Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sksUEnugwKZb6_kIlhc-G3YdGnY.roa
File: sksUEnugwKZb6_kIlhc-G3YdGnY.roa (raw, json)
Hash identifier: SbUCmYQx+aWMyKKyscrJbUd3Db/1jHlK3BhT0uBbD0s=
Subject key identifier: B2:4B:14:12:7B:A0:C0:A6:5B:EB:F9:08:96:17:3E:1B:76:1D:1A:76
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193F80BD50EC01801CB64A5C40DF0344216
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sksUEnugwKZb6_kIlhc-G3YdGnY.roa
Signing time: Tue 24 Dec 2024 09:42:25 +0000
ROA not before: Tue 24 Dec 2024 09:42:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 217.60.242.0/24 maxlen: 24
217.60.244.0/24 maxlen: 24
217.60.247.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:0b:d5:0e:c0:18:01:cb:64:a5:c4:0d:f0:34:42:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 24 09:42:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b24b14127ba0c0a65bebf90896173e1b761d1a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:5a:5f:4d:64:f7:13:3b:bc:85:fb:59:ab:
c4:50:01:e1:fb:2c:09:ce:a7:fd:42:53:5c:4a:b2:
df:38:70:8a:b8:9f:4e:1e:39:f4:96:46:f7:3f:8d:
10:60:a6:c2:e6:e8:b0:0d:70:a5:2d:5a:06:c6:b3:
2d:b1:10:77:cd:09:fc:86:15:b0:c6:61:28:d6:53:
8f:8a:04:b7:cc:c1:c4:0a:35:d7:20:7b:73:1f:94:
50:e5:31:3c:83:63:8b:78:e3:0b:44:bf:32:20:f7:
43:78:9b:48:9e:4f:50:b3:f9:a8:e9:32:2e:4a:62:
80:26:1c:32:53:98:56:ef:2e:ae:25:04:b4:4a:82:
41:4a:56:de:e2:5d:3e:00:93:46:78:81:da:b9:23:
6b:94:ed:36:02:b3:f0:58:e6:c5:b9:8c:c6:20:33:
7f:6f:21:bd:17:d4:c6:4a:e6:87:71:b9:55:c0:3e:
9f:d6:2e:0a:59:b5:2a:d0:d2:ac:15:8b:c8:bd:45:
6d:04:f2:7e:16:9d:3e:3f:5b:be:e8:4e:cc:9d:df:
dd:ca:5d:b1:5b:7a:13:ee:0c:4c:79:29:3e:a5:a3:
29:b1:9f:e1:09:db:c3:51:4f:1c:78:e5:aa:3c:56:
f2:47:9e:b7:02:4a:29:74:66:69:e0:d6:4b:02:c0:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4B:14:12:7B:A0:C0:A6:5B:EB:F9:08:96:17:3E:1B:76:1D:1A:76
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sksUEnugwKZb6_kIlhc-G3YdGnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.242.0/24
217.60.244.0/24
217.60.247.0/24
217.60.249.0/24
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6c:5c:3a:e9:e7:5c:71:7d:39:95:be:60:72:32:bc:04:07:
a7:82:f7:4d:25:b5:46:4d:53:c4:90:61:a6:6c:6f:9f:40:b5:
d4:08:36:0b:11:0f:a6:5d:10:99:93:8b:08:dc:01:c8:17:21:
55:a1:e9:ef:4b:5d:3d:65:b9:a3:7f:a0:ce:c6:b4:09:da:5d:
0d:d2:86:8f:b0:3b:de:dd:2f:af:b8:89:55:5b:97:54:7c:12:
a6:98:00:8a:23:c9:2b:b7:d9:8b:8c:c2:c5:04:b6:aa:eb:ae:
5f:ad:18:04:f2:b7:9e:93:26:c5:9a:c5:4a:46:15:19:9f:d3:
2e:0e:55:25:36:e2:c9:d6:29:47:48:4b:b2:1c:20:3e:de:52:
80:03:7c:61:34:5d:af:5e:3e:59:c3:f7:d1:e4:20:89:77:bf:
38:51:69:6f:b1:38:df:ad:b7:7e:78:29:31:f5:b3:ce:91:45:
03:0a:63:42:17:8d:92:07:82:d4:ec:4b:b8:cb:1e:14:2b:57:
24:99:16:97:31:b0:ee:53:e6:64:d4:7e:6a:8f:32:62:75:e2:
a9:e1:db:19:28:b4:a7:77:4d:61:27:e3:d9:96:0d:14:d3:f9:
3c:f1:47:a0:77:4f:ae:08:ca:3b:4d:d1:9f:c2:1b:ff:a8:f3:
e5:4c:97:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:48:42 2025 by rpki-client