Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/aIHMwSi1UidGqPl6dxzkEb2AYPA.roa
File: aIHMwSi1UidGqPl6dxzkEb2AYPA.roa (raw, json)
Hash identifier: G9OwFT3ASRFLO1GoOaQGnERMJZTatHrK0nhrduqZ/Jo=
Subject key identifier: 68:81:CC:C1:28:B5:52:27:46:A8:F9:7A:77:1C:E4:11:BD:80:60:F0
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 0191EAACA68FCB9CA3C94F7097B23114A533
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/aIHMwSi1UidGqPl6dxzkEb2AYPA.roa
Signing time: Fri 13 Sep 2024 09:17:48 +0000
ROA not before: Fri 13 Sep 2024 09:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 51.199.252.0/23 maxlen: 24
51.199.254.0/23 maxlen: 24
2a06:5901:8000::/40 maxlen: 48
2a06:5901:8100::/40 maxlen: 48
2a06:5901:8200::/40 maxlen: 48
2a06:5901:8300::/40 maxlen: 48
2a06:5901:8500::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 18 Sep 2024 08:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:ac:a6:8f:cb:9c:a3:c9:4f:70:97:b2:31:14:a5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Sep 13 09:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6881ccc128b5522746a8f97a771ce411bd8060f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:f2:b9:32:6d:d6:12:38:66:ae:2f:34:8f:
c5:d0:28:1f:57:1e:a5:b4:55:2e:50:79:91:ea:42:
49:37:4c:16:b9:b8:4a:2b:9c:ea:35:04:ae:a8:80:
c3:c3:c9:28:df:d5:88:62:4c:f6:13:57:a2:0a:3d:
e5:e3:a4:74:d6:af:c9:53:df:e0:ba:ec:8e:29:52:
a8:f5:be:7e:63:73:38:eb:fd:21:f7:c1:8b:b4:b1:
ff:76:a4:25:8d:d5:bf:80:db:67:2b:a1:56:30:83:
d3:e6:50:af:1e:86:7f:c9:66:02:a9:d2:6d:9e:58:
02:e4:b4:b8:0d:f5:8c:9c:4a:70:9e:7d:52:80:56:
6e:9e:34:e3:96:f9:ae:59:d7:b2:bc:09:9a:f1:04:
9f:d9:8b:9d:63:6c:01:9f:e1:5c:f9:cd:b1:ac:c0:
cc:ca:6e:17:14:c5:f4:7b:1f:d7:f8:8b:ef:52:96:
f3:5f:0c:ba:79:b1:f8:c4:c5:84:d0:2c:fb:85:fa:
52:af:2c:0f:34:be:0d:4c:e1:21:15:48:c2:09:0b:
d9:8a:db:ea:d6:1a:71:82:70:e0:bd:e3:1c:25:dd:
e1:6c:2b:45:bb:1d:a0:0d:47:30:a3:cf:49:73:34:
27:51:58:7d:ee:f8:4c:53:05:1c:3a:d9:02:51:dc:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:CC:C1:28:B5:52:27:46:A8:F9:7A:77:1C:E4:11:BD:80:60:F0
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/aIHMwSi1UidGqPl6dxzkEb2AYPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.199.252.0/22
IPv6:
2a06:5901:8000::/38
2a06:5901:8500::/40
Signature Algorithm: sha256WithRSAEncryption
6e:9f:fc:db:47:b1:e0:4a:be:17:03:c3:8f:9f:26:a3:7e:3f:
cb:62:da:49:31:dc:3a:5c:2f:79:a1:b2:d0:e4:77:bc:52:ef:
45:57:23:49:0c:0c:da:25:03:94:ea:88:a3:2d:99:fc:8d:4c:
88:a8:9b:9f:74:f2:8b:92:fb:eb:0a:3a:aa:e4:b3:e1:ee:81:
92:2a:0d:9d:00:5e:6f:1a:cf:08:f9:cb:25:13:2c:75:a0:9d:
fa:52:3c:b5:21:6f:15:78:73:54:43:4a:fd:51:0e:3c:60:86:
cb:05:c7:65:db:b1:96:53:c0:fe:b9:79:6d:3b:1b:dd:45:70:
30:07:1c:a6:57:cf:5d:91:0d:43:7f:30:4b:16:0f:15:c3:e1:
3e:e6:95:5e:1f:e5:30:5a:54:90:27:16:a0:3f:6d:0d:2e:ab:
38:9f:49:0c:95:5f:68:57:30:ac:af:8d:d7:23:34:bb:77:2b:
74:a9:c5:b9:c8:87:33:c1:0c:78:70:b8:0d:33:22:21:84:66:
20:de:36:bd:b8:e7:75:0b:df:a9:50:57:2a:e0:4b:8f:de:9f:
50:d8:0f:09:26:ff:80:d7:98:cb:49:f7:5e:51:55:2d:01:12:
1f:94:f0:81:94:8f:e1:c4:ee:8b:10:59:dd:02:0b:3b:cc:a6:
c6:21:2d:db
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZHqrKaPy5yjyU9wl7IxFKUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MWQ0YTQzNzRkZjIyMmFjMzIzNWI5NjAyMjA2ZDk2YmYx
ZGFjODIwHhcNMjQwOTEzMDkxNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODgxY2NjMTI4YjU1MjI3NDZhOGY5N2E3NzFjZTQxMWJkODA2MGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5HyuTJt1hI4Zq4vNI/F0CgfVx6l
tFUuUHmR6kJJN0wWubhKK5zqNQSuqIDDw8ko39WIYkz2E1eiCj3l46R01q/JU9/g
uuyOKVKo9b5+Y3M46/0h98GLtLH/dqQljdW/gNtnK6FWMIPT5lCvHoZ/yWYCqdJt
nlgC5LS4DfWMnEpwnn1SgFZunjTjlvmuWdeyvAma8QSf2YudY2wBn+Fc+c2xrMDM
ym4XFMX0ex/X+IvvUpbzXwy6ebH4xMWE0Cz7hfpSrywPNL4NTOEhFUjCCQvZitvq
1hpxgnDgveMcJd3hbCtFux2gDUcwo89JczQnUVh97vhMUwUcOtkCUdwtrQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGiBzMEotVInRqj5encc5BG9gGDwMB8GA1UdIwQY
MBaAFPcdSkN03yIqwyNblgIgbZa/HayCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUt
ZTlhYzJiMDAzMTZhLzEvYUlITXdTaTFVaWRHcVBsNmR4emtFYjJBWVBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUtZTlhYzJiMDAzMTZh
LzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCM8f8MBYE
AgACMBADBgIqBlkBgAMGACoGWQGFMA0GCSqGSIb3DQEBCwUAA4IBAQBun/zbR7Hg
Sr4XA8OPnyajfj/LYtpJMdw6XC95obLQ5He8Uu9FVyNJDAzaJQOU6oijLZn8jUyI
qJufdPKLkvvrCjqq5LPh7oGSKg2dAF5vGs8I+cslEyx1oJ36Ujy1IW8VeHNUQ0r9
UQ48YIbLBcdl27GWU8D+uXltOxvdRXAwBxymV89dkQ1DfzBLFg8Vw+E+5pVeH+Uw
WlSQJxagP20NLqs4n0kMlV9oVzCsr43XIzS7dyt0qcW5yIczwQx4cLgNMyIhhGYg
3ja9uOd1C9+pUFcq4EuP3p9Q2A8JJv+A15jLSfdeUVUtARIflPCBlI/hxO6LEFnd
Ags7zKbGIS3b
-----END CERTIFICATE-----
Generated at Wed Sep 18 11:04:08 2024 by rpki-client on console-ams.rpki-client.org