Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/FK4sz8BSZxWZfwlxjjr904tnti8.roa
File: FK4sz8BSZxWZfwlxjjr904tnti8.roa (raw, json)
Hash identifier: rJ9ZPMNX4s4zeqMJoSMFK0AQ3Um2tzOGz0gSM0YQ2Wo=
Subject key identifier: 14:AE:2C:CF:C0:52:67:15:99:7F:09:71:8E:3A:FD:D3:8B:67:B6:2F
Certificate issuer: /CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Certificate serial: 01927B267AE56EDFEEE88AF2DF0F1ABEA838
Authority key identifier: 04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/FK4sz8BSZxWZfwlxjjr904tnti8.roa
Signing time: Fri 11 Oct 2024 10:36:12 +0000
ROA not before: Fri 11 Oct 2024 10:36:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16236
IP address blocks: 151.88.0.0/16 maxlen: 16
151.88.22.0/24 maxlen: 24
151.88.40.0/24 maxlen: 24
151.88.41.0/24 maxlen: 24
151.88.109.0/24 maxlen: 24
151.88.176.0/24 maxlen: 24
151.92.0.0/16 maxlen: 16
151.92.2.0/24 maxlen: 24
151.92.12.0/24 maxlen: 24
151.92.83.0/24 maxlen: 24
151.92.154.0/24 maxlen: 24
151.92.155.0/24 maxlen: 24
151.92.158.0/24 maxlen: 24
151.92.166.0/24 maxlen: 24
151.92.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 13:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:26:7a:e5:6e:df:ee:e8:8a:f2:df:0f:1a:be:a8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Validity
Not Before: Oct 11 10:36:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14ae2ccfc0526715997f09718e3afdd38b67b62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:37:8c:43:4d:0c:41:33:79:fb:db:2a:cc:
26:63:af:7e:34:b1:ee:bc:f9:4a:57:02:16:05:98:
e3:a5:76:96:cf:9c:64:ce:02:68:dd:c7:67:3e:30:
5a:d5:87:96:e4:e1:29:0c:04:7f:bd:f8:9d:e3:be:
d7:fa:64:bd:3e:16:11:40:34:66:83:48:0d:1d:89:
14:e0:e6:9a:b3:e5:f4:e1:81:a3:03:c7:bb:11:1d:
73:c2:62:cc:d9:60:d0:a2:64:cd:b5:d8:ad:78:87:
ef:05:d9:15:b2:22:96:73:80:e1:52:27:28:93:57:
61:66:6b:b9:0f:c5:ca:48:5f:d1:79:0d:35:4b:0b:
b8:0a:f0:98:b3:07:53:4a:e2:cb:3d:a8:94:de:30:
c8:70:f9:83:ae:a3:87:cf:97:3f:d7:d5:3b:2b:30:
e5:c9:a0:c6:da:84:0f:90:8b:bf:2a:c4:b9:cd:71:
82:31:ce:0a:e8:11:90:f3:5e:64:28:14:64:de:cb:
9d:b4:fb:c8:ac:11:18:eb:e8:95:58:e2:52:2e:7d:
96:a5:06:15:e5:93:8f:01:c4:3b:b3:0d:8e:d8:f7:
92:28:3c:c2:35:ab:49:83:d6:ee:98:36:27:62:33:
be:f0:da:1b:53:1d:a5:db:ca:42:0f:c7:f7:a9:87:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AE:2C:CF:C0:52:67:15:99:7F:09:71:8E:3A:FD:D3:8B:67:B6:2F
X509v3 Authority Key Identifier:
keyid:04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/FK4sz8BSZxWZfwlxjjr904tnti8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.88.0.0/16
151.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:7a:87:a6:ac:ed:47:98:77:df:06:31:63:ad:18:1d:67:bb:
e4:da:59:76:a8:6d:15:c4:da:51:a4:ee:4f:f8:07:85:3a:71:
bb:a2:ee:4b:29:31:85:8c:df:c8:24:1c:bb:85:f9:bb:63:c7:
4c:7e:0d:43:7c:ad:54:35:c1:37:21:2d:0f:99:ee:4f:c0:7a:
c6:95:f7:22:23:c9:bf:4b:25:a0:96:58:f4:a6:f2:8e:56:69:
d1:4e:2c:70:31:98:df:0c:e2:0c:20:7d:f6:06:3c:19:f0:17:
01:08:85:59:c4:4e:93:b7:e7:f6:72:b3:e5:d4:cf:30:a1:d8:
af:1d:57:aa:86:69:19:be:a2:1b:f1:c2:29:a1:28:9a:19:71:
3f:b0:27:44:d7:20:5f:6e:83:55:4c:2d:b7:cd:c3:0d:9d:67:
52:2c:91:d1:f3:f7:03:4c:6e:ba:f7:b8:25:b7:59:86:e8:7b:
54:b7:7e:02:29:73:91:06:84:da:86:29:b6:a3:41:6d:2e:85:
bb:3f:7c:ff:a4:b0:c2:d5:bb:6b:4c:42:dd:3f:5c:b1:d2:b8:
23:b7:0c:30:f9:c8:28:81:c6:c8:b5:51:97:90:5f:b1:55:34:
d5:7e:7e:10:f8:bf:14:d4:18:62:bc:9b:14:2f:4a:57:20:54:
43:2f:43:00
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZJ7Jnrlbt/u6Iry3w8avqg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YWFmZjg3ZjZkYzBkMzY5OWJjMjkzN2EzNGRjNzE3Zjk0
ZjAwN2UwHhcNMjQxMDExMTAzNjEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGFlMmNjZmMwNTI2NzE1OTk3ZjA5NzE4ZTNhZmRkMzhiNjdiNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8Y3jENNDEEzefvbKswmY69+NLHu
vPlKVwIWBZjjpXaWz5xkzgJo3cdnPjBa1YeW5OEpDAR/vfid477X+mS9PhYRQDRm
g0gNHYkU4Oaas+X04YGjA8e7ER1zwmLM2WDQomTNtditeIfvBdkVsiKWc4DhUico
k1dhZmu5D8XKSF/ReQ01Swu4CvCYswdTSuLLPaiU3jDIcPmDrqOHz5c/19U7KzDl
yaDG2oQPkIu/KsS5zXGCMc4K6BGQ815kKBRk3sudtPvIrBEY6+iVWOJSLn2WpQYV
5ZOPAcQ7sw2O2PeSKDzCNatJg9bumDYnYjO+8NobUx2l28pCD8f3qYdlPQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFBSuLM/AUmcVmX8JcY46/dOLZ7YvMB8GA1UdIwQY
MBaAFASq/4f23A02mbwpN6NNxxf5TwB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktyX2hfYmNEVGFadkNrM28wM0hGX2xQQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZjJlMzEtOWFkNi00MzhlLWFkN2Mt
ZTNlMGMyZGJmMDY3LzEvRks0c3o4QlNaeFdaZndseGpqcjkwNHRudGk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81ZjJlMzEtOWFkNi00MzhlLWFkN2MtZTNlMGMyZGJmMDY3
LzEvQktyX2hfYmNEVGFadkNrM28wM0hGX2xQQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAl1gDAwCX
XDANBgkqhkiG9w0BAQsFAAOCAQEAkHqHpqztR5h33wYxY60YHWe75NpZdqhtFcTa
UaTuT/gHhTpxu6LuSykxhYzfyCQcu4X5u2PHTH4NQ3ytVDXBNyEtD5nuT8B6xpX3
IiPJv0sloJZY9KbyjlZp0U4scDGY3wziDCB99gY8GfAXAQiFWcROk7fn9nKz5dTP
MKHYrx1XqoZpGb6iG/HCKaEomhlxP7AnRNcgX26DVUwtt83DDZ1nUiyR0fP3A0xu
uve4JbdZhuh7VLd+AilzkQaE2oYptqNBbS6Fuz98/6SwwtW7a0xC3T9csdK4I7cM
MPnIKIHGyLVRl5BfsVU01X5+EPi/FNQYYrybFC9KVyBUQy9DAA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:49:33 2025 by rpki-client