Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rl-pHMqtHW-bMOg_ZVBKxhTa4YY.roa
File: rl-pHMqtHW-bMOg_ZVBKxhTa4YY.roa (raw, json)
Hash identifier: //2XjK8i1VMBaWVX/OhQCx47s/i2fdwVEssFgYovEIk=
Subject key identifier: AE:5F:A9:1C:CA:AD:1D:6F:9B:30:E8:3F:65:50:4A:C6:14:DA:E1:86
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192BA44B1E77D6A941ED4699089753C2137
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rl-pHMqtHW-bMOg_ZVBKxhTa4YY.roa
Signing time: Wed 23 Oct 2024 16:45:17 +0000
ROA not before: Wed 23 Oct 2024 16:45:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 217.60.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 16:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:44:b1:e7:7d:6a:94:1e:d4:69:90:89:75:3c:21:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 23 16:45:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae5fa91ccaad1d6f9b30e83f65504ac614dae186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:cf:e7:a8:82:81:7c:cc:18:16:8b:05:ae:
53:9f:8e:d5:5d:11:2e:69:c8:e9:94:c9:fd:77:13:
08:b8:31:f1:4e:4e:d9:4e:be:28:30:0a:10:1b:ee:
8b:f8:71:8a:a4:ac:29:bd:fd:e2:19:9d:b5:e2:16:
50:c5:6d:ae:51:0c:92:7a:62:28:5e:94:4a:c0:21:
91:1e:20:d2:02:71:6e:9c:fb:d7:40:d5:03:81:b3:
b9:c3:94:17:12:7c:7e:2f:1d:41:d3:c9:18:23:e4:
62:ac:45:3c:21:0c:3b:56:81:97:88:33:5f:49:7a:
c0:1d:8a:0c:ff:e6:3b:3d:e0:9f:f4:17:40:cd:9c:
c1:f3:e3:6c:fe:ca:95:20:26:73:1a:b7:07:76:92:
46:4a:0a:d2:a9:01:cc:20:59:46:e2:0b:ed:d0:c4:
24:68:f7:03:72:45:e5:63:c2:9c:a3:c3:ee:be:74:
8d:b2:77:84:16:0d:2a:4b:fa:5d:c7:bf:c6:5b:4d:
e4:24:57:81:a0:a1:93:78:c1:c4:57:31:b9:d3:1f:
58:40:f9:14:00:bd:6c:fd:08:6e:26:ed:c0:4b:17:
5d:86:d8:e3:3d:4a:b3:67:c4:85:39:29:08:00:67:
1e:7d:66:62:5c:da:a8:cd:56:02:73:11:f1:f6:d4:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5F:A9:1C:CA:AD:1D:6F:9B:30:E8:3F:65:50:4A:C6:14:DA:E1:86
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rl-pHMqtHW-bMOg_ZVBKxhTa4YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.246.0/24
Signature Algorithm: sha256WithRSAEncryption
57:94:cd:29:46:ff:60:d7:2f:6e:c5:db:cd:c3:17:1e:2b:87:
6f:b3:ec:79:0e:48:bc:51:f6:fe:3a:8f:ee:31:2d:08:02:45:
ed:9b:2e:8f:1d:7f:ed:ba:26:e8:d7:34:93:17:0b:a7:d6:31:
50:92:ad:01:80:79:00:db:6d:39:6c:a5:44:36:17:70:49:a2:
98:dc:eb:bc:f2:bb:b6:04:65:49:01:57:9d:b9:b4:e1:b4:87:
e5:fc:a7:d3:a8:6a:50:a4:07:b3:da:73:a6:8c:85:44:ce:a2:
e9:7a:e8:30:98:45:da:cd:53:95:49:5c:b5:18:56:50:ed:99:
75:47:80:13:d3:78:05:6c:40:a8:8f:db:80:25:83:1a:4e:18:
4e:fb:b9:fa:6a:e1:bd:12:f5:c4:eb:fb:7c:72:ef:33:de:f5:
67:ca:80:34:8e:2e:4b:26:8f:7b:ae:31:c9:8b:c9:8b:a0:48:
2a:a4:f4:73:70:68:0f:37:24:8e:3e:46:89:c8:dd:04:d2:6f:
d1:0c:7d:e5:63:ea:b8:e6:a9:ee:99:7a:57:9d:ed:38:4a:e5:
dd:fa:71:8a:d9:b6:37:f6:c3:78:24:81:50:40:7e:75:b5:1c:
3f:57:dd:34:91:d5:2a:80:71:18:6f:a6:a6:77:7a:1d:50:ab:
fa:e6:2d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 19:20:08 2024 by rpki-client on console-fra.rpki-client.org