Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SOQa7iEGvNcRiE_XZiXJiQTnu3c.roa
File: SOQa7iEGvNcRiE_XZiXJiQTnu3c.roa (raw, json)
Hash identifier: hKV2NNinxOwsUTeQ2bf7QAGD9m9VGtoemsZf41nbcms=
Subject key identifier: 48:E4:1A:EE:21:06:BC:D7:11:88:4F:D7:66:25:C9:89:04:E7:BB:77
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01907E67553C696055FC6D417DE6ECBCCE8E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SOQa7iEGvNcRiE_XZiXJiQTnu3c.roa
Signing time: Thu 04 Jul 2024 15:40:19 +0000
ROA not before: Thu 04 Jul 2024 15:40:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214949
IP address blocks: 217.60.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:67:55:3c:69:60:55:fc:6d:41:7d:e6:ec:bc:ce:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 4 15:40:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48e41aee2106bcd711884fd76625c98904e7bb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:f5:9b:73:c2:99:7d:fe:27:ba:8e:d1:c7:
dd:02:0b:8e:ba:e2:61:84:6c:63:9d:8e:c9:69:dd:
fd:01:96:02:da:02:5d:50:56:27:8b:22:52:90:73:
f5:e9:c6:02:f7:61:05:03:0e:21:ad:bf:0d:bf:90:
b8:6f:6a:10:0a:4c:73:6e:41:22:bd:a7:61:97:11:
8b:77:2a:90:6e:65:6b:eb:2f:23:e8:5f:29:80:b6:
34:c9:ca:29:25:74:03:e3:84:2a:04:00:66:61:a5:
3b:73:1c:6a:12:72:13:58:c4:02:40:b1:d7:71:72:
c5:9b:2f:dd:6f:6b:2d:db:ec:db:6e:48:cf:e6:4e:
ac:e0:89:ff:58:48:9e:80:bf:16:b0:88:68:d8:a6:
a7:15:e8:61:e2:ee:58:4a:e3:c3:b6:20:ce:69:a0:
eb:bc:56:c3:6d:81:26:eb:99:a2:57:03:a3:7c:cc:
48:7b:79:04:95:b6:77:03:43:cf:42:11:e3:32:b2:
63:3c:73:71:ab:60:e2:7a:8a:30:1e:60:ec:c8:5d:
5b:58:b5:8d:26:fd:89:1c:53:23:16:ad:14:2f:cc:
99:e9:74:08:51:a9:81:b8:f4:c8:6b:29:5e:25:95:
9d:e1:6a:52:1f:41:25:b5:c7:fe:fc:4e:d3:f6:79:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E4:1A:EE:21:06:BC:D7:11:88:4F:D7:66:25:C9:89:04:E7:BB:77
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SOQa7iEGvNcRiE_XZiXJiQTnu3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.240.0/24
Signature Algorithm: sha256WithRSAEncryption
30:92:1e:59:87:81:3e:01:20:1f:f9:fd:c8:fe:e1:e6:c0:ef:
bd:8d:88:f7:a5:a4:09:a7:7c:a2:85:da:98:1d:6a:d7:da:de:
27:a6:da:13:c1:09:91:ab:15:76:a9:ef:e0:36:ed:91:5b:fb:
60:42:02:94:90:8d:c9:31:66:08:58:eb:35:f2:1f:5d:76:c5:
c0:65:1a:2b:5c:a3:99:28:a3:74:eb:38:a3:44:9b:85:ad:27:
33:c2:c6:de:5a:c0:01:f0:06:d4:8d:07:51:ed:f9:33:ef:ff:
75:0c:01:41:96:da:f6:ad:0e:f0:14:c0:e7:f1:9a:22:8a:72:
dd:88:da:9b:2e:ed:c7:20:7f:6e:d8:11:46:c2:8e:91:e6:cd:
c5:61:45:63:15:bb:7a:47:43:6f:bd:69:be:8c:cf:21:2c:f2:
fb:48:5d:d6:12:e4:d1:8f:85:70:13:60:ad:fa:dd:bb:53:b7:
97:ba:12:63:91:a1:e1:7b:00:65:64:c9:8e:e7:04:1d:51:61:
dc:91:6e:fc:3f:ea:06:93:48:46:79:09:3d:9e:9b:ec:49:09:
38:b1:31:07:87:f7:a6:d2:78:98:85:37:97:8f:49:d5:b9:d7:
0c:03:e0:e3:17:1f:dc:51:65:d6:6a:c4:d0:af:f5:1e:ab:5b:
d4:9f:6c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:03 2025 by rpki-client