Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x-3mVVYmSDxtZh7Ux0xBSc2CFYs.roa
File: x-3mVVYmSDxtZh7Ux0xBSc2CFYs.roa (raw, json)
Hash identifier: z3lQ8Ii33zDlQuYNTTbaM3a88hxaBSa8MMqY9q/2fhc=
Subject key identifier: C7:ED:E6:55:56:26:48:3C:6D:66:1E:D4:C7:4C:41:49:CD:82:15:8B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428235BBC70C8DD2D9186EFCFE8BE2101
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x-3mVVYmSDxtZh7Ux0xBSc2CFYs.roa
Signing time: Thu 02 Jan 2025 17:49:53 +0000
ROA not before: Thu 02 Jan 2025 17:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 217.60.242.0/24 maxlen: 24
217.60.244.0/24 maxlen: 24
217.60.247.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 11:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:5b:bc:70:c8:dd:2d:91:86:ef:cf:e8:be:21:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7ede6555626483c6d661ed4c74c4149cd82158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:48:cb:f8:23:a2:d5:ec:1e:de:a3:a1:d6:
0c:4b:7f:ae:1f:43:a1:9f:92:10:c8:be:f5:f2:83:
21:7c:46:95:c5:ee:a8:50:53:b7:0b:b9:8f:2e:ec:
2a:ab:13:07:94:65:0d:20:1e:8b:df:78:41:b7:60:
57:e4:f5:c3:97:04:c9:88:92:57:80:ba:7c:13:a0:
b4:f2:d8:72:5e:52:cc:74:d0:6d:b4:b9:8f:46:7e:
ec:a8:55:10:7f:f7:09:15:11:8b:49:5e:cd:32:17:
c1:9e:6c:09:1b:6b:d5:b0:da:14:4b:cb:ea:c1:65:
ea:a8:e8:60:7a:6d:15:d3:42:82:25:8a:45:15:67:
84:00:a0:d1:7d:fa:86:21:8a:2a:68:40:a8:d3:3e:
66:42:cb:45:ba:7d:23:cc:fc:13:8b:b1:3c:a8:d6:
3e:98:2f:80:9c:85:73:a1:c1:20:ce:4b:22:0b:65:
65:66:e5:47:0d:e7:89:5b:a0:6a:69:05:86:62:f9:
49:ec:4d:ce:e6:4d:c9:6e:ea:a3:e3:da:fd:fd:60:
13:2f:ae:fc:1d:4e:04:cf:f0:63:db:9a:86:1a:0d:
75:9d:74:b7:e2:78:1a:47:82:95:0d:13:6a:0e:85:
b4:57:95:32:98:21:b3:00:16:be:81:17:f3:98:ca:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:ED:E6:55:56:26:48:3C:6D:66:1E:D4:C7:4C:41:49:CD:82:15:8B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x-3mVVYmSDxtZh7Ux0xBSc2CFYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.242.0/24
217.60.244.0/24
217.60.247.0/24
217.60.249.0/24
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
65:aa:be:e4:8e:ae:64:4b:1a:9e:f4:98:24:87:89:6a:48:c3:
b4:ef:d7:08:5a:f5:c5:66:49:98:95:e0:1f:50:a9:67:e0:fe:
e8:a9:22:59:c0:2d:4b:82:eb:f8:49:3f:9b:0e:f0:8c:88:03:
bd:76:6b:f4:a5:f6:bd:8c:c4:5d:7f:95:17:9a:88:5b:ed:bb:
f0:e7:e1:57:2b:54:17:4a:63:2f:50:59:88:31:32:01:f7:69:
16:24:d2:3f:91:01:88:84:9f:db:86:23:e8:18:7a:ee:9f:e7:
85:08:5c:e5:b3:f9:44:53:fc:65:6f:57:02:1a:08:72:57:72:
74:72:3b:4d:11:71:66:20:4b:ff:37:45:45:0d:a8:e3:87:dd:
de:40:24:fb:ad:c0:0d:de:4d:51:48:67:00:58:fe:a9:7a:e0:
fa:b8:dc:5d:37:32:43:48:ba:56:c8:8c:e7:eb:16:66:3d:2b:
95:83:e9:b4:af:c7:af:c0:c1:db:14:79:35:c0:5b:86:f8:96:
14:7b:c6:57:5b:f5:10:af:0b:09:1f:8e:73:38:61:df:54:5f:
7e:9e:95:51:4e:8f:e8:9c:71:47:8f:f0:cb:1b:a2:e3:ab:e6:
59:0e:28:ea:d4:de:4d:81:99:51:d0:e1:c7:af:86:23:96:8f:
c7:2d:a8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:13:04 2025 by rpki-client