Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M3eD3ZFwCE8fkx2rqVAUD010U_Y.roa
File: M3eD3ZFwCE8fkx2rqVAUD010U_Y.roa (raw, json)
Hash identifier: iJZo6dFpYq1RpxHAh/cMazy3fMdGZi4BzxnM1WGgHQk=
Subject key identifier: 33:77:83:DD:91:70:08:4F:1F:93:1D:AB:A9:50:14:0F:4D:74:53:F6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428234004CCB169C0516DAE777FE3FF7A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M3eD3ZFwCE8fkx2rqVAUD010U_Y.roa
Signing time: Thu 02 Jan 2025 17:49:46 +0000
ROA not before: Thu 02 Jan 2025 17:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31549
IP address blocks: 217.60.187.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
217.60.196.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Jan 2025 20:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:40:04:cc:b1:69:c0:51:6d:ae:77:7f:e3:ff:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=337783dd9170084f1f931daba950140f4d7453f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:e2:6b:52:e9:48:1b:3e:e7:71:95:ce:1c:
97:fb:aa:a9:a2:e2:24:56:8a:12:ce:6f:98:1e:aa:
a2:33:f2:00:56:25:8a:3e:32:f6:f5:34:39:7d:3e:
01:c4:a6:67:63:58:d1:99:27:de:0b:91:30:86:d9:
7a:bd:93:ef:8b:7e:6d:d5:0c:de:8f:1c:6e:11:7b:
64:3c:10:5f:6c:a0:d2:86:de:49:3f:2d:6d:ab:f2:
f2:55:96:dd:07:08:51:35:53:06:c5:9b:98:87:3a:
b7:07:6f:46:af:31:0c:26:8f:df:64:bb:70:a8:a1:
43:d2:ef:f4:d1:04:bb:83:12:81:62:83:4f:a0:08:
fc:28:e2:4d:81:92:bc:85:b4:68:f0:4b:d3:01:fb:
a8:ec:e4:48:00:de:7a:61:9c:06:b1:11:04:0e:6e:
27:77:5e:57:b0:71:99:4d:8c:5a:85:76:f7:de:fe:
9e:cf:4a:64:d5:ce:40:28:09:d0:e6:a3:08:4a:13:
b0:d8:42:ad:b6:4a:64:c6:db:5d:39:5f:b8:3f:33:
c0:43:84:c8:58:f5:4e:40:e9:f2:f3:22:fd:b3:7c:
94:2a:94:06:b0:4f:3f:c9:16:d7:9a:bc:fe:da:33:
f0:2d:5e:65:0a:87:30:5c:27:3a:d4:b2:f3:2c:5c:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:77:83:DD:91:70:08:4F:1F:93:1D:AB:A9:50:14:0F:4D:74:53:F6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M3eD3ZFwCE8fkx2rqVAUD010U_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.187.0-217.60.197.255
Signature Algorithm: sha256WithRSAEncryption
a5:51:d9:a8:49:44:f0:f9:42:53:cc:e6:f1:0a:69:75:6e:c8:
27:3a:2f:cd:36:10:e6:a9:ca:72:3a:65:5e:cf:fd:27:15:d6:
37:7e:8b:0f:ed:d2:43:6e:bb:d9:ca:93:33:1a:a8:a2:63:39:
5e:af:5b:1e:7e:73:71:58:a8:ab:60:b0:61:7b:65:e0:a9:84:
27:bc:65:a7:b6:a1:c2:7b:93:ea:56:f2:11:e7:33:20:10:db:
f6:6c:b9:9f:42:f3:96:42:33:5a:21:b7:fd:59:28:9d:db:2c:
17:8c:74:e2:1c:f3:29:55:43:90:5e:a3:91:bf:91:d6:52:04:
b1:d4:7d:5c:72:7c:7b:b4:14:0e:a9:03:e0:f3:d8:2f:ca:40:
90:10:ed:c7:e5:43:70:3b:aa:70:66:17:7a:7d:30:a1:5e:a3:
dd:bf:51:60:ce:2f:53:0c:3b:46:e5:07:6f:56:f9:13:d5:08:
8e:d6:b0:c1:bf:2a:48:a4:fd:e2:89:28:ec:64:63:82:bb:f7:
f7:ce:58:b2:a2:92:01:48:75:4b:80:7f:ea:f2:3b:90:24:4f:
07:7d:f6:d1:38:d7:6d:3e:28:aa:60:c0:91:2b:cc:1c:e0:b8:
79:76:8a:09:15:1a:6a:bf:3c:df:fd:b7:2a:3d:ed:e4:c3:65:
41:8d:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:42 2025 by rpki-client