Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zXqf6b4MywJQU1Qn-zjVsmu6X04.roa
File: zXqf6b4MywJQU1Qn-zjVsmu6X04.roa (raw, json)
Hash identifier: +tZ61kTiuKD9xnZRl3RfDvn0/qLz0+KE1GzDkmZaqG4=
Subject key identifier: CD:7A:9F:E9:BE:0C:CB:02:50:53:54:27:FB:38:D5:B2:6B:BA:5F:4E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019315181AF91F32960C9A39F1B3F5293080
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zXqf6b4MywJQU1Qn-zjVsmu6X04.roa
Signing time: Sun 10 Nov 2024 08:02:01 +0000
ROA not before: Sun 10 Nov 2024 08:02:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215242
IP address blocks: 217.60.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 08:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:15:18:1a:f9:1f:32:96:0c:9a:39:f1:b3:f5:29:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 10 08:02:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd7a9fe9be0ccb0250535427fb38d5b26bba5f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:ba:1d:e9:17:76:3d:40:ed:e5:72:0b:66:
57:7e:f5:0d:67:81:e4:b8:1f:d3:56:9b:0a:21:74:
b4:9a:28:bf:dc:6d:30:97:92:b1:1c:ff:2e:87:47:
85:bb:61:10:a2:6e:85:dc:23:15:76:63:14:b0:87:
3a:b1:ee:67:95:fa:30:c4:ad:8c:e4:ab:8f:e5:b4:
a5:49:63:70:40:ed:d0:62:4d:a1:01:e2:be:97:f9:
3f:ed:43:b1:64:b6:7c:d4:c7:3b:e3:3f:0f:b6:0d:
9d:9c:94:ac:10:cf:5b:a7:6d:39:45:cc:26:a2:32:
13:61:42:9e:00:6b:48:18:ea:ae:65:ed:10:25:d3:
f0:b5:fc:e1:e8:e0:ab:86:e6:8c:b9:e6:ec:f6:b2:
83:8d:d2:12:93:49:60:da:12:57:04:68:5f:a9:85:
34:80:19:35:ef:9a:16:55:13:9c:1c:34:60:37:90:
1d:fd:5b:18:0d:5a:42:b8:16:fb:54:54:c3:ec:56:
24:c3:b7:65:b9:fa:46:fb:c7:0a:89:72:e1:20:10:
ac:d0:e2:99:82:70:a9:e7:bc:00:0c:bb:ca:f3:e6:
6f:15:0c:d7:2b:7f:43:80:fd:f0:ae:f8:fa:5f:d2:
e9:a4:b4:29:2a:a4:7e:d0:13:e8:dc:6a:d3:07:d1:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:9F:E9:BE:0C:CB:02:50:53:54:27:FB:38:D5:B2:6B:BA:5F:4E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zXqf6b4MywJQU1Qn-zjVsmu6X04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:56:80:10:1e:f8:98:61:f3:9d:79:94:81:cc:9c:0e:8c:1f:
1e:d8:52:d6:ac:03:d1:06:b6:af:b2:dc:9a:b0:89:0e:2f:8e:
55:3e:63:11:14:12:ed:9f:b5:80:c2:6d:63:4c:ee:28:18:e7:
84:e4:5d:a9:fc:94:44:e7:e5:42:7f:4d:c8:4d:e4:46:ae:fc:
9d:7a:38:75:2b:2b:5a:8b:50:66:84:74:a8:dd:25:2f:a7:2a:
e2:78:e2:15:c2:68:fd:f4:92:68:80:1c:13:f2:33:f3:1b:f1:
c2:fb:c3:0a:e7:ad:a1:ad:12:e0:81:3e:a8:40:8d:3a:20:85:
32:a9:9c:12:4e:6e:bb:1e:0a:2b:4f:fd:98:32:1c:ce:fb:d7:
5c:8a:76:39:08:7b:ac:5c:d2:98:ea:91:cd:4a:0a:42:b0:0e:
14:d0:bb:a2:ec:48:89:bf:83:91:a4:95:67:f7:2c:08:44:b7:
ac:9f:f9:c3:e3:ff:6b:f2:dd:53:9a:b2:05:85:6b:8d:67:8b:
84:d9:25:f3:e6:13:ff:3f:31:63:09:6b:d6:a7:66:35:ee:bd:
d7:21:70:a9:11:71:ec:99:a8:27:73:75:ad:96:2e:ad:ed:fc:
a0:85:86:99:1c:aa:d0:c2:a1:8b:0d:d9:26:f2:8f:10:de:20:
72:fa:af:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 12:46:23 2024 by rpki-client on console-fra.rpki-client.org