Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/zK-FiRk6lWeoDkFhJy9Z2gPiOvc.roa
File: zK-FiRk6lWeoDkFhJy9Z2gPiOvc.roa (raw, json)
Hash identifier: eK+mWy+BUFxRDk24BwhZ9fAKInB/Yg9Tv47Z94MNVdg=
Subject key identifier: CC:AF:85:89:19:3A:95:67:A8:0E:41:61:27:2F:59:DA:03:E2:3A:F7
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018CC64B3A2085F220EC12E6109396E063EA
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/zK-FiRk6lWeoDkFhJy9Z2gPiOvc.roa
Signing time: Mon 01 Jan 2024 18:31:08 +0000
ROA not before: Mon 01 Jan 2024 18:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211904
IP address blocks: 151.247.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3a:20:85:f2:20:ec:12:e6:10:93:96:e0:63:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 18:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccaf8589193a9567a80e4161272f59da03e23af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:18:21:fe:c9:b3:f8:36:9b:ae:1b:6a:c4:
70:af:66:c6:e9:c9:a6:48:94:89:ad:94:35:52:32:
fd:aa:b0:b7:5d:b5:80:6d:b8:fe:d0:c0:e2:f9:78:
a2:48:e2:64:55:f9:2e:32:27:2b:43:70:7c:e9:6b:
d6:ef:c4:6c:33:a9:de:01:8a:5b:d9:f1:fa:00:56:
a0:cb:fa:7d:61:22:7f:4c:d9:d6:94:e1:92:16:87:
56:7a:ed:d9:72:6a:70:c2:b2:5a:65:35:e2:20:8b:
a3:14:96:10:99:e4:7e:27:b5:49:e0:39:25:41:d8:
f3:ec:76:bc:d7:b0:a5:5f:7f:08:db:c1:bc:67:70:
87:83:df:41:7b:43:de:8c:19:c8:c2:ca:86:27:49:
e0:3a:b1:2e:6a:17:d4:5d:b6:2d:f2:1f:2d:09:41:
3e:a1:cc:08:45:80:a2:8f:c6:1c:c9:88:43:bd:bb:
d1:fa:0b:9c:e9:8e:60:05:f0:20:1b:a7:0d:0b:6f:
7f:56:7e:33:75:9f:9c:5f:6e:d4:77:a2:61:83:e6:
1b:45:f3:a8:7d:8a:0b:6f:86:f2:63:e9:09:11:2a:
7f:24:ec:09:8a:16:32:51:f9:2b:1a:52:38:3b:e4:
1d:38:6b:71:f8:e4:98:cf:00:d7:7f:09:3b:92:39:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AF:85:89:19:3A:95:67:A8:0E:41:61:27:2F:59:DA:03:E2:3A:F7
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/zK-FiRk6lWeoDkFhJy9Z2gPiOvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:4a:80:e9:8a:57:f3:0f:33:6c:b6:92:03:31:07:5c:d8:83:
4c:8b:97:0a:0f:0c:35:84:66:43:51:ef:5d:79:c7:97:d0:3a:
26:04:bb:00:6d:87:fc:8b:ce:d9:a8:8e:7f:4b:04:b3:62:ee:
00:2a:8d:5b:18:20:4a:98:c0:de:22:bf:47:af:e6:a6:a0:a5:
aa:91:ef:2c:7c:04:4e:5e:7a:15:96:26:38:63:8b:9c:38:ce:
aa:af:be:4d:a7:95:57:c8:16:84:e9:91:55:18:21:a5:6b:3f:
56:2d:90:17:19:a4:e5:0b:ba:9f:fd:a4:41:f9:5d:85:e0:4c:
35:4e:50:27:6c:e7:ef:a0:ff:16:e9:ef:98:33:93:1e:6c:b8:
82:fa:df:4e:d3:95:45:f5:80:ca:59:ec:38:3b:1d:6c:9f:b3:
46:cd:02:e0:25:cc:64:5c:c8:cf:b2:d5:78:e2:86:89:bd:57:
a7:64:9f:d2:ff:f5:fc:b6:e0:e4:54:2f:f8:6c:d1:29:fb:09:
22:0b:8d:d6:97:7a:f8:38:87:38:7a:72:0f:42:0b:ff:a8:40:
5d:d9:80:73:0d:16:08:e3:e6:41:49:e9:f6:a1:78:52:97:44:
78:37:ac:5c:ec:f2:94:9d:0a:e2:7e:7c:3e:c6:c5:c1:cd:64:
dc:de:78:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSzoghfIg7BLmEJOW4GPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjQwMTAxMTgzMTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2FmODU4OTE5M2E5NTY3YTgwZTQxNjEyNzJmNTlkYTAzZTIzYWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0oYIf7Js/g2m64basRwr2bG6cmm
SJSJrZQ1UjL9qrC3XbWAbbj+0MDi+XiiSOJkVfkuMicrQ3B86WvW78RsM6neAYpb
2fH6AFagy/p9YSJ/TNnWlOGSFodWeu3ZcmpwwrJaZTXiIIujFJYQmeR+J7VJ4Dkl
Qdjz7Ha817ClX38I28G8Z3CHg99Be0PejBnIwsqGJ0ngOrEuahfUXbYt8h8tCUE+
ocwIRYCij8YcyYhDvbvR+guc6Y5gBfAgG6cNC29/Vn4zdZ+cX27Ud6Jhg+YbRfOo
fYoLb4byY+kJESp/JOwJihYyUfkrGlI4O+QdOGtx+OSYzwDXfwk7kjkoWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMyvhYkZOpVnqA5BYScvWdoD4jr3MB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvekstRmlSazZsV2VvRGtGaEp5OVoyZ1BpT3ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/fyMA0G
CSqGSIb3DQEBCwUAA4IBAQC3SoDpilfzDzNstpIDMQdc2INMi5cKDww1hGZDUe9d
eceX0DomBLsAbYf8i87ZqI5/SwSzYu4AKo1bGCBKmMDeIr9Hr+amoKWqke8sfARO
XnoVliY4Y4ucOM6qr75Np5VXyBaE6ZFVGCGlaz9WLZAXGaTlC7qf/aRB+V2F4Ew1
TlAnbOfvoP8W6e+YM5MebLiC+t9O05VF9YDKWew4Ox1sn7NGzQLgJcxkXMjPstV4
4oaJvVenZJ/S//X8tuDkVC/4bNEp+wkiC43Wl3r4OIc4enIPQgv/qEBd2YBzDRYI
4+ZBSen2oXhSl0R4N6xc7PKUnQrifnw+xsXBzWTc3niM
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:20 2025 by rpki-client