Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/Am-Z6a1Vgk56oHHtLhPK0tW_QZA.roa
File: Am-Z6a1Vgk56oHHtLhPK0tW_QZA.roa (raw, json)
Hash identifier: iiLPLrO2axVD4cC3hoHnH1n8/zT9EdZ8NksX8UooC4M=
Subject key identifier: 02:6F:99:E9:AD:55:82:4E:7A:A0:71:ED:2E:13:CA:D2:D5:BF:41:90
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 0192743BD8633FD4A1888F863AEE442AB324
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/Am-Z6a1Vgk56oHHtLhPK0tW_QZA.roa
Signing time: Thu 10 Oct 2024 02:22:11 +0000
ROA not before: Thu 10 Oct 2024 02:22:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 05:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:74:3b:d8:63:3f:d4:a1:88:8f:86:3a:ee:44:2a:b3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Oct 10 02:22:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=026f99e9ad55824e7aa071ed2e13cad2d5bf4190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:ca:a9:b2:9a:7e:d2:91:c8:ab:f7:98:48:
55:f0:00:b7:6f:4e:77:65:d4:91:2f:d3:b6:58:d4:
c1:ad:56:b1:fc:2a:e9:81:8f:c2:6d:9d:86:2d:5d:
24:68:16:07:f6:82:71:15:cf:c0:38:70:49:56:48:
dd:85:1d:82:fe:58:e5:80:04:51:d6:0f:ea:0d:0a:
6a:eb:33:2b:38:19:06:2e:c0:0b:b3:28:ba:7c:8a:
a3:36:4b:79:1b:3c:ab:97:8b:cf:62:31:88:f7:8c:
3f:82:08:f2:7d:41:c1:9d:00:30:64:56:4a:64:ee:
e0:93:8e:92:6a:d5:e0:dd:ea:2d:35:ca:b5:b0:cb:
93:be:7d:8d:69:15:a3:6d:3f:3f:55:dc:e9:46:35:
aa:bf:d8:b9:05:19:6e:77:09:4b:e1:53:1a:5b:9e:
45:07:d0:97:f8:b4:db:6e:3e:81:14:62:15:93:57:
0c:40:6e:9a:9c:bb:e8:81:f5:bc:84:8a:c8:94:93:
42:d2:3c:87:36:dd:1b:95:94:e9:85:ff:a8:85:44:
fa:c1:3a:c3:c5:07:8a:84:d9:bc:b1:c3:50:e5:db:
9c:e8:e7:a2:f6:c5:14:40:0c:25:70:95:c3:e9:9a:
44:76:4d:08:6b:ac:52:3e:56:39:f8:c5:95:93:89:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6F:99:E9:AD:55:82:4E:7A:A0:71:ED:2E:13:CA:D2:D5:BF:41:90
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/Am-Z6a1Vgk56oHHtLhPK0tW_QZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.1.0-140.150.7.255
140.150.18.0/23
140.150.21.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c5:d1:e0:f9:4b:3d:a7:cf:2b:f4:f0:2f:4a:25:de:db:cd:
80:53:c3:fc:17:9b:28:3c:02:65:5b:fb:6a:ea:ca:48:c4:67:
66:3e:c3:67:d2:49:dc:0d:d5:40:68:3d:6a:cd:c0:5a:f5:69:
47:91:04:5b:6c:bb:9c:ac:c5:ef:cf:2a:a5:e0:e8:a3:12:83:
5a:6d:dd:18:c9:54:5d:c5:cf:a3:60:bf:27:51:71:16:62:65:
0a:61:76:30:ea:7b:57:7c:fd:95:eb:6b:f5:d8:04:89:7a:cb:
81:44:18:cb:4b:a1:a8:68:09:12:c6:73:27:d2:7f:53:4e:e8:
1a:0b:f9:df:d4:e1:e2:26:63:49:8d:42:19:d5:b8:76:75:45:
6d:d6:69:c5:86:12:79:a6:e8:2f:a4:b7:58:72:b1:f4:a0:15:
db:e3:3d:8b:b6:3a:0f:af:b4:cc:ac:3b:a5:25:ff:c7:00:9f:
db:60:44:d5:fd:22:c3:8c:a3:a0:cb:19:63:f9:4c:53:6e:09:
e6:aa:bc:77:b2:6c:44:17:78:3c:e9:0e:2b:c0:46:ef:da:ec:
85:f9:73:10:dc:af:66:f2:44:7b:7b:d3:7d:df:9e:e5:23:f8:
23:74:7b:48:59:87:e0:8c:d0:65:9d:ef:b3:e1:1d:14:73:51:
3c:1d:c2:58
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZJ0O9hjP9ShiI+GOu5EKrMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTMzMWZhN2JlNDcwZGMxNzllMTZjMzA2ZTk4YzZjNzMx
YTU3NWMwHhcNMjQxMDEwMDIyMjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjZmOTllOWFkNTU4MjRlN2FhMDcxZWQyZTEzY2FkMmQ1YmY0MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwvKqbKaftKRyKv3mEhV8AC3b053
ZdSRL9O2WNTBrVax/CrpgY/CbZ2GLV0kaBYH9oJxFc/AOHBJVkjdhR2C/ljlgARR
1g/qDQpq6zMrOBkGLsALsyi6fIqjNkt5Gzyrl4vPYjGI94w/ggjyfUHBnQAwZFZK
ZO7gk46SatXg3eotNcq1sMuTvn2NaRWjbT8/VdzpRjWqv9i5BRludwlL4VMaW55F
B9CX+LTbbj6BFGIVk1cMQG6anLvogfW8hIrIlJNC0jyHNt0blZTphf+ohUT6wTrD
xQeKhNm8scNQ5duc6Oei9sUUQAwlcJXD6ZpEdk0Ia6xSPlY5+MWVk4lw0wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAJvmemtVYJOeqBx7S4TytLVv0GQMB8GA1UdIwQY
MBaAFEuTMfp75HDcF54WwwbpjGxzGldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt
OGIyYjQ3MzhiMWNjLzEvQW0tWjZhMVZnazU2b0hIdExoUEswdFdfUVpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj
LzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACMlgED
BAOMlgADBAGMlhIDBACMlhUwDQYJKoZIhvcNAQELBQADggEBAATF0eD5Sz2nzyv0
8C9KJd7bzYBTw/wXmyg8AmVb+2rqykjEZ2Y+w2fSSdwN1UBoPWrNwFr1aUeRBFts
u5ysxe/PKqXg6KMSg1pt3RjJVF3Fz6NgvydRcRZiZQphdjDqe1d8/ZXra/XYBIl6
y4FEGMtLoahoCRLGcyfSf1NO6BoL+d/U4eImY0mNQhnVuHZ1RW3WacWGEnmm6C+k
t1hysfSgFdvjPYu2Og+vtMysO6Ul/8cAn9tgRNX9IsOMo6DLGWP5TFNuCeaqvHey
bEQXeDzpDivARu/a7IX5cxDcr2byRHt7033fnuUj+CN0e0hZh+CM0GWd77PhHRRz
UTwdwlg=
-----END CERTIFICATE-----
Generated at Mon Oct 14 06:42:05 2024 by rpki-client on console-fra.rpki-client.org