Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MINjlP0aDCSTOBcH82EN4AjuEqc.roa
File: MINjlP0aDCSTOBcH82EN4AjuEqc.roa (raw, json)
Hash identifier: YtEcMuWtGRQer5bOEVqNA1I9pHMXo/aQwfa2n/ovHAM=
Subject key identifier: 30:83:63:94:FD:1A:0C:24:93:38:17:07:F3:61:0D:E0:08:EE:12:A7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194DB1EF6382C94E74DBDB3F4CD67FC8527
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MINjlP0aDCSTOBcH82EN4AjuEqc.roa
Signing time: Thu 06 Feb 2025 11:57:06 +0000
ROA not before: Thu 06 Feb 2025 11:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215211
IP address blocks: 217.60.0.0/18 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
2a14:6e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 13 Feb 2025 20:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:1e:f6:38:2c:94:e7:4d:bd:b3:f4:cd:67:fc:85:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 6 11:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30836394fd1a0c2493381707f3610de008ee12a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bb:2c:22:f6:66:83:0c:5c:8b:29:cc:3e:ee:
76:73:1e:49:4c:16:0c:56:6d:c6:23:5f:18:ef:cf:
57:47:8a:4d:60:66:c1:bd:14:2b:d5:58:6b:6c:32:
f4:8d:99:10:7b:cb:48:de:a8:b9:80:2d:3b:7d:ea:
96:2b:5f:4a:f5:c2:1a:79:f2:3a:43:e7:2f:90:83:
94:b2:c4:66:a2:a4:64:8a:87:59:27:a8:2c:56:59:
71:51:91:a9:b9:08:7d:80:94:03:f0:98:cb:86:cf:
cd:7c:fa:a0:cd:94:cb:71:72:26:c0:c8:ab:b8:f3:
12:70:1a:87:cf:10:6c:d0:67:ba:1e:60:74:20:6b:
1e:a8:a4:52:d7:dc:f8:ea:70:b7:26:51:b8:d1:b0:
53:fb:97:4a:e5:cb:fa:b6:ab:db:e8:a6:65:6a:c1:
da:dd:ea:51:b2:65:b2:b1:6d:f0:d8:3a:76:41:d7:
8d:07:60:c0:b3:08:e0:1b:85:70:c0:49:1f:df:97:
46:67:16:a0:2f:82:1e:78:12:cd:f6:b1:bd:5c:b2:
3b:88:bd:3f:87:35:06:67:04:9a:d5:cc:32:94:e5:
58:50:24:d4:7f:75:b8:39:ef:54:be:5c:1f:0b:98:
32:f0:03:d2:33:66:41:bf:c8:aa:42:42:1c:00:2b:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:83:63:94:FD:1A:0C:24:93:38:17:07:F3:61:0D:E0:08:EE:12:A7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MINjlP0aDCSTOBcH82EN4AjuEqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.0.0/18
217.60.245.0/24
217.60.248.0/24
217.60.254.0/24
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
48:76:6b:e6:ae:d9:9e:c5:ca:65:90:42:6c:b1:64:74:88:f4:
32:c2:7e:99:3a:82:f7:ff:43:bd:2e:9f:dc:c3:d4:0c:07:76:
80:1c:fb:24:44:ab:a3:b2:79:60:43:c8:de:03:3b:88:31:3f:
6f:75:52:35:69:6d:dc:51:fe:44:93:b5:0e:79:7b:84:29:f1:
e3:cd:30:f9:58:b5:63:d2:07:90:45:2c:4b:72:b3:9a:bf:8f:
83:14:e6:28:18:d4:ad:fa:3a:be:0b:61:80:40:c9:e3:c8:fa:
c7:a9:9f:86:cb:62:ad:8f:a6:0c:87:4a:b6:99:cb:a6:c9:e4:
dc:b0:73:f8:97:87:7e:50:a4:52:c9:3b:a2:11:94:db:c1:db:
29:d1:b0:aa:06:36:0e:2f:9b:f6:20:7f:db:0f:22:5b:00:b4:
b0:c6:09:5e:ee:44:27:62:f6:6a:76:1a:df:54:60:26:12:8e:
21:53:18:f4:62:ea:e2:cf:ad:a3:e7:c1:7d:cf:e9:00:04:3a:
4c:c0:59:46:86:22:de:f1:74:30:36:2a:3c:13:9b:c2:2f:0f:
c0:26:af:8b:19:1f:17:4c:85:06:86:7c:31:7f:3d:4d:6a:e4:
80:62:b1:b9:fb:bf:31:97:0d:ef:a2:d9:ba:f7:1a:9a:ee:75:
52:41:d9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:39 2025 by rpki-client