Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/iFr5dpBT4PL5xObmxNoL4sTiVLA.roa
File: iFr5dpBT4PL5xObmxNoL4sTiVLA.roa (raw, json)
Hash identifier: r6VFYL7LUgmNYUFAybYIr6I8f5TDS7shteDtETBqRHQ=
Subject key identifier: 88:5A:F9:76:90:53:E0:F2:F9:C4:E6:E6:C4:DA:0B:E2:C4:E2:54:B0
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018E4B73D242ECB3AEF76A553BE3466FECE9
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/iFr5dpBT4PL5xObmxNoL4sTiVLA.roa
Signing time: Sun 17 Mar 2024 08:07:45 +0000
ROA not before: Sun 17 Mar 2024 08:07:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 217.60.246.0/24 maxlen: 24
217.60.247.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 14:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4b:73:d2:42:ec:b3:ae:f7:6a:55:3b:e3:46:6f:ec:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Mar 17 08:07:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=885af9769053e0f2f9c4e6e6c4da0be2c4e254b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5f:b7:e7:12:42:87:d7:ca:b8:91:a0:78:15:
79:ad:49:ad:ac:5d:f3:74:4f:97:dd:e0:f6:13:24:
55:72:d6:ef:bc:a2:51:b8:d1:37:5c:79:ce:3a:a7:
37:f0:36:08:f7:03:e8:9d:c6:16:4e:ce:c3:0b:a9:
84:ba:de:02:e5:df:83:b6:3f:cc:32:60:36:6b:e3:
7d:08:5f:35:30:2a:84:b8:a9:27:8e:f0:7c:2a:a7:
b3:c9:6e:71:1d:c3:c7:49:f1:e6:8e:12:bd:f1:f4:
29:66:bd:96:3e:13:ae:1b:48:d5:ba:59:2e:7a:a6:
d7:29:51:59:0a:81:2a:45:3c:c8:90:a5:c5:52:83:
dd:fc:4f:af:4c:7e:5f:a1:6a:36:ce:f8:8e:83:d5:
5a:84:45:08:ab:29:08:ef:a7:90:f7:a2:10:25:a7:
7c:e1:a3:52:3e:08:69:42:18:81:f1:98:6e:ff:1b:
56:fb:02:70:37:a5:8c:58:58:69:0f:79:12:dc:ae:
6d:0f:51:17:22:c1:ec:9a:62:de:be:86:2a:5b:8d:
d0:ea:b1:60:75:e7:a2:65:4e:e2:69:a9:a6:bc:76:
35:18:b4:c5:fb:d6:75:fb:02:c5:65:5f:c7:50:35:
c7:7c:c9:db:e3:1a:01:e1:b0:8f:19:48:d1:5d:dc:
e8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5A:F9:76:90:53:E0:F2:F9:C4:E6:E6:C4:DA:0B:E2:C4:E2:54:B0
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/iFr5dpBT4PL5xObmxNoL4sTiVLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.246.0/23
217.60.249.0/24
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:48:4a:51:38:c3:4c:bb:4c:7f:f4:cb:b0:7c:e7:2d:66:d8:
e6:b2:84:56:e1:16:4c:bf:c2:39:f6:51:84:93:4c:d9:58:43:
c8:2f:41:43:31:90:5a:29:5f:67:d0:e0:d7:43:b3:03:fb:86:
c3:f3:59:f1:db:7e:14:b6:e4:f8:1f:4a:c2:2a:46:d9:81:1a:
f5:f3:50:f6:8b:da:db:33:d2:21:e8:83:6b:ea:e7:4a:50:6e:
93:57:4a:af:1d:22:8a:7c:c2:aa:b4:cc:b5:81:64:2b:03:9d:
50:eb:40:aa:42:69:a1:86:48:eb:65:8a:24:e1:9c:f4:e1:3a:
1d:e7:2d:13:84:b4:e9:62:a1:d7:13:60:0d:3f:65:47:b2:ed:
f3:95:4a:d6:44:7f:8e:37:04:55:ca:a5:0f:15:07:7a:2a:01:
27:e1:f8:6e:af:68:7f:42:5f:29:85:de:6c:9a:28:54:a4:78:
64:a3:e4:2a:11:af:4f:45:cc:75:7c:28:18:bb:94:5d:78:de:
35:a5:35:a8:b5:0f:eb:20:2d:bd:32:b8:54:7e:56:05:31:ed:
1a:a4:c9:2a:c1:2c:ee:31:70:c1:b5:a6:41:da:9f:2f:59:c7:
c1:ff:48:6c:82:60:80:f9:75:d6:22:71:dc:a4:4f:1b:73:4e:
72:75:29:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 16:10:45 2024 by rpki-client on console-fra.rpki-client.org