Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KEqiCjTTf6rrtOq2thT8dzF7Z7w.roa
File: KEqiCjTTf6rrtOq2thT8dzF7Z7w.roa (raw, json)
Hash identifier: nTGfhtO9SmvdG0BRoIB1bAUG198E0RlXEingivsk/DQ=
Subject key identifier: 28:4A:A2:0A:34:D3:7F:AA:EB:B4:EA:B6:B6:14:FC:77:31:7B:67:BC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0190F905CAA04B78E2D1A691B520D4D8B36E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KEqiCjTTf6rrtOq2thT8dzF7Z7w.roa
Signing time: Sun 28 Jul 2024 11:07:04 +0000
ROA not before: Sun 28 Jul 2024 11:07:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 217.60.128.0/24 maxlen: 24
217.60.242.0/24 maxlen: 24
217.60.244.0/24 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.247.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 06:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f9:05:ca:a0:4b:78:e2:d1:a6:91:b5:20:d4:d8:b3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 28 11:07:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=284aa20a34d37faaebb4eab6b614fc77317b67bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:56:07:67:95:f3:11:f0:b2:c3:62:31:94:
d8:3a:c8:1e:8d:55:2f:e3:bb:76:22:9b:16:0f:8a:
4b:e3:a8:da:75:9d:5b:1b:2a:da:ee:75:31:25:71:
0c:4d:f7:9c:e8:da:fc:c3:65:79:dd:be:f2:66:87:
0a:30:ae:55:47:03:e1:1e:b5:36:1f:9d:12:48:5f:
a1:dd:ff:92:12:f6:78:d0:2a:2e:10:57:73:db:c0:
29:98:ef:ff:be:1f:70:e3:01:8d:9b:93:6f:ae:76:
97:5a:81:2e:4b:11:2d:4d:c5:b4:ad:7b:6e:a7:a6:
bd:86:9f:96:5a:c7:d5:93:9f:e6:df:0d:41:5d:30:
14:1e:bf:31:61:a7:b3:3d:11:bd:ef:90:10:56:47:
da:80:bc:e5:37:cc:8e:8e:17:82:23:af:58:37:58:
a6:1d:66:66:97:d4:80:62:a7:5c:9a:fb:4f:36:a0:
f9:a5:28:b8:ce:65:53:18:2c:df:f4:93:2f:13:0b:
aa:de:d5:83:95:f1:e1:91:1a:96:41:22:45:0f:82:
5e:21:d0:8d:0a:67:46:38:5e:b6:65:35:df:ba:b7:
dd:f0:41:a7:a3:93:3d:c9:96:a2:2c:51:dd:7b:51:
70:ec:4b:52:0e:f0:76:ad:98:46:ac:45:ba:b5:bf:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4A:A2:0A:34:D3:7F:AA:EB:B4:EA:B6:B6:14:FC:77:31:7B:67:BC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KEqiCjTTf6rrtOq2thT8dzF7Z7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.128.0/24
217.60.242.0/24
217.60.244.0/23
217.60.247.0/24
217.60.249.0/24
217.60.252.0/23
Signature Algorithm: sha256WithRSAEncryption
21:2a:dc:44:eb:ce:22:ba:9b:61:3c:b0:76:cf:9e:64:30:3d:
14:4f:e3:67:13:a8:ad:f7:f5:1d:5b:a4:e8:b2:d6:ba:a7:1c:
f5:62:2f:7b:84:60:44:f4:37:3b:a3:0c:17:21:f3:3f:e4:49:
31:9c:75:3e:7f:e9:92:68:a3:c4:18:73:ff:28:b4:50:f9:c0:
dd:ef:3a:b2:29:28:2f:c7:6e:24:55:f3:b4:6c:96:d6:4c:67:
81:f2:3d:ad:be:5b:dd:8b:98:0b:8e:c6:db:26:aa:94:95:0e:
37:a6:99:63:31:f2:5b:4b:7a:d3:1f:bb:45:ee:a5:71:ed:98:
65:67:14:06:d1:3f:58:d7:e4:1d:85:10:96:7c:cd:2b:84:6f:
92:22:1b:f2:d6:a3:82:36:dd:2f:4b:5a:f2:f8:9d:9d:e3:cd:
e9:70:d5:8f:9c:76:0a:fc:81:83:a9:a4:fd:3e:20:76:90:c2:
90:1b:28:16:dd:52:ac:df:f0:59:75:24:d5:6e:13:c1:b3:7a:
d3:e2:c2:e7:69:f6:82:01:22:ad:60:36:82:89:40:9d:bf:cb:
65:6d:01:51:85:79:10:9d:c6:38:35:37:be:cb:33:c8:07:54:
09:32:2f:9f:95:40:d5:e9:bf:86:03:fc:1c:19:01:c2:e2:f3:
ba:8c:55:7c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZD5BcqgS3ji0aaRtSDU2LNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwNzI4MTEwNzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODRhYTIwYTM0ZDM3ZmFhZWJiNGVhYjZiNjE0ZmM3NzMxN2I2N2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YlWB2eV8xHwssNiMZTYOsgejVUv
47t2IpsWD4pL46jadZ1bGyra7nUxJXEMTfec6Nr8w2V53b7yZocKMK5VRwPhHrU2
H50SSF+h3f+SEvZ40CouEFdz28ApmO//vh9w4wGNm5NvrnaXWoEuSxEtTcW0rXtu
p6a9hp+WWsfVk5/m3w1BXTAUHr8xYaezPRG975AQVkfagLzlN8yOjheCI69YN1im
HWZml9SAYqdcmvtPNqD5pSi4zmVTGCzf9JMvEwuq3tWDlfHhkRqWQSJFD4JeIdCN
CmdGOF62ZTXfurfd8EGno5M9yZaiLFHde1Fw7EtSDvB2rZhGrEW6tb9GPQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFChKogo003+q67TqtrYU/Hcxe2e8MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvS0VxaUNqVFRmNnJydE9xMnRoVDhkekY3Wjd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQA2TyAAwQA
2TzyAwQB2Tz0AwQA2Tz3AwQA2Tz5AwQB2Tz8MA0GCSqGSIb3DQEBCwUAA4IBAQAh
KtxE684iupthPLB2z55kMD0UT+NnE6it9/UdW6Tosta6pxz1Yi97hGBE9Dc7owwX
IfM/5EkxnHU+f+mSaKPEGHP/KLRQ+cDd7zqyKSgvx24kVfO0bJbWTGeB8j2tvlvd
i5gLjsbbJqqUlQ43ppljMfJbS3rTH7tF7qVx7ZhlZxQG0T9Y1+QdhRCWfM0rhG+S
Ihvy1qOCNt0vS1ry+J2d483pcNWPnHYK/IGDqaT9PiB2kMKQGygW3VKs3/BZdSTV
bhPBs3rT4sLnafaCASKtYDaCiUCdv8tlbQFRhXkQncY4NTe+yzPIB1QJMi+flUDV
6b+GA/wcGQHC4vO6jFV8
-----END CERTIFICATE-----
Generated at Wed Aug 14 09:28:03 2024 by rpki-client on console-ams.rpki-client.org