Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8vvQgguxaYMTI0BaY5lXOv7PupE.roa
File: 8vvQgguxaYMTI0BaY5lXOv7PupE.roa (raw, json)
Hash identifier: FW5ClKyeXrLfhcIIYQXIxukZ4dhE6UIm+6N0tYUUZEE=
Subject key identifier: F2:FB:D0:82:0B:B1:69:83:13:23:40:5A:63:99:57:3A:FE:CF:BA:91
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193397BBB274B696FE7DF681B985E973BF8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8vvQgguxaYMTI0BaY5lXOv7PupE.roa
Signing time: Sun 17 Nov 2024 09:37:10 +0000
ROA not before: Sun 17 Nov 2024 09:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31549
IP address blocks: 217.60.187.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 19 Nov 2024 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:39:7b:bb:27:4b:69:6f:e7:df:68:1b:98:5e:97:3b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 17 09:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2fbd0820bb169831323405a6399573afecfba91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5e:e9:66:2e:2f:8d:a6:9b:1b:f8:e3:85:41:
a1:f8:a4:cc:e9:2e:43:2c:fb:b5:90:2f:bc:e1:cb:
51:77:ba:c1:6f:44:21:42:32:4f:49:f9:92:dc:15:
b2:88:a1:8f:06:87:23:c9:e1:77:ba:f3:43:58:fd:
b2:4a:35:5c:b9:9d:1d:38:25:ef:b8:b0:74:49:79:
04:0b:fe:92:01:25:93:1f:7a:3c:32:d9:7b:9c:d5:
6f:b6:1c:46:cc:60:a0:49:64:c7:03:df:8d:b9:b1:
c5:74:72:a3:c1:87:c7:b2:e9:7e:e4:e4:86:6e:70:
df:9e:c8:85:89:d8:1c:30:1b:f2:b5:99:eb:22:b2:
cf:bb:78:0b:e4:fc:0d:59:80:32:74:42:7e:87:94:
35:4e:1b:f5:91:f8:f7:24:e3:24:4c:e7:7d:c7:c4:
d0:43:d1:9b:17:a9:52:90:67:de:f6:72:25:8c:d7:
ee:62:0d:ac:d4:00:54:48:24:65:a8:67:0b:cb:3c:
d6:4e:1e:38:88:86:d8:8a:51:af:60:5e:03:c2:99:
7e:02:12:d6:b6:89:d7:eb:06:16:e5:65:55:84:70:
d6:5e:70:43:78:0e:7d:ec:10:ab:e7:b7:41:ef:21:
81:54:14:71:4c:7c:dc:5d:e6:1c:63:47:5e:98:49:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FB:D0:82:0B:B1:69:83:13:23:40:5A:63:99:57:3A:FE:CF:BA:91
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8vvQgguxaYMTI0BaY5lXOv7PupE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.187.0-217.60.199.255
Signature Algorithm: sha256WithRSAEncryption
a8:5b:68:d7:2a:bb:51:84:7d:56:ad:43:2d:b3:f3:14:c8:52:
fa:bb:25:4f:2a:0e:09:12:ba:22:79:80:c8:0a:ef:47:30:90:
a0:6f:83:21:3f:85:55:55:7d:e6:83:51:c0:40:fd:20:8b:76:
dc:e3:18:0c:e5:5d:4d:e7:b6:06:38:92:53:30:b2:9d:e1:ba:
78:d1:6a:ad:98:35:95:b4:97:32:5d:c9:22:89:9e:b9:18:a3:
9f:56:9d:a9:06:ac:98:e9:04:2d:75:11:05:d1:fa:81:1e:df:
42:c9:d2:02:dd:b2:f2:7f:32:a3:ba:b1:9b:d9:b1:a8:54:4f:
9b:e7:df:8a:91:23:ae:40:f7:d4:86:5c:bc:24:6e:c9:e8:ad:
6d:f9:d8:6f:f8:04:19:be:9c:83:59:b2:e1:da:76:30:3f:b9:
39:62:74:80:e0:75:43:1f:90:7f:1e:c9:44:88:3c:e5:e4:b7:
83:8a:15:3e:91:b8:3f:ac:b4:38:66:b4:04:bc:c4:62:6d:ce:
0c:ea:da:64:c5:9c:2c:be:d8:6b:9c:f8:c1:a3:3c:f6:bf:35:
8c:9f:ca:ef:a3:d1:35:1c:83:2f:fa:78:37:cb:06:2e:29:21:
05:a6:93:71:99:3b:13:c2:29:4e:30:18:bd:2b:d0:7a:85:f0:
a1:36:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 08:13:06 2024 by rpki-client on console-ams.rpki-client.org