Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rgIZESTNbXFaLiidr3vAbX6RJVw.roa
File: rgIZESTNbXFaLiidr3vAbX6RJVw.roa (raw, json)
Hash identifier: RLfwNfDGwfut8ZgtIEnl0xA7B1VpUq6+Es2lqUhCCQw=
Subject key identifier: AE:02:19:11:24:CD:6D:71:5A:2E:28:9D:AF:7B:C0:6D:7E:91:25:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194930D4118EC05F46DA374A78EDDE9DA35
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rgIZESTNbXFaLiidr3vAbX6RJVw.roa
Signing time: Thu 23 Jan 2025 12:05:06 +0000
ROA not before: Thu 23 Jan 2025 12:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213535
IP address blocks: 217.60.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 11:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:0d:41:18:ec:05:f4:6d:a3:74:a7:8e:dd:e9:da:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 23 12:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae02191124cd6d715a2e289daf7bc06d7e91255c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:a2:d8:e8:af:6b:c0:4c:c5:89:2b:e6:30:
6f:2b:d2:94:01:0c:10:a8:4b:be:d0:5e:ee:a6:7d:
c5:3c:3c:da:e9:e1:c8:6f:8d:d2:51:6e:c3:e5:ae:
f0:c2:02:e1:1b:29:81:33:04:80:73:5c:b1:c9:00:
95:e1:42:f2:8f:50:80:ce:89:39:89:25:4a:53:a0:
42:45:ca:b1:11:32:5e:da:63:8e:ee:07:f0:b9:e8:
7e:ed:3c:79:26:88:4f:6a:85:59:67:d8:10:c2:6c:
4e:73:83:7e:6b:8f:a9:ca:66:bf:56:98:c0:74:87:
ce:57:5b:fc:06:12:79:ad:da:e2:a4:3a:65:19:cc:
72:6c:82:8a:fc:28:36:cb:48:68:6b:20:f1:5d:f7:
44:d9:de:36:4b:2b:9b:a7:af:7a:c1:33:c3:4f:fa:
74:c5:6f:44:d6:0e:ba:2f:3f:35:61:77:53:a5:33:
03:32:8a:3c:9c:f4:fc:2e:4a:67:b1:c0:8e:7a:f1:
ed:ea:44:91:2f:d4:f4:f7:f7:0a:64:97:ab:32:0a:
df:14:e4:d6:62:2a:e9:1b:b0:9d:98:5d:58:c5:9b:
a8:cf:53:0b:89:3b:86:c9:ad:0a:01:58:45:bd:92:
fd:93:c5:6e:16:09:20:64:dc:0a:41:1e:30:62:f4:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:02:19:11:24:CD:6D:71:5A:2E:28:9D:AF:7B:C0:6D:7E:91:25:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rgIZESTNbXFaLiidr3vAbX6RJVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ec:8b:48:f8:95:2e:de:b4:e6:8e:e2:70:5a:21:cc:6b:0b:
f3:a0:03:43:b5:fc:b6:d3:61:d9:51:46:7f:cc:54:9d:63:02:
fe:60:77:55:9d:bf:26:21:4c:36:07:56:97:3b:ef:15:4f:df:
1f:96:e6:3b:b5:c0:0a:0d:ec:ef:3f:1f:0b:ad:61:65:40:1c:
31:b8:6f:47:ec:16:5e:34:8e:01:c8:d6:98:e3:ca:43:e3:fd:
c0:57:fb:3a:61:42:44:ee:59:62:7a:9d:f8:a1:6c:f8:67:bf:
b1:2b:3f:3a:8b:d9:41:69:f3:b6:d3:28:a7:b4:71:3a:f2:2e:
b3:52:f4:ff:8c:c3:cb:29:f5:03:7a:f3:66:44:ef:9d:0e:75:
0f:c3:6a:27:a6:57:a0:77:3a:9f:ea:04:96:49:bd:ff:12:1b:
15:b2:6d:74:7c:a4:88:76:75:8b:46:32:3e:e2:ed:bc:c6:cc:
fe:53:50:92:71:5f:cf:ff:8f:05:60:80:5e:d2:c9:1e:e4:69:
85:80:80:4e:bf:ed:94:07:35:8c:0c:c6:d8:da:da:fe:0c:98:
24:af:27:33:1d:9f:68:00:18:4b:a5:0d:80:90:58:f1:b4:31:
96:36:b7:fd:6f:96:43:6f:8d:5b:e0:ee:81:db:1f:ff:f5:56:
be:ae:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:52 2025 by rpki-client