA0MDkwNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDZlYzJlYjM2YWE3MGI3YmE2YWYwMTc5OTQxYWY2MGQyZGU3MTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8HoGt9aJExqke74ToqVfxVdFwNJ
steVV57w3Qz/T/jM4FlCaRWcCPgZDMY522j14dqA1IFWJu7Of0oVzMsiKpBnkPlP
HsZwvMa0FCO4zYlYtrDYAMzz1qYyxQmT4JZ+LUEg4R2qBQUnQnCtVcgFukpth1AV
RvsV1G+7W9CxRaC0QYqHltXI/slttomOCgEKLcaOYsXOHspZW39QU/F5P3DzI/ka
GjJVWZH5Khq0ZMrniJ976UnhqB5iuZDteI3qOtiFoZEaFSrTRWxOESRRkX4vhTMd
/3iXnWl+Lds1B0YAcC62awi05lhNpIBM+C6dxfOI+ohXQNDEH0ZziccRBQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFARuwus2qnC3umrwF5lBr2DS3nF3MB8GA1UdIwQY
MBaAFBUUU/SCzaeOvJliXYCw/8NmD5XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODct
M2JjYjhiZjhiYmZlLzEvQkc3QzZ6YXFjTGU2YXZBWG1VR3ZZTkxlY1hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODctM2JjYjhiZjhiYmZl
LzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCk05YMA0E
AgACMAcDBQMqCSBAMA0GCSqGSIb3DQEBCwUAA4IBAQB+yYTSpKKoH5kgq31qAX9M
M0VgmA2FN1sbBpmR8DmRbV9KZ/gE7RfGEXt0lA2mWwTrbMhLIDIl83h0qChkFWqp
qPyNPOLxzRzgbxVXq+wre9xdYMYFNjzdzJ4TYI9scqwRa3PWJMT335FwFxK0fecN
9bthLfGsC/8B2vOQdT8Z2g67px2jBBYy7qB/M2I/m8E3rQEK13si7LWeP3GCRILc
SdtOpPsbGeB1QYhJf1b6kOzhisRiR10ogHGg5e/UPFGe2yVAUcARfKRpIFiPyqb+
IaeysAZ2DEpUwSNXfVyNjhNkGJY6AXampRmqUGD2gRpJ/7V7en8rHgS+WHZ/XPkr
-----END CERTIFICATE-----
Generated at Thu Oct 10 09:30:00 2024 by rpki-client on console-fra.rpki-client.org