Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BzUkpsOFdWPgJCeAOZ7P0HCuzpM.roa
File: BzUkpsOFdWPgJCeAOZ7P0HCuzpM.roa (raw, json)
Hash identifier: 0RjGiFlLbf8poxcZC0p3RHCxOFF66kMM53gHchDV3JI=
Subject key identifier: 07:35:24:A6:C3:85:75:63:E0:24:27:80:39:9E:CF:D0:70:AE:CE:93
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019108CD18ED749C3635C1D37B7A72388141
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BzUkpsOFdWPgJCeAOZ7P0HCuzpM.roa
Signing time: Wed 31 Jul 2024 12:39:04 +0000
ROA not before: Wed 31 Jul 2024 12:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 217.60.238.0/24 maxlen: 24
217.60.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 19:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:cd:18:ed:74:9c:36:35:c1:d3:7b:7a:72:38:81:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 31 12:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=073524a6c3857563e0242780399ecfd070aece93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:fc:b1:d0:c0:6f:81:45:b4:95:15:b5:44:
be:ba:b9:d2:ab:0c:eb:e3:b0:92:08:bc:76:c6:c5:
34:29:fc:78:d5:ed:8c:be:df:99:dd:6c:ca:b0:2a:
5f:7c:51:e2:fc:f5:bf:ee:c0:14:90:aa:ee:8c:a6:
5c:a6:bb:7e:95:77:4f:f4:6a:da:3e:4e:3b:a8:6e:
f2:23:57:d7:fc:0e:51:66:e6:8e:f5:3d:f6:c4:88:
c7:bf:62:cb:0b:09:cd:58:ac:e1:b4:c1:a9:e9:b3:
20:96:54:8d:33:d9:8e:76:ea:3b:f4:89:30:63:6b:
8a:ee:0b:e8:ba:3f:46:f4:21:c8:c8:51:32:34:ef:
ac:15:0b:e2:35:4c:a9:2a:cd:90:e1:65:5a:2a:2a:
d1:34:79:dd:b0:b2:9b:57:82:19:73:e4:d7:87:45:
59:74:7a:8b:72:f5:f3:1d:36:27:8d:06:e8:c1:00:
7c:10:6d:68:4d:83:cb:ce:3a:da:a7:91:57:98:95:
f0:39:7c:48:7e:60:5e:76:09:6e:35:f8:72:8f:2e:
90:51:4f:ad:7c:9a:dd:cd:72:1a:4b:1f:d0:68:d7:
5f:fc:11:87:fc:7b:a9:8d:5c:f7:65:0f:66:30:17:
65:c3:8e:29:23:af:f1:08:59:ca:40:3d:c3:3d:91:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:35:24:A6:C3:85:75:63:E0:24:27:80:39:9E:CF:D0:70:AE:CE:93
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BzUkpsOFdWPgJCeAOZ7P0HCuzpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.238.0/24
217.60.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:39:16:b4:25:67:50:ea:39:8c:d9:36:2b:c5:57:8d:2f:4b:
2c:93:e5:2d:4b:5c:0b:0f:cd:75:f3:6e:f9:6e:a6:7f:fa:37:
6d:84:26:ac:b9:6d:69:8b:29:c5:ad:95:7f:a0:99:3c:2d:ad:
fe:1e:15:ac:cb:03:dc:c6:86:08:c3:f8:ee:d6:88:d8:f4:ee:
db:c9:12:d0:05:31:bf:cf:8a:16:13:b5:80:51:3e:7e:6b:33:
b2:bf:52:95:b3:2b:7a:ae:19:fe:c4:48:3c:94:e9:67:50:54:
cc:93:f9:98:50:eb:aa:83:cd:4b:56:c0:71:f2:3b:ce:9c:c0:
db:3f:3d:34:46:92:47:46:82:65:fc:95:7e:6b:24:1a:b5:48:
d1:e8:d3:a8:9b:67:ef:3b:ae:85:84:2f:18:e0:a5:96:10:78:
6f:a6:21:9b:f5:bf:54:07:85:dc:3b:19:45:46:1f:78:72:6e:
84:fb:05:54:83:30:53:2f:4e:31:df:86:88:75:11:55:29:f7:
08:80:a4:7b:5b:c1:73:57:fe:66:78:21:15:13:80:18:71:56:
71:ca:09:c4:49:b2:02:d0:ed:d4:b8:66:ee:16:b0:0c:e6:38:
37:f1:60:c5:e4:ff:b6:47:b8:2c:18:e2:af:1f:c4:5f:48:69:
ed:a1:2c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 21:33:35 2024 by rpki-client on console-ams.rpki-client.org