Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1bbgNPpWMP39QI4YLl3u6YRa684.roa
File: 1bbgNPpWMP39QI4YLl3u6YRa684.roa (raw, json)
Hash identifier: Z0fz2pR0qzMUbxcasOkmswzvHkZjlfG51G4wiLX9ctY=
Subject key identifier: D5:B6:E0:34:FA:56:30:FD:FD:40:8E:18:2E:5D:EE:E9:84:5A:EB:CE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01907E6754EC23EEE4F104E89566CA57C2D4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1bbgNPpWMP39QI4YLl3u6YRa684.roa
Signing time: Thu 04 Jul 2024 15:40:19 +0000
ROA not before: Thu 04 Jul 2024 15:40:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214857
IP address blocks: 217.60.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 11:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:67:54:ec:23:ee:e4:f1:04:e8:95:66:ca:57:c2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 4 15:40:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5b6e034fa5630fdfd408e182e5deee9845aebce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:7e:e7:22:87:6f:0d:db:de:14:05:e0:7f:
44:4d:10:7e:c7:b2:f9:bc:06:68:0f:56:76:a1:3b:
ae:8e:49:ad:13:d3:1a:9d:e9:2e:f5:5b:42:eb:75:
a5:2a:89:68:61:34:97:fd:07:ba:56:72:17:73:9e:
66:03:04:da:75:94:33:28:45:54:71:8d:2c:ee:42:
88:a8:ba:a9:cc:84:31:27:e4:9f:19:3e:d3:08:92:
00:73:cb:19:58:5d:32:27:51:14:50:95:31:fd:14:
88:ff:6f:12:fa:b8:83:d7:f9:a4:e3:86:e7:9b:10:
b9:88:4f:85:3f:dd:4f:e2:15:cc:ff:47:c5:48:5c:
5a:f8:15:d0:06:6b:1a:0c:28:66:5a:d9:8b:ff:4f:
d3:08:74:2a:ed:c7:15:9a:79:77:23:10:86:76:fc:
5c:fb:72:34:2a:09:48:48:09:e8:14:23:03:24:b7:
4d:14:2a:9d:09:a1:03:c7:a4:94:8a:99:a6:1d:b2:
28:00:ef:6f:20:bd:6e:20:f5:e6:97:5c:34:bf:e6:
20:64:23:bb:d9:24:44:9c:57:03:37:09:df:62:20:
64:84:d8:61:a9:e8:7c:8f:8d:19:1b:04:5e:7d:17:
6b:08:60:32:39:e2:3a:9b:02:8c:0f:82:09:68:b2:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:E0:34:FA:56:30:FD:FD:40:8E:18:2E:5D:EE:E9:84:5A:EB:CE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1bbgNPpWMP39QI4YLl3u6YRa684.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:75:83:72:52:07:93:53:d6:ae:e6:8e:32:7e:ca:48:56:06:
64:49:ae:75:3c:bc:3a:3c:e9:d5:f2:81:d7:ce:5c:f6:43:4d:
b4:c8:e9:de:6e:48:2d:07:a7:22:ff:99:1d:22:ea:05:c3:e4:
64:a9:17:a9:ef:42:87:e3:60:9f:39:54:9a:8f:f7:08:e1:24:
c1:56:44:9e:c2:eb:76:4a:d8:9e:67:b1:b5:9e:6c:df:e5:05:
08:6b:ff:3f:57:3c:8b:25:99:93:5e:b4:1c:13:d9:6a:60:42:
86:ee:3d:e3:55:a4:46:58:51:d0:d8:09:9c:03:a8:71:ad:22:
fc:69:4e:7b:cf:f1:7a:4a:8a:60:45:82:9e:4e:1d:9a:30:84:
b2:0a:f5:4c:31:63:e5:9e:96:fe:0e:ea:08:cb:0c:12:68:3e:
f9:c4:13:4a:d5:d4:cd:70:41:09:ed:92:f3:2c:8a:43:4a:c2:
dc:b1:df:c1:86:34:a4:bc:59:04:7d:46:8e:5a:e5:ff:df:1e:
e0:20:f2:74:9e:db:3d:e8:82:e5:ec:3d:ec:bd:fc:a7:6c:30:
fd:f1:37:40:de:f6:d3:ab:ee:d9:17:e2:f5:55:06:e4:b2:ea:
a7:d2:72:ff:1b:da:44:a5:00:e2:23:4b:48:6a:80:e8:84:ff:
99:e7:65:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 16:28:13 2024 by rpki-client on console-fra.rpki-client.org