Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RoJM8J2S2zjC9fW3pj3N-qgFkl4.roa
File: RoJM8J2S2zjC9fW3pj3N-qgFkl4.roa (raw, json)
Hash identifier: BTMvkEzUQPIipXj1uvk8cZqi2KpzOcEJzDKB1GihPpE=
Subject key identifier: 46:82:4C:F0:9D:92:DB:38:C2:F5:F5:B7:A6:3D:CD:FA:A8:05:92:5E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019524C286FC52D07FCAE557A7A4EA6A8C68
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RoJM8J2S2zjC9fW3pj3N-qgFkl4.roa
Signing time: Thu 20 Feb 2025 19:08:02 +0000
ROA not before: Thu 20 Feb 2025 19:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215211
IP address blocks: 217.60.0.0/18 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
2a14:6e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 25 Feb 2025 20:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:c2:86:fc:52:d0:7f:ca:e5:57:a7:a4:ea:6a:8c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 20 19:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46824cf09d92db38c2f5f5b7a63dcdfaa805925e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:61:77:75:df:30:90:90:be:fb:b0:b6:43:
82:1e:59:c0:92:45:ce:35:05:87:bf:b5:c5:52:da:
73:d1:d7:00:29:62:f8:bc:a0:0b:e0:b9:49:f3:cd:
1d:52:5b:66:70:8d:f8:be:f2:5d:2f:a4:91:26:f7:
37:74:ed:0f:69:fa:81:05:45:93:c7:92:b1:f9:74:
a9:03:26:d8:81:e2:ea:ef:68:f2:20:10:0b:b9:cc:
2b:77:1b:8c:bc:49:44:d2:49:f5:44:14:80:78:47:
12:84:d2:a1:8e:c8:0e:bc:38:43:9b:a6:af:d8:46:
55:be:26:dd:d3:16:52:81:21:94:9f:1a:46:f4:65:
c2:85:8d:20:90:0d:e6:de:21:e5:9a:b5:eb:f8:bf:
98:e9:14:95:e5:11:37:c9:76:8a:5c:66:91:a1:d0:
e0:13:ab:7c:d6:51:40:60:c9:90:61:12:48:6c:72:
fb:6b:6e:d1:e7:8c:93:2a:13:2d:1d:72:00:9c:48:
d4:6f:44:49:cc:f6:60:16:c6:50:e7:fd:e9:75:11:
77:80:d5:d9:1a:c5:a8:5c:ca:b0:a0:9c:c8:ed:a7:
55:a7:da:ac:c2:60:28:62:58:a2:bf:d8:1b:10:47:
53:e9:18:09:4b:2c:71:ad:57:ae:a4:a8:2d:ec:fe:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:82:4C:F0:9D:92:DB:38:C2:F5:F5:B7:A6:3D:CD:FA:A8:05:92:5E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RoJM8J2S2zjC9fW3pj3N-qgFkl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.0.0/18
217.60.188.0/22
217.60.245.0/24
217.60.248.0/24
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
0a:5f:b2:37:06:1f:51:48:a1:86:2a:05:52:78:15:14:cf:bd:
49:f3:aa:e5:38:6e:ae:0e:40:7d:f9:52:80:8c:6b:c9:71:f8:
b8:18:47:a1:86:70:cc:98:70:88:d0:ea:65:2e:83:f8:5b:de:
02:35:03:c0:b2:b4:58:7f:83:c0:38:03:46:f7:9d:17:d9:0b:
0e:85:53:fc:14:50:07:54:62:e0:57:da:e9:38:dd:13:20:9a:
8a:a8:91:8a:12:9c:e4:29:1e:73:a7:9d:21:8b:b2:61:f4:b8:
0a:0c:00:05:58:ad:82:61:f1:4e:7c:6a:8d:34:09:c3:f8:5f:
99:ad:77:2c:f6:0c:93:14:78:13:2b:9b:68:00:61:a0:81:47:
09:64:db:f9:65:65:81:02:24:30:d7:f1:77:55:95:03:6d:bf:
47:7b:25:2b:4e:95:a5:29:12:ce:b3:07:e5:39:4d:31:24:2b:
b0:ff:a9:db:4c:3c:d5:b8:d1:08:8a:64:8c:b2:e8:9a:a9:92:
23:4c:d4:ad:ba:a8:35:c3:fb:25:b0:a1:cf:d2:ad:0a:76:f0:
3f:b7:72:6c:12:71:a8:0f:79:4c:fa:e4:e9:ef:53:ff:83:b5:
47:32:3a:4e:29:a6:d5:da:28:1e:24:5c:c0:34:be:90:75:98:
f4:31:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:05:10 2025 by rpki-client