Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/OP6KG_wGPMsq4RGH__dVFOzJOp4.roa
File: OP6KG_wGPMsq4RGH__dVFOzJOp4.roa (raw, json)
Hash identifier: c+6V1hO1LFN89onomMAnJYxtGQUZqhNSza/ag8A3P48=
Subject key identifier: 38:FE:8A:1B:FC:06:3C:CB:2A:E1:11:87:FF:F7:55:14:EC:C9:3A:9E
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018DCA56C39C13FCC4ADA8116127C4FEC24F
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/OP6KG_wGPMsq4RGH__dVFOzJOp4.roa
Signing time: Wed 21 Feb 2024 06:25:00 +0000
ROA not before: Wed 21 Feb 2024 06:25:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 217.60.254.0/23 maxlen: 23
217.60.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 02:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ca:56:c3:9c:13:fc:c4:ad:a8:11:61:27:c4:fe:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 21 06:25:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38fe8a1bfc063ccb2ae11187fff75514ecc93a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:ef:6f:fc:fb:ff:0c:33:55:b8:09:2c:ea:
d3:47:e4:e4:4b:26:68:70:fc:d8:b4:b0:32:13:5d:
2f:fc:2e:18:44:bd:66:9c:cf:cc:da:54:b8:fb:d0:
28:28:bb:aa:4e:0d:07:db:1b:4e:8e:1d:19:72:89:
5a:80:90:ac:e9:09:c6:54:e2:94:ee:aa:aa:48:21:
8f:d4:3c:35:58:c1:75:c3:c5:5c:6b:76:06:73:a9:
d4:e6:1a:cd:c3:fc:dd:4c:bb:97:e4:46:85:c8:a8:
1b:49:71:a6:bb:31:44:00:cd:dd:75:58:1b:37:3d:
05:cb:af:4f:ef:cc:a4:15:17:a5:c2:b7:71:6c:eb:
3a:a7:54:d9:3a:92:ce:b6:f1:da:88:3f:87:dc:89:
b1:ea:3a:55:2c:20:35:3f:7c:2c:21:a7:22:1e:12:
c8:0b:4a:51:aa:2d:6f:09:cc:66:ee:c8:b8:17:d7:
4b:d4:f0:1f:1a:68:bf:8a:d3:79:ee:21:1e:09:a2:
cc:5a:42:7b:48:0c:7a:05:39:c5:2a:a0:8f:ff:0f:
45:c4:96:f7:a9:a8:3c:8a:ae:1e:2a:b1:b8:6a:b9:
61:21:f5:33:fe:85:db:e7:bd:e3:72:4a:87:86:ed:
70:f9:3e:a1:28:d5:47:3c:dc:a8:c8:99:69:62:a6:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FE:8A:1B:FC:06:3C:CB:2A:E1:11:87:FF:F7:55:14:EC:C9:3A:9E
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/OP6KG_wGPMsq4RGH__dVFOzJOp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.254.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:d6:0f:37:87:e1:13:f4:25:8e:9f:11:74:ca:6f:1c:80:ae:
1f:3d:ab:d4:e7:64:8e:f5:f6:da:d7:6b:45:a0:0f:29:b7:f1:
a2:f7:57:6a:c2:a9:6a:ac:c9:82:eb:c7:06:8f:f3:c9:0e:29:
66:fe:47:7f:61:22:80:3c:d1:65:d8:be:ad:a7:7c:f2:8e:6e:
1f:14:48:35:d8:25:b4:47:cd:2b:d1:72:47:55:94:d9:2d:50:
68:c7:13:78:83:c3:c1:be:2d:f0:ba:30:05:10:0d:83:82:86:
52:59:50:84:ab:df:5d:f2:7f:34:62:cd:36:aa:df:41:0c:65:
d3:65:23:8e:a5:5b:17:ff:a4:7d:55:68:c7:01:67:7a:51:cc:
cf:87:af:90:fc:42:38:39:90:aa:4b:12:c0:43:ad:9c:ec:b4:
64:88:af:ac:f0:86:c6:1e:f1:40:f0:43:74:ab:39:12:94:d4:
e5:aa:5e:b8:29:60:f8:2c:3a:45:9b:1c:f6:be:13:2a:07:24:
19:fa:ef:9a:7e:ac:e8:f5:7e:2a:f8:87:d1:64:dc:c7:d8:76:
dd:a3:80:cc:9c:1e:fb:c0:db:83:ca:48:a8:d3:db:52:d1:77:
32:bd:35:ed:be:04:06:81:22:a2:fa:21:a4:cb:1d:cc:d2:52:
ee:23:05:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3KVsOcE/zEragRYSfE/sJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjQwMjIxMDYyNTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGZlOGExYmZjMDYzY2NiMmFlMTExODdmZmY3NTUxNGVjYzkzYTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPDvb/z7/wwzVbgJLOrTR+TkSyZo
cPzYtLAyE10v/C4YRL1mnM/M2lS4+9AoKLuqTg0H2xtOjh0ZcolagJCs6QnGVOKU
7qqqSCGP1Dw1WMF1w8Vca3YGc6nU5hrNw/zdTLuX5EaFyKgbSXGmuzFEAM3ddVgb
Nz0Fy69P78ykFRelwrdxbOs6p1TZOpLOtvHaiD+H3Imx6jpVLCA1P3wsIaciHhLI
C0pRqi1vCcxm7si4F9dL1PAfGmi/itN57iEeCaLMWkJ7SAx6BTnFKqCP/w9FxJb3
qag8iq4eKrG4arlhIfUz/oXb573jckqHhu1w+T6hKNVHPNyoyJlpYqboNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDj+ihv8BjzLKuERh//3VRTsyTqeMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEvT1A2S0dfd0dQTXNxNFJHSF9fZFZGT3pKT3A0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Tz+MA0G
CSqGSIb3DQEBCwUAA4IBAQC71g83h+ET9CWOnxF0ym8cgK4fPavU52SO9fba12tF
oA8pt/Gi91dqwqlqrMmC68cGj/PJDilm/kd/YSKAPNFl2L6tp3zyjm4fFEg12CW0
R80r0XJHVZTZLVBoxxN4g8PBvi3wujAFEA2DgoZSWVCEq99d8n80Ys02qt9BDGXT
ZSOOpVsX/6R9VWjHAWd6UczPh6+Q/EI4OZCqSxLAQ62c7LRkiK+s8IbGHvFA8EN0
qzkSlNTlql64KWD4LDpFmxz2vhMqByQZ+u+afqzo9X4q+IfRZNzH2Hbdo4DMnB77
wNuDykio09tS0XcyvTXtvgQGgSKi+iGkyx3M0lLuIwXk
Generated at Wed May 1 05:08:50 2024 by rpki-client on console-ams.rpki-client.org