Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c8vXDa0R3CPg0EDm4MORh6bEPqQ.roa
File: c8vXDa0R3CPg0EDm4MORh6bEPqQ.roa (raw, json)
Hash identifier: dvTw1hSv1/XabqohaVQ3KOgi/Mda2ANskRuikMMat9Y=
Subject key identifier: 73:CB:D7:0D:AD:11:DC:23:E0:D0:40:E6:E0:C3:91:87:A6:C4:3E:A4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193248B50FFEFBFA84E1945827A9D095710
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c8vXDa0R3CPg0EDm4MORh6bEPqQ.roa
Signing time: Wed 13 Nov 2024 08:02:10 +0000
ROA not before: Wed 13 Nov 2024 08:02:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51431
IP address blocks: 217.60.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 17:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:8b:50:ff:ef:bf:a8:4e:19:45:82:7a:9d:09:57:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 13 08:02:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73cbd70dad11dc23e0d040e6e0c39187a6c43ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:85:c0:c5:a6:57:19:9f:78:4e:7c:e8:94:
64:19:2e:73:e3:fc:c8:3a:75:62:c2:bd:74:08:d0:
36:a0:f8:19:fa:6b:08:45:5d:c3:6a:b2:c0:54:b3:
b1:55:66:4c:d3:90:fd:ed:88:12:c1:71:5f:d5:4f:
98:68:69:d3:09:18:b0:51:9f:d6:b6:6a:a9:84:6c:
22:27:9b:81:ab:81:05:e9:fc:f4:eb:95:1a:5a:39:
7e:be:05:2a:b8:6f:52:ed:e3:79:0e:1d:2a:e1:a1:
97:be:45:a9:b3:10:e2:ec:89:8d:89:60:4d:20:f9:
99:c7:72:74:37:05:4a:49:fc:c7:8b:a6:59:86:a8:
6a:9a:cf:d9:ec:19:e2:9d:a3:66:a3:57:dc:dd:65:
87:ec:0c:79:8c:c4:a8:40:bc:df:d9:38:d3:58:40:
36:87:dc:ec:13:d3:ff:8c:23:39:b2:fa:eb:c5:dc:
44:90:39:ae:a7:5d:6e:09:18:2a:a2:5d:d5:94:2d:
ea:1c:d7:ff:5c:34:5b:98:1e:49:39:ee:8a:34:5d:
45:f0:a7:d2:33:c4:d6:37:44:e6:34:40:ba:d2:80:
a9:a2:ae:ce:a1:9a:8c:98:d1:5a:86:54:b8:61:c6:
b0:9d:b1:10:63:18:e6:26:b3:0b:34:a7:5e:0c:41:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CB:D7:0D:AD:11:DC:23:E0:D0:40:E6:E0:C3:91:87:A6:C4:3E:A4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c8vXDa0R3CPg0EDm4MORh6bEPqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:88:16:88:2b:3c:67:20:86:b8:31:09:0f:e0:b8:56:24:01:
ba:fa:02:a9:0a:2b:3f:d1:d4:18:36:63:a6:aa:f4:36:ec:90:
2b:86:63:ee:4e:4e:e8:fd:18:47:97:85:5e:8b:28:57:a0:e4:
6f:24:67:72:2c:47:8f:35:35:40:96:59:52:96:b4:42:da:1e:
36:6c:72:1c:55:98:c4:bf:ed:70:8d:77:f3:a1:e6:7c:dd:1f:
f6:f0:c5:90:75:41:de:5e:0a:b8:b2:1e:80:ec:cb:e2:11:fa:
29:1c:99:da:df:c7:5b:05:1e:39:f1:f5:07:98:9b:a7:3c:6f:
7a:17:d8:ea:c8:ea:82:eb:ee:51:d2:d7:ee:1f:f5:3c:a9:81:
2b:6c:32:04:11:6a:86:17:29:4e:92:54:a2:8c:e8:4b:07:c7:
b7:6e:42:95:be:53:a2:f1:05:cb:94:a7:60:47:4c:08:5c:5c:
18:d3:2d:42:3a:88:a1:e0:da:52:af:eb:b5:f5:dc:8b:3b:3c:
29:a1:a0:66:0c:9a:87:d8:3d:2c:30:df:6b:4e:f6:09:16:2f:
e2:18:8e:eb:e0:4b:02:7a:d8:ae:cf:e1:ff:29:f5:8c:ff:64:
a2:a8:03:33:6b:50:38:fa:91:a5:4c:26:12:c2:39:e9:95:c8:
55:a2:07:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 21:55:55 2024 by rpki-client on console-ams.rpki-client.org