Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ExGmloUyxAGd9BYEsmaKJPpC9mg.roa
File: ExGmloUyxAGd9BYEsmaKJPpC9mg.roa (raw, json)
Hash identifier: NnooFxWGMazJ4bAAVh28lLHHE5IO1d41h8B2OXzkGFU=
Subject key identifier: 13:11:A6:96:85:32:C4:01:9D:F4:16:04:B2:66:8A:24:FA:42:F6:68
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196FBCB6CE4DE68A4E2F3F8FF5765043957
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ExGmloUyxAGd9BYEsmaKJPpC9mg.roa
Signing time: Fri 23 May 2025 06:18:54 +0000
ROA not before: Fri 23 May 2025 06:18:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 217.60.32.0/21 maxlen: 24
217.60.242.0/24 maxlen: 24
217.60.247.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 07:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fb:cb:6c:e4:de:68:a4:e2:f3:f8:ff:57:65:04:39:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 23 06:18:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1311a6968532c4019df41604b2668a24fa42f668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:d3:96:7f:26:00:f1:a1:54:e0:97:3c:93:
fc:b7:0c:85:6a:62:fb:d5:57:93:33:1f:65:0c:37:
67:0d:b7:f7:a0:bb:27:e4:6c:87:48:cf:1d:8a:65:
e2:7a:cf:24:12:ae:33:47:9c:64:07:61:74:55:25:
2f:6b:f0:b4:e2:5e:6f:27:7f:c0:16:b1:c9:91:dc:
cd:27:e8:77:47:87:09:0e:c9:cb:df:5d:ed:3f:a4:
b4:ed:fc:ef:7a:fb:5c:3e:37:c4:f8:51:29:c6:89:
3c:8d:ca:d8:dd:11:6a:c6:bd:ba:41:6f:19:97:b9:
35:19:fa:35:24:1a:1d:6e:27:59:dd:b8:6a:ea:47:
3a:23:d6:30:8f:c2:a5:70:81:a5:00:1f:21:72:a8:
6b:81:13:43:99:2c:89:57:9f:75:29:52:b1:6d:33:
35:0f:09:6a:d8:99:97:38:90:24:31:9f:34:83:53:
42:de:36:c1:43:41:18:5f:63:86:04:3c:24:79:11:
4c:5b:5e:0f:8a:6d:e9:43:2b:33:56:07:de:d5:9f:
0c:cc:e8:a4:bf:a2:28:fb:45:26:59:27:9a:87:22:
32:6c:41:9c:6e:d9:5e:3e:97:54:e9:01:ed:f0:04:
89:64:8e:d3:a3:8d:27:56:86:92:7e:69:fc:f5:e0:
89:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:A6:96:85:32:C4:01:9D:F4:16:04:B2:66:8A:24:FA:42:F6:68
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ExGmloUyxAGd9BYEsmaKJPpC9mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.32.0/21
217.60.242.0/24
217.60.247.0/24
217.60.249.0/24
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f1:a2:fe:85:c6:ae:8c:d1:4c:e8:22:f1:e7:2b:54:9d:c0:
07:ba:58:c6:ea:df:5d:ef:5b:d7:b7:83:7b:b1:89:77:c7:fe:
c2:89:ce:39:15:35:60:fa:06:e5:42:d8:bd:75:89:c7:41:8c:
b2:4f:3c:08:1a:be:da:09:c2:f1:e1:cf:80:7e:a2:0e:ef:d9:
d9:b5:90:4c:14:df:b9:a6:4c:6e:ef:6d:20:bc:03:32:d6:75:
60:13:fc:ab:42:7d:48:c5:bf:35:8c:cc:b0:04:a9:3b:f5:c4:
a0:69:b5:80:85:29:66:60:89:91:47:bd:72:8b:a8:49:1d:41:
28:87:dc:01:2c:d0:3d:e7:e6:77:af:8b:bc:16:ab:f6:e6:4e:
fc:73:5d:29:bd:24:2d:ba:c5:39:ec:d1:1d:41:93:bf:88:91:
d4:a5:1a:90:59:14:7b:56:12:30:aa:33:69:e0:5d:ce:56:9f:
aa:b1:6b:05:4c:1d:94:e5:f9:69:8d:73:bf:55:c7:98:a9:9b:
fa:c6:50:a9:2e:c9:6c:4a:89:76:8b:32:f1:d7:27:1e:1c:9d:
b2:3b:e2:fc:68:c4:5d:5a:95:bc:d6:73:61:06:dc:c9:54:f6:
36:5f:c2:15:29:37:6a:be:83:c7:34:2b:3d:66:03:05:ca:1d:
b6:94:c8:18
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZb7y2zk3mik4vP4/1dlBDlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNTIzMDYxODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzExYTY5Njg1MzJjNDAxOWRmNDE2MDRiMjY2OGEyNGZhNDJmNjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL7Tln8mAPGhVOCXPJP8twyFamL7
1VeTMx9lDDdnDbf3oLsn5GyHSM8dimXies8kEq4zR5xkB2F0VSUva/C04l5vJ3/A
FrHJkdzNJ+h3R4cJDsnL313tP6S07fzvevtcPjfE+FEpxok8jcrY3RFqxr26QW8Z
l7k1Gfo1JBodbidZ3bhq6kc6I9Ywj8KlcIGlAB8hcqhrgRNDmSyJV591KVKxbTM1
Dwlq2JmXOJAkMZ80g1NC3jbBQ0EYX2OGBDwkeRFMW14Pim3pQyszVgfe1Z8MzOik
v6Io+0UmWSeahyIybEGcbtlePpdU6QHt8ASJZI7To40nVoaSfmn89eCJswIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBMRppaFMsQBnfQWBLJmiiT6QvZoMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRXhHbWxvVXl4QUdkOUJZRXNtYUtKUHBDOW1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQD2TwgAwQA
2TzyAwQA2Tz3AwQA2Tz5AwQA2Tz8MA0GCSqGSIb3DQEBCwUAA4IBAQAo8aL+hcau
jNFM6CLx5ytUncAHuljG6t9d71vXt4N7sYl3x/7Cic45FTVg+gblQti9dYnHQYyy
TzwIGr7aCcLx4c+AfqIO79nZtZBMFN+5pkxu720gvAMy1nVgE/yrQn1Ixb81jMyw
BKk79cSgabWAhSlmYImRR71yi6hJHUEoh9wBLNA95+Z3r4u8Fqv25k78c10pvSQt
usU57NEdQZO/iJHUpRqQWRR7VhIwqjNp4F3OVp+qsWsFTB2U5flpjXO/VceYqZv6
xlCpLslsSol2izLx1yceHJ2yO+L8aMRdWpW81nNhBtzJVPY2X8IVKTdqvoPHNCs9
ZgMFyh22lMgY
-----END CERTIFICATE-----
Generated at Thu Jun 5 04:12:04 2025 by rpki-client