Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Aik5JmikthcVdYv7dz27fPryD6g.roa
File: Aik5JmikthcVdYv7dz27fPryD6g.roa (raw, json)
Hash identifier: bJ02zdAHKocH6ga9Bj4VE8Wm+Yz6tmt9vJFkrYac5sY=
Subject key identifier: 02:29:39:26:68:A4:B6:17:15:75:8B:FB:77:3D:BB:7C:FA:F2:0F:A8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193ED94EB90B65CD1B13664D6E35F895B86
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Aik5JmikthcVdYv7dz27fPryD6g.roa
Signing time: Sun 22 Dec 2024 08:56:20 +0000
ROA not before: Sun 22 Dec 2024 08:56:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 217.60.239.0/24 maxlen: 24
217.60.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ed:94:eb:90:b6:5c:d1:b1:36:64:d6:e3:5f:89:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 22 08:56:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0229392668a4b61715758bfb773dbb7cfaf20fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:8d:08:ce:93:fa:99:82:60:54:64:9c:b5:
5c:ae:44:a1:30:ff:14:a3:e3:40:22:20:e9:7e:95:
ba:12:ef:50:6c:69:2e:91:ec:99:47:e3:49:3d:7c:
78:01:6a:88:fc:1b:e4:b5:7f:a5:f4:b6:bc:b7:83:
bf:b0:42:4a:66:91:62:f1:4e:f2:60:7b:00:ca:00:
50:da:2b:4a:8a:e1:7d:95:fe:31:ea:42:67:14:bc:
95:10:ff:ac:ab:3b:c9:fa:30:ee:3a:4d:03:94:04:
a4:b0:e4:0c:ae:ab:1b:2c:78:c0:e7:0c:7b:04:42:
2f:94:c9:a1:64:e5:d0:b0:e1:0d:30:a6:65:7c:32:
07:eb:8a:a4:e0:b7:db:ed:5f:9f:3d:f5:d4:15:f0:
66:e1:51:7e:b5:b5:60:03:77:10:ce:39:dd:b3:e0:
5f:40:71:d6:94:6d:55:98:f7:a5:7e:e1:53:a3:98:
0d:57:7d:b8:79:7c:af:7a:f3:7f:cb:9b:85:c9:75:
99:a2:b8:16:95:54:e5:39:e4:fe:3a:00:28:7d:3e:
18:71:72:e9:5f:06:b3:64:26:c5:cb:90:00:c0:ed:
78:03:49:08:f7:dc:cd:42:4d:a9:b6:59:de:55:21:
c4:1c:70:16:ec:70:a0:7f:53:7d:1d:d5:98:5a:1e:
b7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:29:39:26:68:A4:B6:17:15:75:8B:FB:77:3D:BB:7C:FA:F2:0F:A8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Aik5JmikthcVdYv7dz27fPryD6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.239.0/24
217.60.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1c:5f:d8:1d:9a:03:85:dc:0f:f2:10:06:ca:91:7e:98:fa:
ca:95:13:ef:de:6e:5f:57:e0:d3:03:b8:c3:7f:05:af:92:d5:
ba:41:f3:29:cf:d5:90:52:f4:58:f9:3e:de:62:c5:87:94:38:
46:25:59:0d:60:de:6b:fd:9d:b1:79:86:3d:ad:ed:65:7c:27:
39:44:dd:83:27:af:9a:c8:59:0a:56:9a:cd:d4:85:48:f5:80:
1f:e4:c6:d2:9f:f8:4d:bb:09:d3:ed:b5:9e:60:48:7c:db:85:
c0:0d:0e:15:ae:0e:cd:46:ee:18:ba:b1:46:eb:42:55:e0:e5:
54:4f:91:0a:3a:12:1a:65:e0:1f:43:58:c2:bf:d9:ee:d3:e4:
ac:1f:ac:7c:76:ed:e9:e7:38:79:88:56:08:2a:17:62:d0:66:
26:e3:c2:d6:4a:8c:23:f1:6c:49:1a:5e:79:52:c3:11:02:82:
0f:c0:6d:73:7c:69:6f:03:c8:5b:54:ee:7c:07:a4:1a:7b:08:
3e:8d:a0:1d:44:16:90:5c:ae:8d:9b:a3:1e:c1:72:67:8d:83:
a6:53:72:7e:e2:62:1b:70:a0:fc:f7:0b:99:5d:04:4c:c6:ed:
64:05:f2:ca:62:fa:59:73:08:f6:25:d6:d4:97:65:33:04:78:
66:7c:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:51 2025 by rpki-client