Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T42gaPH-B_EZ41LMlxHKrzsJsoE.roa
File: T42gaPH-B_EZ41LMlxHKrzsJsoE.roa (raw, json)
Hash identifier: 2xeItU6foDTXOXtrGih/+3bjsuHJSFf5oLbklKkGWpg=
Subject key identifier: 4F:8D:A0:68:F1:FE:07:F1:19:E3:52:CC:97:11:CA:AF:3B:09:B2:81
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01907E6752D524E602ECA7F6F95DF1A61DFE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T42gaPH-B_EZ41LMlxHKrzsJsoE.roa
Signing time: Thu 04 Jul 2024 15:40:18 +0000
ROA not before: Thu 04 Jul 2024 15:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60631
IP address blocks: 217.60.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 04:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:67:52:d5:24:e6:02:ec:a7:f6:f9:5d:f1:a6:1d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 4 15:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f8da068f1fe07f119e352cc9711caaf3b09b281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:22:41:95:1d:21:3f:ce:50:9c:a8:7c:3a:
17:1d:21:79:37:d4:04:fa:56:e3:21:46:72:b9:d5:
9e:60:85:48:e9:45:dc:07:05:a8:39:64:ba:29:91:
a9:46:f1:38:32:a3:bf:5f:e8:b8:38:14:4f:d9:34:
34:84:c6:5d:ec:7d:8d:1d:9d:73:bb:88:cb:4f:d5:
31:1a:19:d9:44:01:bb:56:b6:ba:41:27:42:57:0b:
b7:b8:19:a1:96:3f:ad:9c:50:3f:d8:7c:49:ae:a2:
d6:ce:5b:c7:a9:82:10:b5:0e:56:3f:93:2c:b3:09:
93:b3:88:03:ec:87:1f:26:90:a4:cf:74:75:94:48:
3a:d0:71:7d:1f:ea:18:fd:06:ac:e1:95:8b:96:9a:
6a:0c:c9:17:c0:bc:0b:d8:95:ad:06:84:9d:c8:20:
e6:86:2e:75:e9:50:a0:50:32:a7:3f:2e:d3:f7:43:
75:eb:a4:f7:19:d7:bb:20:93:55:32:60:4d:29:f9:
09:0f:cf:f6:07:c6:19:5b:b8:ae:77:d4:b4:4a:05:
75:d7:b2:ca:61:9e:38:b6:a9:d2:f3:ac:ee:eb:cf:
78:47:6a:25:79:f7:e3:62:11:bb:c7:51:2d:72:bc:
22:80:37:bc:08:a9:b8:5a:bc:19:9f:4d:16:e9:87:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8D:A0:68:F1:FE:07:F1:19:E3:52:CC:97:11:CA:AF:3B:09:B2:81
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T42gaPH-B_EZ41LMlxHKrzsJsoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:61:47:b9:a3:ff:15:a0:d3:55:66:51:6a:26:72:e2:f5:5b:
0a:ea:d3:61:7e:21:33:a1:98:6f:0a:d2:91:0b:ab:be:f4:9f:
bf:03:1a:71:25:89:ce:08:64:29:27:58:98:4c:50:36:53:0c:
99:f4:11:3b:20:52:45:43:fa:04:99:d2:ec:a7:db:8f:1c:52:
6a:89:2b:70:09:cb:0c:84:48:2e:cf:ba:57:71:67:71:2d:bc:
e6:95:b6:93:90:92:ee:b7:21:33:fc:7f:5a:74:e0:d9:9e:9e:
1e:e5:9b:26:e7:ca:13:35:f3:fe:9a:49:a5:d5:67:cb:62:aa:
b8:d0:0b:ab:80:e5:4b:c5:a2:af:b3:b3:95:c8:93:45:17:e1:
0f:60:4a:79:9c:d0:87:29:7a:83:12:dd:4b:18:a3:52:d6:c7:
d2:17:c1:8f:21:60:0c:3d:e3:f7:0d:00:07:ea:bb:cd:a7:1f:
97:65:9f:5c:59:cc:4f:08:55:56:1a:0b:bc:17:d1:29:b4:32:
32:eb:ea:3d:df:05:c2:1f:7e:a4:92:f7:6d:f3:59:3c:08:13:
5b:6c:d1:ba:03:1e:62:4f:04:44:6d:59:25:73:b5:ea:98:71:
1d:d1:0d:95:cd:98:b6:45:68:6e:ac:ea:41:d1:6f:7b:f7:bf:
b3:f5:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 05:55:20 2024 by rpki-client on console-ams.rpki-client.org