Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/aVDQ4FEqHHp5fIJ8pFLnr9RwbHY.roa
File: aVDQ4FEqHHp5fIJ8pFLnr9RwbHY.roa (raw, json)
Hash identifier: yIntyGCAw9leTRmel9/XNVn2AUUr/ttccDhheNX9G18=
Subject key identifier: 69:50:D0:E0:51:2A:1C:7A:79:7C:82:7C:A4:52:E7:AF:D4:70:6C:76
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 0190AB002EDD88BCB12A9300AF2EAEAFDACA
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/aVDQ4FEqHHp5fIJ8pFLnr9RwbHY.roa
Signing time: Sat 13 Jul 2024 07:30:34 +0000
ROA not before: Sat 13 Jul 2024 07:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215992
IP address blocks: 147.78.88.0/22 maxlen: 22
147.78.91.0/24 maxlen: 24
2a09:2040::/29 maxlen: 29
2a09:2040:5::/48 maxlen: 48
2a09:2040:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Sep 2024 07:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ab:00:2e:dd:88:bc:b1:2a:93:00:af:2e:ae:af:da:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Jul 13 07:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6950d0e0512a1c7a797c827ca452e7afd4706c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:1a:c9:c0:11:3c:37:68:ff:2d:85:ca:ca:
c4:2e:16:50:eb:ff:c1:0c:53:9e:c0:47:21:cb:5f:
2a:b3:07:cf:01:04:db:ec:46:3b:22:ac:56:4e:56:
3f:5e:99:f7:11:07:54:cf:56:21:a3:25:22:e8:d1:
fd:58:2d:93:88:3a:42:dd:a8:83:78:66:01:27:31:
dd:af:99:91:d4:84:fc:22:05:d8:b9:dc:8c:57:6f:
d3:08:c0:60:8b:85:0a:83:0b:cd:fc:90:43:ad:71:
9b:ba:9e:dc:52:9b:5a:25:f3:d3:ba:a4:36:61:ee:
c1:85:4c:6c:ab:0b:05:eb:bb:8d:ff:e6:be:b3:2c:
ec:8d:86:59:89:21:3a:8c:c3:fe:1b:af:cc:35:d0:
ac:b0:c0:a4:1c:f1:9d:33:88:3e:0e:07:f9:1f:d0:
09:f6:51:72:83:37:3e:b3:6f:61:a0:46:d3:16:e4:
03:de:4a:fd:eb:bb:ac:55:5f:dd:62:67:e8:ee:d4:
27:9c:55:a8:73:61:a6:d1:00:4f:67:65:dd:2b:80:
fb:28:93:29:cf:ea:92:a7:ef:ec:24:be:e3:ec:1b:
a7:fd:07:f6:db:8d:e0:f3:0c:7d:46:98:68:48:a6:
ce:9d:46:b2:d0:cf:b8:9e:95:4c:21:39:8f:bc:99:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:50:D0:E0:51:2A:1C:7A:79:7C:82:7C:A4:52:E7:AF:D4:70:6C:76
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/aVDQ4FEqHHp5fIJ8pFLnr9RwbHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.88.0/22
IPv6:
2a09:2040::/29
Signature Algorithm: sha256WithRSAEncryption
66:e6:98:bb:a6:a6:63:4a:54:fe:67:9e:c9:22:2b:39:b4:9e:
e6:7a:a2:65:7b:ef:8b:8d:f3:93:cc:05:ae:d8:56:ac:20:ef:
8d:c6:45:61:ca:ba:a7:8d:0d:bd:68:4f:f5:bd:30:6b:71:58:
3c:6c:35:ea:e6:58:c1:66:61:30:a0:cd:d1:1c:7d:0f:5f:b4:
d6:84:71:22:f6:8a:90:9f:ed:57:66:e3:13:e6:8c:0c:9d:84:
30:57:04:0c:e7:f9:e1:9e:ef:e7:79:6a:4a:14:67:2a:82:5d:
e2:c0:63:8e:6f:92:86:ce:26:25:d5:e6:a4:05:8a:10:37:14:
6c:c9:3a:20:da:21:26:3d:19:05:47:ff:02:eb:72:9b:4e:c1:
ec:b1:cd:7a:7d:40:57:e5:d6:3a:e3:00:a3:24:9f:97:bf:12:
2e:15:e6:cc:69:7b:e3:2f:12:12:b9:40:f0:f1:fe:a1:de:43:
b6:8e:ce:ca:44:9f:6e:19:ea:ed:02:55:4b:b5:52:fa:f7:5e:
31:40:7a:0c:92:cc:42:29:47:d8:89:3f:ce:98:29:80:0e:ea:
11:13:20:a5:51:95:d2:7a:e1:e4:64:01:77:a8:32:3f:9e:3e:
d5:74:1b:1c:8c:f9:b9:d0:a2:45:1a:de:68:a6:b4:f6:6c:10:
db:87:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 09:06:01 2024 by rpki-client on console-ams.rpki-client.org