Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z9GLll0m2WpAMwfl3ctbk35s_wE.roa
File: Z9GLll0m2WpAMwfl3ctbk35s_wE.roa (raw, json)
Hash identifier: M2/eAMWzg1Bb3KcMcHblI8ovMLNZBNam3AQ3kB+1/mY=
Subject key identifier: 67:D1:8B:96:5D:26:D9:6A:40:33:07:E5:DD:CB:5B:93:7E:6C:FF:01
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01907E6753E9CCF5B5E6CB5FFCC466B1D948
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z9GLll0m2WpAMwfl3ctbk35s_wE.roa
Signing time: Thu 04 Jul 2024 15:40:19 +0000
ROA not before: Thu 04 Jul 2024 15:40:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 217.60.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 12:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:67:53:e9:cc:f5:b5:e6:cb:5f:fc:c4:66:b1:d9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 4 15:40:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67d18b965d26d96a403307e5ddcb5b937e6cff01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:69:8b:52:c3:a3:ec:05:4e:c5:9a:2a:ad:
dc:6d:28:4d:4b:67:c3:3f:bc:b4:9e:a9:94:2b:69:
43:44:44:de:2c:9f:a1:7a:88:b6:8c:19:42:cf:92:
35:58:26:a0:cc:94:46:bb:0d:28:d4:31:ab:bc:1b:
64:c4:47:2d:03:46:9a:6a:63:16:91:dd:ab:9a:dd:
91:21:5e:f6:bc:56:6b:8a:e4:af:e3:13:27:3f:54:
95:99:51:bb:8f:bb:63:40:7a:e2:c4:73:e4:46:28:
66:43:f1:35:18:30:10:95:2b:0e:2c:16:6d:8d:cf:
d1:78:1c:4e:8c:2d:dc:52:f2:f6:63:a5:50:03:21:
75:06:fa:f6:3b:a2:f4:54:05:35:0d:d6:2e:1d:1a:
7c:eb:2e:3c:d9:fc:48:3a:7e:50:ab:81:d1:39:b9:
41:37:b2:0c:05:94:93:df:e1:7c:90:fd:48:40:f5:
2a:e7:56:77:a8:77:fc:79:f6:06:d9:3d:96:04:bd:
5e:24:f1:03:59:e1:28:41:48:49:ab:bb:36:d9:e4:
b3:19:dc:f6:ca:55:bd:e0:6c:b4:c9:31:ca:33:85:
be:b1:f0:d7:84:c5:47:2e:e1:51:3d:61:cf:0b:af:
df:0e:39:c0:00:ce:34:88:f5:34:b7:b5:39:8f:63:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D1:8B:96:5D:26:D9:6A:40:33:07:E5:DD:CB:5B:93:7E:6C:FF:01
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z9GLll0m2WpAMwfl3ctbk35s_wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.243.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:58:78:9e:00:12:8f:75:e5:c7:c4:db:22:b9:c2:c9:09:36:
1c:84:e9:f1:6b:21:48:ad:2a:c8:2e:06:0f:56:57:e8:1d:46:
5f:44:ff:4f:76:9e:61:c2:db:c5:95:d1:21:a3:f9:71:2c:61:
31:8a:42:d9:45:c6:6c:f9:2a:ea:7a:bc:42:c0:2c:46:09:a7:
02:60:75:f3:cb:13:23:af:4f:14:a6:8a:aa:f0:4c:14:b2:10:
e4:1b:5f:a2:ab:bf:0a:17:4e:c4:e1:9d:8a:9c:d5:fc:e4:6b:
90:22:c1:28:dd:89:7a:6c:3e:f5:6e:9e:e6:da:6e:e1:a1:a5:
7b:a4:52:e5:a3:d3:c6:8b:70:74:e4:40:1a:5b:de:bd:59:f5:
9f:b3:4f:55:44:2e:d3:46:a8:39:bd:ce:22:4f:5f:ac:d6:6f:
ca:13:81:9b:63:b5:9d:b0:c0:12:80:09:f7:4e:49:a1:c4:24:
4d:93:79:b6:02:65:2b:e3:53:c7:f3:b6:9f:92:c5:e1:9d:60:
ad:83:54:a5:3a:5f:e3:c8:dc:7c:bf:57:68:b6:03:63:db:ea:
9b:57:b0:f4:12:f4:23:7d:f3:bb:a2:d1:08:58:bf:b7:13:c2:
cc:56:39:55:97:13:2a:d2:33:26:70:2b:99:c7:96:1c:52:52:
aa:d7:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 14:18:39 2024 by rpki-client on console-ams.rpki-client.org