Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8LY-vqj-q6dUFnxduhOn3O-aNbA.roa
File: 8LY-vqj-q6dUFnxduhOn3O-aNbA.roa (raw, json)
Hash identifier: JvNGBNErV2mBfmyUNI9XJtRk1WAnyNKaFUeGCwv58sw=
Subject key identifier: F0:B6:3E:BE:A8:FE:AB:A7:54:16:7C:5D:BA:13:A7:DC:EF:9A:35:B0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194936CA44ACE1B019D3812CC043E5BC916
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8LY-vqj-q6dUFnxduhOn3O-aNbA.roa
Signing time: Thu 23 Jan 2025 13:49:18 +0000
ROA not before: Thu 23 Jan 2025 13:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209604
IP address blocks: 217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 11:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:6c:a4:4a:ce:1b:01:9d:38:12:cc:04:3e:5b:c9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 23 13:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0b63ebea8feaba754167c5dba13a7dcef9a35b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:6a:71:f0:c8:bc:63:5e:f4:7c:70:0d:50:
b9:6a:8b:84:e4:92:75:3c:4f:39:36:9a:d9:0f:35:
8d:eb:43:78:ec:ad:98:e5:d0:57:7a:39:6c:b3:96:
a4:4a:2c:4c:cb:84:02:bb:f7:55:b7:22:d8:12:d1:
96:c6:fd:45:cb:d3:82:10:d8:2f:b1:36:a7:88:da:
fc:ed:03:7c:55:64:22:78:4a:09:ab:5c:4b:d0:38:
f6:ab:69:7e:f6:52:fe:0b:ea:de:fa:98:80:c8:6f:
65:2a:ce:51:22:84:8e:0c:93:23:44:e4:6e:18:b2:
34:8f:03:0f:14:d0:fa:45:98:78:0c:9d:b3:46:da:
ca:e2:c2:a0:b7:fd:2f:ae:55:8d:79:9d:43:ed:a2:
fd:ac:e3:ba:44:5c:e8:ef:51:e6:20:c3:a0:9d:23:
6f:6e:c0:c3:1b:1c:9c:46:2e:86:a9:ca:ab:44:2e:
b8:23:00:fc:ac:bb:09:3b:2e:59:53:84:10:3a:f9:
a5:a8:9f:69:8b:29:95:8b:d1:c1:e9:ad:84:90:09:
69:68:b6:42:8a:99:31:50:62:74:16:ad:54:1b:77:
1f:e0:ff:07:fb:21:12:ed:93:95:99:48:8b:43:23:
25:90:c0:fc:e7:5d:80:d4:bd:0e:b8:5c:e5:a3:8e:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B6:3E:BE:A8:FE:AB:A7:54:16:7C:5D:BA:13:A7:DC:EF:9A:35:B0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8LY-vqj-q6dUFnxduhOn3O-aNbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d1:13:da:f8:42:a5:df:d7:4a:8d:61:22:b5:66:06:40:b9:
14:65:4c:4c:12:0c:e7:6d:37:fa:39:1a:d5:34:d8:85:99:a6:
3f:6f:92:ab:83:dd:eb:56:9c:01:fd:b1:0e:20:1a:a6:68:02:
9b:a7:89:55:d0:7f:c9:ad:2e:42:6c:d9:95:18:e7:53:f8:1d:
cb:b9:b0:ae:fc:20:b3:95:83:67:33:17:e8:2a:8d:5c:28:1d:
ea:41:32:af:ce:b8:33:59:e2:68:ee:6d:1a:3d:be:c6:cc:28:
93:b9:e4:02:1f:65:bf:11:09:a3:ec:ce:ac:42:30:0e:20:fd:
77:c7:89:b4:c9:51:4e:ac:e2:86:de:49:4e:fd:92:95:a4:df:
64:91:4e:f3:f9:48:85:a6:42:ee:8f:5a:25:74:da:d7:35:26:
4b:37:c7:1d:e4:7d:5c:20:07:06:c9:8e:0c:05:62:3e:91:97:
97:f1:0e:a4:03:50:fd:5b:1b:9e:e6:12:47:26:e4:3a:77:c3:
1c:11:ab:13:74:bd:26:a1:6f:2f:f6:c6:e5:87:3e:06:c7:26:
c5:88:30:ef:56:1f:fa:a5:25:d3:a0:20:bf:34:a6:59:8e:62:
5e:b2:81:55:22:6b:b2:37:f8:89:7e:ac:24:73:8d:92:52:d7:
cf:e2:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:04 2025 by rpki-client