Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n1LMEKJEq8yzZb2P-JkUTjn409A.roa
File: n1LMEKJEq8yzZb2P-JkUTjn409A.roa (raw, json)
Hash identifier: Whb1UwpCZDZ4iDD4dEthgPl929AfVl8YIvy2sYk4uWQ=
Subject key identifier: 9F:52:CC:10:A2:44:AB:CC:B3:65:BD:8F:F8:99:14:4E:39:F8:D3:D0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192D9331795955AE121D243C36A25C82A84
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n1LMEKJEq8yzZb2P-JkUTjn409A.roa
Signing time: Tue 29 Oct 2024 16:54:17 +0000
ROA not before: Tue 29 Oct 2024 16:54:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 217.60.237.0/24 maxlen: 24
217.60.238.0/24 maxlen: 24
217.60.243.0/24 maxlen: 24
217.60.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d9:33:17:95:95:5a:e1:21:d2:43:c3:6a:25:c8:2a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 29 16:54:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f52cc10a244abccb365bd8ff899144e39f8d3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:a7:6f:2c:e8:41:91:94:2a:45:7c:e5:e1:
ca:17:68:44:1f:08:50:7c:bb:73:8b:eb:16:e7:07:
40:34:3e:0d:a1:86:3f:d2:5e:88:f4:48:9a:81:b4:
97:6e:e4:96:4f:c4:5e:d9:4f:a8:e4:1d:7a:bb:0f:
30:2c:4b:c1:24:08:0d:6c:8c:34:99:d1:f9:21:2d:
9d:65:d3:b7:10:8b:5b:23:b3:48:f3:3e:5f:3c:af:
dc:00:f2:69:aa:b5:63:ec:d4:0b:b6:ca:9e:0a:c9:
02:90:e4:37:fb:5f:6f:96:8a:1b:52:32:20:ae:39:
6a:6c:48:29:cc:66:b3:77:3c:03:81:c4:3c:79:cf:
c9:14:77:6e:46:d4:4a:de:00:2e:c6:80:cd:95:59:
53:0a:4a:e3:91:e2:45:57:8c:4d:2a:c6:b4:f5:a1:
a1:43:5c:62:05:11:7b:b0:c0:e2:7f:fe:ae:2f:9a:
c6:f9:53:6e:5b:4d:4c:9b:33:4a:ba:14:a7:82:83:
e1:5a:76:c8:15:58:39:e3:9e:d0:2b:9f:bb:4d:16:
d5:ee:16:c8:55:21:56:92:4a:a7:56:d0:ad:b7:12:
49:c7:c8:54:20:f9:8e:16:15:82:f0:0d:80:04:c2:
a4:45:3c:1e:b1:5f:8b:8d:f2:87:a7:d2:f9:c5:0f:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:52:CC:10:A2:44:AB:CC:B3:65:BD:8F:F8:99:14:4E:39:F8:D3:D0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/n1LMEKJEq8yzZb2P-JkUTjn409A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.237.0-217.60.238.255
217.60.243.0/24
217.60.246.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:99:3c:b6:51:31:88:b3:71:86:21:e8:02:98:9a:03:36:72:
eb:94:03:43:44:3d:26:b4:0b:a5:2e:5b:29:42:b9:44:e4:11:
7d:4b:e4:a1:b5:2a:db:a6:da:c2:77:f7:1b:39:2f:cc:88:66:
1e:1a:22:55:01:b0:0e:5e:0b:f1:97:3e:da:bb:6c:70:12:f7:
73:cf:31:86:5e:27:40:41:a9:c4:73:47:d2:db:b3:5d:7c:70:
6c:d4:3b:7f:d8:a1:d0:a7:e6:c0:b5:9a:5a:13:78:17:5d:84:
aa:e2:cb:2f:f6:74:f5:67:0a:d9:21:b5:6c:03:3e:ea:da:43:
b3:ca:1e:43:74:2b:2b:a6:68:4a:23:c4:0b:20:4b:84:60:de:
8c:7a:cf:af:ee:7e:c2:59:4e:7c:7a:b0:9d:68:0b:0b:f0:2f:
e2:ad:6a:56:cc:7c:cf:88:8b:95:b0:21:10:58:51:84:42:eb:
46:64:db:f6:28:6e:4b:24:20:0d:f6:c8:c0:1e:6c:12:cf:77:
50:81:8c:9f:5e:7a:de:20:9d:3f:0f:80:8b:0c:1a:ec:02:01:
16:1a:a2:96:05:d6:af:05:40:2c:d8:e6:e9:50:96:ea:eb:71:
2e:fd:65:a5:a1:ea:3f:4f:9e:1d:c1:9c:80:67:81:63:f6:fe:
11:6d:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 10:57:09 2024 by rpki-client on console-fra.rpki-client.org