Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p3ZpHlOVjXusX1MKu74SLW4uW4U.roa
File: p3ZpHlOVjXusX1MKu74SLW4uW4U.roa (raw, json)
Hash identifier: agmGuMUG+pmNdAo4V1x218fF+70AR89cd17/ynUqyzw=
Subject key identifier: A7:76:69:1E:53:95:8D:7B:AC:5F:53:0A:BB:BE:12:2D:6E:2E:5B:85
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01958B8F29BB569059180E179A2033E94A63
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p3ZpHlOVjXusX1MKu74SLW4uW4U.roa
Signing time: Wed 12 Mar 2025 18:12:50 +0000
ROA not before: Wed 12 Mar 2025 18:12:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215211
IP address blocks: 217.60.196.0/23 maxlen: 24
217.60.244.0/23 maxlen: 24
217.60.248.0/24 maxlen: 24
2a14:6e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 16 Mar 2025 07:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:8f:29:bb:56:90:59:18:0e:17:9a:20:33:e9:4a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 12 18:12:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a776691e53958d7bac5f530abbbe122d6e2e5b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:1f:79:e5:8c:a8:5c:9f:bf:b4:42:78:8a:
8a:a6:77:f4:6d:c3:82:4b:48:9e:5a:8f:2a:d0:2d:
82:62:5c:f9:0e:6b:dd:85:8d:9e:98:52:3c:75:f6:
ff:2a:e3:e6:cc:c2:74:6c:46:72:9a:d6:69:be:c6:
72:a1:8b:10:4c:2a:b2:c1:d2:b7:6a:10:9e:0b:9e:
10:1e:af:c2:81:7e:80:f2:3e:cd:1b:12:26:b1:a4:
2e:85:20:38:7e:d6:2e:f4:2f:2f:ae:a8:72:56:d1:
12:d7:5d:26:5c:91:e7:e3:ce:a1:c4:fd:38:0e:2c:
e2:cf:01:85:e6:04:11:2c:0f:25:05:ef:68:91:65:
5c:ae:fa:1c:82:ab:ae:17:8d:26:ee:13:89:3d:54:
ae:bc:d7:51:5d:8c:d1:38:48:af:3f:1e:46:c7:74:
be:be:fb:d5:73:0d:53:bf:2d:a0:9c:80:c1:25:49:
55:41:d4:2b:f3:89:78:4e:36:42:59:bf:ad:ca:56:
9f:0b:a7:1d:5d:38:b8:39:3d:4e:87:82:f3:18:2d:
c6:06:7d:1d:66:08:2c:f8:55:1b:32:b8:a4:d0:fb:
2b:42:d6:36:a4:64:9c:c8:b1:17:91:b4:49:b1:25:
16:bc:61:d8:fa:0c:3a:15:f1:56:09:de:4a:9e:29:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:76:69:1E:53:95:8D:7B:AC:5F:53:0A:BB:BE:12:2D:6E:2E:5B:85
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p3ZpHlOVjXusX1MKu74SLW4uW4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.196.0/23
217.60.244.0/23
217.60.248.0/24
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
6c:f1:57:55:ca:20:6d:fe:a4:31:16:61:43:44:cc:a9:00:34:
a6:08:7d:38:89:dd:24:be:43:e2:fa:24:4f:9c:8f:ac:f3:41:
e1:13:6f:16:22:74:6f:c7:56:ce:17:b5:aa:15:e8:f7:da:4a:
fb:64:cb:b3:50:ba:5a:5a:eb:b2:65:b0:0c:be:3e:b7:a4:06:
e6:76:8d:ad:14:c4:a8:bb:ad:b3:60:c3:4f:f6:b6:4c:ce:ab:
8c:85:13:ca:5c:25:ec:92:ae:01:1a:75:ac:dd:db:79:8d:38:
27:ac:27:a2:50:ae:a9:52:3b:62:ae:1e:5b:f0:88:b9:6b:14:
e5:2f:ea:a7:c2:1a:6a:ee:4e:df:85:18:bf:1e:45:78:c1:6a:
ea:1a:84:f7:c1:5f:78:2f:a4:c9:b4:4a:c9:7a:9f:c1:25:d3:
b2:20:2d:73:27:d1:42:17:9c:05:fb:92:db:59:2e:ed:bc:4d:
a0:17:b5:77:ae:23:f4:69:f3:81:90:84:c4:9f:37:d3:cc:50:
df:e9:ed:89:57:a5:6f:9c:dd:8a:5c:81:50:4f:2c:84:4e:8b:
29:6f:4c:fc:5f:a2:90:c6:3b:cb:67:70:a4:f2:e3:f9:b7:a3:
8c:a1:64:89:2f:ce:45:f4:dd:63:c8:c9:24:c5:40:58:a3:2f:
b4:a8:d6:01
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZWLjym7VpBZGA4XmiAz6UpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzEyMTgxMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzc2NjkxZTUzOTU4ZDdiYWM1ZjUzMGFiYmJlMTIyZDZlMmU1Yjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsofeeWMqFyfv7RCeIqKpnf0bcOC
S0ieWo8q0C2CYlz5DmvdhY2emFI8dfb/KuPmzMJ0bEZymtZpvsZyoYsQTCqywdK3
ahCeC54QHq/CgX6A8j7NGxImsaQuhSA4ftYu9C8vrqhyVtES110mXJHn486hxP04
DizizwGF5gQRLA8lBe9okWVcrvocgquuF40m7hOJPVSuvNdRXYzROEivPx5Gx3S+
vvvVcw1Tvy2gnIDBJUlVQdQr84l4TjZCWb+tylafC6cdXTi4OT1Oh4LzGC3GBn0d
Zggs+FUbMrik0PsrQtY2pGScyLEXkbRJsSUWvGHY+gw6FfFWCd5KnilMMwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFKd2aR5TlY17rF9TCru+Ei1uLluFMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvcDNacEhsT1ZqWHVzWDFNS3U3NFNMVzR1VzRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQB2TzEAwQB
2Tz0AwQA2Tz4MA0EAgACMAcDBQAqFG5AMA0GCSqGSIb3DQEBCwUAA4IBAQBs8VdV
yiBt/qQxFmFDRMypADSmCH04id0kvkPi+iRPnI+s80HhE28WInRvx1bOF7WqFej3
2kr7ZMuzULpaWuuyZbAMvj63pAbmdo2tFMSou62zYMNP9rZMzquMhRPKXCXskq4B
GnWs3dt5jTgnrCeiUK6pUjtirh5b8Ii5axTlL+qnwhpq7k7fhRi/HkV4wWrqGoT3
wV94L6TJtErJep/BJdOyIC1zJ9FCF5wF+5LbWS7tvE2gF7V3riP0afOBkITEnzfT
zFDf6e2JV6VvnN2KXIFQTyyETospb0z8X6KQxjvLZ3Ck8uP5t6OMoWSJL85F9N1j
yMkkxUBYoy+0qNYB
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:48:17 2025 by rpki-client