Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7ADb4wtqj08y2G0_zX7DxlzusCk.roa
File: 7ADb4wtqj08y2G0_zX7DxlzusCk.roa (raw, json)
Hash identifier: Mex8YzpbG8LayrjYVJBM0RvTu8XF1zOF67omajBSuCc=
Subject key identifier: EC:00:DB:E3:0B:6A:8F:4F:32:D8:6D:3F:CD:7E:C3:C6:5C:EE:B0:29
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191955D427C0305D92DCB3B584FAF5A246E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7ADb4wtqj08y2G0_zX7DxlzusCk.roa
Signing time: Tue 27 Aug 2024 19:43:22 +0000
ROA not before: Tue 27 Aug 2024 19:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 217.60.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 04:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:95:5d:42:7c:03:05:d9:2d:cb:3b:58:4f:af:5a:24:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 27 19:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec00dbe30b6a8f4f32d86d3fcd7ec3c65ceeb029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:cd:b3:be:c0:85:d3:e2:e9:2c:85:d2:0c:
67:de:b4:3b:d4:11:19:02:55:73:02:16:c6:0c:53:
52:19:7b:54:49:5a:d3:7a:8d:e1:78:c5:d6:1c:cf:
72:e7:f8:dc:9a:e2:38:19:7a:91:c1:30:60:9e:13:
41:6d:30:50:b2:b3:e6:eb:e0:b1:4f:d8:5e:34:1f:
92:fa:84:6c:53:c0:a2:9d:81:7b:6b:04:de:90:f0:
86:16:e6:62:44:a4:7c:1a:a4:c6:41:f0:a6:58:5b:
bc:0e:78:56:de:45:ab:6d:9f:56:61:69:54:d1:50:
b3:62:4e:9a:0a:38:79:99:e6:3c:fd:bc:63:15:6a:
50:9d:ab:89:ae:e6:c8:71:47:38:4c:66:1e:a9:81:
3b:3c:13:f6:bc:fd:4e:33:66:22:23:a6:e3:05:15:
0a:f5:f4:bc:31:a2:1d:74:e9:bd:e7:41:b4:b2:82:
c3:3a:88:70:86:29:1c:4f:ac:0e:38:bb:0b:46:5d:
60:32:2a:61:a8:e4:2f:74:43:e1:4b:d0:2f:30:17:
5b:df:d4:80:c2:3e:9b:7e:a4:4d:6e:56:26:09:ce:
aa:aa:af:6e:02:42:3c:d6:79:4c:e6:fa:e2:da:4b:
5c:18:65:b1:1c:fb:9a:11:4e:37:98:f1:ac:39:bd:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:00:DB:E3:0B:6A:8F:4F:32:D8:6D:3F:CD:7E:C3:C6:5C:EE:B0:29
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7ADb4wtqj08y2G0_zX7DxlzusCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.243.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ec:6d:d4:21:d9:85:c7:11:31:b6:71:5c:9f:09:62:ec:13:
12:2d:41:d4:cc:13:e4:ed:6d:0f:8c:bf:77:ce:11:12:5f:67:
d8:82:26:d3:91:1f:6e:5b:60:e6:e4:86:67:72:fc:6c:af:78:
84:1e:3b:86:23:9a:4d:74:3c:76:f5:95:cf:b3:37:ef:8c:ce:
f0:af:dd:17:ea:77:e0:11:a5:9c:1f:a2:5a:35:a4:19:39:0d:
8f:fb:1b:51:5b:86:18:71:de:35:54:1f:df:d7:9e:e2:16:bf:
0a:b7:08:96:2d:9b:51:bb:33:d9:fe:38:19:20:3c:4b:9a:34:
ed:c7:4b:ab:4b:7c:b5:17:9f:61:a6:0f:38:56:1d:35:d0:73:
11:9e:16:a2:92:f5:6c:e8:0d:3f:71:86:07:e7:01:9f:2a:ce:
7b:33:c7:ef:e3:b4:ee:b9:31:0d:87:8a:b9:17:ff:a2:21:d4:
40:6a:a6:c3:2c:1a:41:48:cb:11:cb:ec:6d:39:52:9f:8f:ab:
65:d1:15:be:e3:07:a8:ae:da:48:c4:46:8a:e8:c2:3b:cc:38:
4f:2a:4b:97:f0:d3:cd:90:23:e4:3b:54:2b:6e:cd:64:5d:0c:
80:81:cd:b3:f2:47:6b:97:eb:11:2f:d5:8c:ad:6e:1a:ce:fc:
b5:27:7a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 06:07:45 2024 by rpki-client on console-fra.rpki-client.org