Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6q2SIy55fcs263LpBWp84t4sy7o.roa
File: 6q2SIy55fcs263LpBWp84t4sy7o.roa (raw, json)
Hash identifier: FyMY+Vd+iNAosy9/ZDDbvxqr8uqfPuFW2fye/VdHIr4=
Subject key identifier: EA:AD:92:23:2E:79:7D:CB:36:EB:72:E9:05:6A:7C:E2:DE:2C:CB:BA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01934339133399110D730D3EA6B0795B1C15
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6q2SIy55fcs263LpBWp84t4sy7o.roa
Signing time: Tue 19 Nov 2024 07:00:33 +0000
ROA not before: Tue 19 Nov 2024 07:00:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31549
IP address blocks: 217.60.187.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Nov 2024 20:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:39:13:33:99:11:0d:73:0d:3e:a6:b0:79:5b:1c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 19 07:00:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaad92232e797dcb36eb72e9056a7ce2de2ccbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b3:64:19:af:0e:3d:2b:b6:5c:43:b8:95:d3:
c4:2d:a9:6a:7f:9e:f5:67:a0:33:0e:27:cb:02:bb:
61:8b:cd:39:67:0e:c7:24:1e:87:4f:97:9d:ba:58:
df:4f:c6:f8:8e:db:53:f0:5d:e9:c0:49:7b:ef:16:
22:61:e2:46:c5:3d:a1:52:d5:b4:b5:27:46:82:cf:
2f:ff:a8:f9:a9:8e:53:a8:c8:75:30:77:76:2f:73:
8a:70:91:8a:38:54:56:07:c4:11:c1:94:24:07:5b:
45:ea:4e:2b:b5:cd:82:38:59:2b:f8:41:0f:8a:6e:
2d:b7:2a:c2:08:c8:98:99:ff:fa:f8:2d:ce:8a:ef:
a1:87:17:8a:61:d0:05:cc:fe:a0:dc:19:d7:d6:84:
58:2a:b4:3d:81:e3:47:4a:e4:4b:75:70:b6:13:55:
4f:2a:bf:2c:e8:cb:f7:fa:af:3f:e9:ae:dd:61:60:
b2:01:4b:b6:c3:11:3b:90:b7:3d:c4:44:d4:9a:fd:
94:fa:59:0a:97:c9:2a:40:0d:8e:95:42:5d:f4:48:
17:a2:14:21:9f:0d:6f:59:3c:00:87:2b:53:49:e1:
52:d3:45:1f:23:44:71:ec:4c:87:be:ad:cb:71:59:
9b:ed:a4:b0:2c:b5:3f:6c:40:72:f9:55:48:ef:80:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:92:23:2E:79:7D:CB:36:EB:72:E9:05:6A:7C:E2:DE:2C:CB:BA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6q2SIy55fcs263LpBWp84t4sy7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.187.0-217.60.199.255
Signature Algorithm: sha256WithRSAEncryption
5a:5e:6f:3d:0c:79:df:36:f8:5e:1a:1b:7d:de:c8:ef:d5:ad:
d2:a0:0d:d2:5b:2a:d8:2c:0d:67:f2:e9:31:27:8b:64:99:50:
87:49:d6:f5:5c:25:ff:aa:74:e0:d7:2b:b2:32:06:d2:7d:32:
8c:ca:68:a2:e3:90:f4:ad:07:c1:9e:38:43:8c:e9:9d:01:78:
35:da:58:c5:9c:3b:59:ea:1d:3b:d3:e8:29:2c:59:66:fe:2a:
63:32:45:9b:b2:7b:79:f2:02:5e:7a:2b:2e:20:5c:e0:3b:8d:
37:ab:f0:31:fd:c7:8b:63:fa:02:53:6c:93:51:bc:d1:ec:f9:
a0:3f:02:1e:92:ee:8b:93:ff:fc:ad:49:4c:05:86:64:c9:bb:
65:c6:ce:95:b5:83:fb:f7:11:33:9e:6f:9c:32:cd:6b:51:f0:
ca:5a:b8:72:fb:67:f6:7c:7b:58:2d:24:d3:30:ee:48:83:d7:
70:35:6d:1f:6a:d5:10:6d:f4:93:59:50:5b:6c:f7:de:2d:69:
83:32:58:65:c4:7a:5b:20:7b:bc:11:d5:e8:85:a5:7e:19:82:
46:1d:75:d7:cd:cb:5d:40:9f:be:dc:a6:e9:11:19:c6:04:0a:
29:7b:50:a2:ff:e3:67:c6:25:ce:43:d0:74:42:1a:35:d9:61:
58:79:b4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:01:54 2024 by rpki-client on console-fra.rpki-client.org