Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z-Yb7WcHe9spkmMAcuQbOkCgNU0.roa
File: Z-Yb7WcHe9spkmMAcuQbOkCgNU0.roa (raw, json)
Hash identifier: WB7feoH8U5TnsoWKTuHtJkOjAJYa3TK2zcWxyRO02Ao=
Subject key identifier: 67:E6:1B:ED:67:07:7B:DB:29:92:63:00:72:E4:1B:3A:40:A0:35:4D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194656DF1EC45E047B165FF0DE98317002F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z-Yb7WcHe9spkmMAcuQbOkCgNU0.roa
Signing time: Tue 14 Jan 2025 15:28:11 +0000
ROA not before: Tue 14 Jan 2025 15:28:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 217.60.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 07:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:6d:f1:ec:45:e0:47:b1:65:ff:0d:e9:83:17:00:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 14 15:28:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67e61bed67077bdb2992630072e41b3a40a0354d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6b:17:f9:7d:a6:2c:6a:3a:dd:39:0e:ea:46:
bf:89:51:db:15:cb:f5:0d:43:b5:d5:f1:a2:81:49:
f2:5a:9b:72:b6:e2:9e:35:eb:da:ce:dc:0d:6c:31:
f8:92:9a:bf:c0:68:39:ae:0b:44:22:ff:05:41:25:
3e:7f:f3:b7:71:0e:c0:94:54:2e:b6:52:e8:99:51:
f9:f2:1d:a4:b3:9e:74:9a:58:91:30:d6:3a:d5:72:
a9:a3:1a:7f:83:b2:bf:66:fa:6d:c2:45:ca:21:e4:
e0:de:38:aa:8f:10:c6:0e:10:5f:5a:ac:d8:c9:ea:
0e:e8:08:36:84:2e:c0:18:74:65:dc:b8:72:3b:ea:
f2:d5:50:5a:8b:84:56:59:e2:89:0d:c4:a8:98:50:
15:d7:3e:6b:57:84:b8:6e:34:6c:70:0c:1b:a6:74:
df:6d:c2:b5:ea:42:ce:b5:45:75:d9:53:e5:db:62:
46:fe:e1:f2:7c:b4:00:7a:95:c9:5f:44:92:7c:c7:
bf:bb:59:e9:8d:b7:de:e3:b2:01:79:e1:48:6e:1d:
d7:ad:2e:28:49:95:f1:43:d0:81:65:d9:b4:bf:f1:
cd:a4:68:ff:2d:9a:40:d2:ca:5f:06:db:85:e2:f8:
2d:79:6f:a9:2f:b4:59:cf:2c:42:70:82:55:46:c8:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E6:1B:ED:67:07:7B:DB:29:92:63:00:72:E4:1B:3A:40:A0:35:4D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z-Yb7WcHe9spkmMAcuQbOkCgNU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.187.0/24
Signature Algorithm: sha256WithRSAEncryption
07:cf:85:0f:2e:fe:bb:e3:cd:29:fb:82:67:0c:a7:e5:e1:d1:
ca:b6:85:89:73:b5:6d:f0:30:dd:88:51:26:46:91:15:f4:0c:
5b:f3:95:a2:ae:bc:0d:e2:5b:01:9d:59:0e:e9:e8:37:78:21:
bb:f0:c5:25:f5:20:f8:30:72:15:67:8b:49:21:1e:5c:20:bd:
a8:89:6f:6e:44:d5:9a:75:4d:fe:71:c6:2c:75:a8:91:1e:cf:
83:d9:d6:db:f4:f8:27:b4:cb:a1:f2:e9:ad:72:22:b9:e6:b2:
b7:b4:5b:22:87:5e:ca:70:3c:61:07:18:a4:35:95:29:b3:3f:
38:e3:a2:e5:71:8a:40:0e:0a:28:1b:79:7b:be:a6:a3:5f:c3:
0f:2f:93:68:ad:27:74:e4:0e:8b:40:d2:7e:dc:4d:44:c4:a0:
a2:e2:fb:7e:28:a8:59:27:83:e5:0d:ad:20:e6:4d:d0:76:05:
09:36:e5:33:09:5e:21:be:1c:dd:c5:48:fb:17:dc:65:7e:3e:
cc:61:5c:de:48:af:4f:d7:f8:7e:0a:18:dd:58:f3:d8:52:a7:
59:78:86:91:04:48:1a:53:34:d6:fc:18:a6:f0:61:28:73:33:
ca:64:3b:fd:c2:36:a8:84:a0:b8:e3:d7:9e:de:1d:bd:fd:7f:
b1:91:3a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:47:10 2025 by rpki-client