Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/SSFM4WT6lOqXiXxIUOjfmme_Ewc.roa
File: SSFM4WT6lOqXiXxIUOjfmme_Ewc.roa (raw, json)
Hash identifier: 1btSLapBHe2D0zwPAdYrQI26T3FsiMpZJT5FTNpJFCU=
Subject key identifier: 49:21:4C:E1:64:FA:94:EA:97:89:7C:48:50:E8:DF:9A:67:BF:13:07
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 01929E5066DB3508591585762F92BE4F4057
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/SSFM4WT6lOqXiXxIUOjfmme_Ewc.roa
Signing time: Fri 18 Oct 2024 06:28:42 +0000
ROA not before: Fri 18 Oct 2024 06:28:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215992
IP address blocks: 147.78.88.0/22 maxlen: 22
147.78.91.0/24 maxlen: 24
2a09:2040::/29 maxlen: 29
2a09:2040:1::/48 maxlen: 48
2a09:2040:2::/48 maxlen: 48
2a09:2040:3::/48 maxlen: 48
2a09:2040:4::/48 maxlen: 48
2a09:2040:5::/48 maxlen: 48
2a09:2040:6::/48 maxlen: 48
2a09:2040:7::/48 maxlen: 48
2a09:2040:a::/48 maxlen: 48
2a09:2040:b::/48 maxlen: 48
2a09:2040:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Oct 2024 08:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:50:66:db:35:08:59:15:85:76:2f:92:be:4f:40:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Oct 18 06:28:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49214ce164fa94ea97897c4850e8df9a67bf1307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:3a:c6:50:e8:c4:a6:1f:3f:db:3e:17:d0:
d5:92:f2:f3:07:e0:e6:1e:49:4e:14:fe:1d:59:6e:
fc:5e:e9:85:6e:05:f8:fd:09:8b:bf:1e:7d:94:bd:
9f:00:40:c6:2e:6d:a4:fa:b8:5d:bb:52:19:62:5c:
0c:51:0b:0c:6d:4d:cd:e0:c3:2e:7b:aa:d1:a8:42:
75:b4:7b:71:31:04:70:9e:7b:4b:7a:ec:66:6b:17:
ae:5f:49:c0:a8:5b:35:c3:09:8a:0b:fb:16:95:88:
39:ad:c2:f6:20:7b:b6:7c:29:8a:e4:bd:1d:20:30:
0e:af:35:92:ef:26:84:d6:06:32:34:05:81:c3:b6:
c7:5d:28:8d:8b:31:f2:47:0a:bd:f9:f8:73:cf:f5:
f7:0a:0e:5f:1b:46:79:4a:63:d7:f7:b8:40:ff:cd:
e4:87:16:49:39:3a:e7:eb:7a:72:b7:c1:7c:d4:28:
7e:8c:44:ea:e0:f3:47:30:c7:07:40:2f:a6:d5:1f:
19:e4:a5:24:a7:78:2c:60:6d:a6:cf:3e:14:42:27:
cc:62:a4:f1:e9:b6:44:c1:e2:5c:a9:4e:25:02:d4:
29:30:c7:bc:81:4c:87:6c:17:72:37:9d:df:69:64:
cb:d1:3f:c2:6f:ef:16:5e:22:7c:c7:81:87:ad:86:
ed:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:21:4C:E1:64:FA:94:EA:97:89:7C:48:50:E8:DF:9A:67:BF:13:07
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/SSFM4WT6lOqXiXxIUOjfmme_Ewc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.88.0/22
IPv6:
2a09:2040::/29
Signature Algorithm: sha256WithRSAEncryption
34:04:8d:c4:ad:3a:2f:66:61:fb:87:1d:c7:8d:5d:d9:74:63:
50:eb:91:fb:1b:64:56:83:5e:ff:61:64:bf:87:df:27:f0:8d:
dc:21:7c:aa:f1:f0:39:7d:1d:c3:6b:1a:22:a9:b9:42:d0:ad:
e6:44:3d:e7:90:b1:df:ee:35:f2:3b:b3:60:78:31:b9:fa:10:
5e:e8:1d:81:25:13:10:44:bb:a2:e8:d0:1d:fe:fe:a3:7b:47:
4d:17:86:8e:13:cb:29:8d:02:e5:21:3c:32:68:7a:0a:a1:12:
b6:ba:09:2f:8b:75:a5:cd:98:65:b9:19:02:cf:78:eb:09:d3:
8c:6c:dc:a0:d4:99:98:36:fe:07:0f:50:39:51:62:d5:d7:06:
64:63:cf:b8:a6:55:d8:f0:7c:3f:28:2d:68:cb:48:4f:e6:a1:
6a:6d:9e:9d:3e:cb:ad:d3:55:46:dd:3f:3f:ff:9d:9d:37:07:
6d:78:91:bb:d4:e2:ac:87:20:3d:0f:4c:9e:4d:fa:1b:1f:d2:
8f:01:bf:ad:3f:a6:76:09:21:75:e2:36:6a:9b:7f:15:d8:39:
09:20:c1:10:84:7c:c2:46:c4:26:ee:fb:7b:9b:c3:36:b2:fd:
d9:b8:f4:40:52:4b:0d:20:92:b1:5e:ac:26:51:2c:82:f2:8c:
24:77:00:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 10:40:06 2024 by rpki-client on console-fra.rpki-client.org