Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GNPmFx8XCRh0QS3lWVzV4YLE7-c.roa
File: GNPmFx8XCRh0QS3lWVzV4YLE7-c.roa (raw, json)
Hash identifier: 166Pe8mPHHt8PfhujrxEg/JfEnOemJSTkUSQlEGTkxI=
Subject key identifier: 18:D3:E6:17:1F:17:09:18:74:41:2D:E5:59:5C:D5:E1:82:C4:EF:E7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193650D9B645B36CDF5F059A6C8B3729AD3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GNPmFx8XCRh0QS3lWVzV4YLE7-c.roa
Signing time: Mon 25 Nov 2024 20:40:10 +0000
ROA not before: Mon 25 Nov 2024 20:40:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 217.60.237.0/24 maxlen: 24
217.60.238.0/24 maxlen: 24
217.60.243.0/24 maxlen: 24
217.60.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Dec 2024 12:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:0d:9b:64:5b:36:cd:f5:f0:59:a6:c8:b3:72:9a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 25 20:40:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18d3e6171f17091874412de5595cd5e182c4efe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:fb:b0:9e:43:5d:39:40:e3:b9:f5:cc:1d:
66:b0:94:eb:69:a8:a6:f8:da:5f:12:10:2d:dd:f2:
63:18:22:69:42:c1:e7:41:c2:4e:b2:d9:fd:41:38:
d6:05:bc:61:64:b8:a7:19:5d:c0:d5:fe:91:1e:1c:
3e:98:15:7d:f1:55:69:f5:a1:d3:af:0e:4d:59:c5:
ab:2c:c7:34:cb:8c:e6:12:7c:b4:32:a3:a4:bd:da:
72:8f:60:ca:d5:89:cd:0c:92:e9:b8:b9:66:03:d5:
9e:e5:13:9f:71:a7:2e:14:84:1d:45:a3:30:a7:a0:
27:7e:1f:5d:25:8c:74:65:39:78:e4:36:fc:d6:71:
be:fd:e1:ae:70:3e:b1:7e:bb:01:4c:3f:27:50:99:
11:5e:dc:78:1e:77:4e:68:e7:c3:0e:11:ee:62:aa:
ef:0e:76:ae:7c:60:12:a4:31:25:d5:2c:df:28:8f:
1f:94:2d:46:1c:bd:3a:15:7a:ea:e8:7a:27:09:7c:
c0:a9:8e:cb:8e:f3:55:6d:a6:99:06:52:90:b1:e6:
3a:cc:32:af:04:39:76:df:43:e6:7e:4b:29:55:8a:
f7:58:18:bd:f0:72:ba:69:8d:b0:6b:8c:12:ba:87:
45:3f:db:6f:eb:14:64:d9:6b:29:fc:e1:22:64:d7:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D3:E6:17:1F:17:09:18:74:41:2D:E5:59:5C:D5:E1:82:C4:EF:E7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GNPmFx8XCRh0QS3lWVzV4YLE7-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.237.0-217.60.238.255
217.60.243.0/24
217.60.246.0/24
Signature Algorithm: sha256WithRSAEncryption
76:dd:7d:de:8d:09:d5:3a:89:1d:2c:f5:d1:37:e9:e9:7a:aa:
7e:0e:45:a9:e7:4a:ad:8d:b4:dd:e0:ed:23:bd:67:5d:84:29:
fd:04:2c:bb:01:b7:8d:ac:b0:8f:df:6e:c9:98:87:e7:19:2f:
68:a3:eb:37:df:00:fd:a3:a9:4f:a1:6e:31:7e:16:25:8a:87:
66:99:a8:c5:bf:e2:da:e9:b8:05:2a:56:30:90:c5:b3:5f:a5:
7f:89:4f:6a:49:32:21:c0:b2:f8:24:2a:34:1f:f1:1e:84:4b:
ec:48:44:a5:ab:4a:47:a7:00:a7:d1:e0:db:54:c3:35:20:a5:
89:2b:b1:fe:96:87:b1:48:ee:bf:f1:70:7a:6e:ba:5a:6b:e5:
f6:1a:4b:aa:96:b2:ed:e6:e3:00:10:f8:3b:8d:a9:f7:ab:98:
a9:51:8f:1a:a8:62:c9:6e:84:fe:5c:96:7f:4f:36:b9:b8:51:
d6:70:a1:87:3d:a3:10:e4:4a:fe:1a:f1:36:c5:05:2c:cb:10:
15:d5:d9:f6:5f:ab:55:8d:6c:2b:9e:99:9b:ba:03:81:c7:14:
e2:60:9b:db:74:86:47:d2:29:f3:23:ff:56:86:41:a2:76:88:
5b:77:de:a5:e8:3b:16:8b:14:42:a6:1e:19:d2:6d:bc:2e:0c:
3b:fb:d9:4a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZNlDZtkWzbN9fBZpsizcprTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTI1MjA0MDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGQzZTYxNzFmMTcwOTE4NzQ0MTJkZTU1OTVjZDVlMTgyYzRlZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjb7sJ5DXTlA47n1zB1msJTraaim
+NpfEhAt3fJjGCJpQsHnQcJOstn9QTjWBbxhZLinGV3A1f6RHhw+mBV98VVp9aHT
rw5NWcWrLMc0y4zmEny0MqOkvdpyj2DK1YnNDJLpuLlmA9We5ROfcacuFIQdRaMw
p6Anfh9dJYx0ZTl45Db81nG+/eGucD6xfrsBTD8nUJkRXtx4HndOaOfDDhHuYqrv
DnaufGASpDEl1SzfKI8flC1GHL06FXrq6HonCXzAqY7LjvNVbaaZBlKQseY6zDKv
BDl230PmfkspVYr3WBi98HK6aY2wa4wSuodFP9tv6xRk2Wsp/OEiZNcNWwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFBjT5hcfFwkYdEEt5Vlc1eGCxO/nMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvR05QbUZ4OFhDUmgwUVMzbFdWelY0WUxFNy1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBADZPO0D
BADZPO4DBADZPPMDBADZPPYwDQYJKoZIhvcNAQELBQADggEBAHbdfd6NCdU6iR0s
9dE36el6qn4ORannSq2NtN3g7SO9Z12EKf0ELLsBt42ssI/fbsmYh+cZL2ij6zff
AP2jqU+hbjF+FiWKh2aZqMW/4trpuAUqVjCQxbNfpX+JT2pJMiHAsvgkKjQf8R6E
S+xIRKWrSkenAKfR4NtUwzUgpYkrsf6Wh7FI7r/xcHpuulpr5fYaS6qWsu3m4wAQ
+DuNqfermKlRjxqoYsluhP5cln9PNrm4UdZwoYc9oxDkSv4a8TbFBSzLEBXV2fZf
q1WNbCuemZu6A4HHFOJgm9t0hkfSKfMj/1aGQaJ2iFt33qXoOxaLFEKmHhnSbbwu
DDv72Uo=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:12 2025 by rpki-client