Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lh9SWF3oJ8NYuX4ScUCBuhHHUgI.roa
File: Lh9SWF3oJ8NYuX4ScUCBuhHHUgI.roa (raw, json)
Hash identifier: Sj18uy2fO8H+8QgibONoc03wmqWKxz3MyQ2UhsjnKWU=
Subject key identifier: 2E:1F:52:58:5D:E8:27:C3:58:B9:7E:12:71:40:81:BA:11:C7:52:02
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192DC1F13FA21F23BD935BF5D30465FCFCD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lh9SWF3oJ8NYuX4ScUCBuhHHUgI.roa
Signing time: Wed 30 Oct 2024 06:31:17 +0000
ROA not before: Wed 30 Oct 2024 06:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215242
IP address blocks: 217.60.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 10:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:1f:13:fa:21:f2:3b:d9:35:bf:5d:30:46:5f:cf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 30 06:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e1f52585de827c358b97e12714081ba11c75202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:e0:cb:49:b7:e9:13:a7:f1:b5:cb:33:9e:
a0:54:1a:3d:ef:c0:29:0d:57:6d:11:34:38:82:ec:
a7:13:05:0b:f9:ff:c3:7c:92:ec:82:14:9a:86:4a:
b7:21:34:d6:d8:ff:c4:9b:b4:c0:8a:6c:78:d3:6a:
eb:06:ac:64:e4:d7:cb:6d:bc:39:5a:52:55:ea:fd:
e1:06:1e:43:91:75:af:71:c6:82:bc:16:b9:dd:f6:
83:79:5a:6f:94:b6:cd:1c:88:53:e2:55:99:fe:b7:
4c:48:b8:b3:d4:b8:86:02:14:a2:e7:04:d0:b2:cf:
56:2b:d8:07:74:87:86:08:9a:75:f6:5f:f9:bf:ed:
2b:ca:a0:1a:b7:ca:92:02:9a:b4:18:3b:8b:2d:2f:
f4:52:01:41:f9:8a:fa:e6:75:55:ca:7b:f9:ed:08:
6c:7d:20:fd:15:e7:01:f1:a2:15:67:02:6c:99:22:
af:eb:af:ff:8e:d2:3a:05:4d:0b:ea:66:c6:31:ee:
88:25:03:e9:c9:c3:08:7d:f9:5d:bb:a9:fe:63:f8:
a5:41:d0:3a:a2:ae:95:ab:37:7f:04:25:0f:d6:1b:
7a:4d:05:23:60:d1:6d:23:33:57:87:7f:03:e4:51:
e1:ab:7f:3e:0d:d6:be:9d:cf:d5:ea:cb:8a:2e:a5:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1F:52:58:5D:E8:27:C3:58:B9:7E:12:71:40:81:BA:11:C7:52:02
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lh9SWF3oJ8NYuX4ScUCBuhHHUgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:77:9e:99:d0:b3:d6:95:7d:fd:c1:aa:ba:fb:63:74:ef:28:
7e:33:70:c8:78:68:45:38:c3:37:af:4a:f8:6a:c9:68:ee:21:
f1:6c:dc:ce:95:1b:32:cf:ec:fd:33:19:11:3c:f9:b9:7a:9c:
3f:4d:41:a9:64:42:6f:a4:21:53:d5:c5:b0:9b:36:22:35:60:
d1:fb:05:53:86:88:07:18:78:ef:c1:b2:d1:e8:ec:73:e0:6f:
90:02:eb:24:e7:c6:aa:d3:a0:e9:b5:ae:28:a6:ef:07:16:92:
3f:f4:89:0a:91:59:1b:0f:e2:5d:aa:7b:eb:5d:4e:44:d7:4f:
0f:b4:e1:5e:56:e2:c3:1f:59:05:90:b7:ec:53:2b:a4:cf:45:
3c:5d:33:df:c3:30:1e:60:f2:fe:75:06:b5:ae:54:da:7e:45:
38:4e:d8:dd:f2:52:ad:e0:c5:b8:29:ca:dd:63:27:f7:ae:b6:
11:8c:5a:4a:53:e2:24:64:f7:56:07:90:58:44:8f:ab:3a:39:
a9:97:ff:95:98:72:29:4f:a5:e4:ff:52:52:b8:27:07:69:f7:
64:f4:e2:91:19:f6:48:a1:0a:33:b6:c3:e9:fa:cb:71:1b:f4:
aa:11:27:fd:0a:0d:42:8d:05:87:52:8f:c9:60:de:ab:12:aa:
02:bd:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 12:52:35 2024 by rpki-client on console-ams.rpki-client.org