Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/4l8OJYbP8BG3l_GXeQxKPZKYOQo.roa
File: 4l8OJYbP8BG3l_GXeQxKPZKYOQo.roa (raw, json)
Hash identifier: SMYwnGXgVPJrKWHB856Zq/yP41qx27UPDfMJvAdEsd8=
Subject key identifier: E2:5F:0E:25:86:CF:F0:11:B7:97:F1:97:79:0C:4A:3D:92:98:39:0A
Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Certificate serial: 019243A264BD2664FE84DE2EF3AAA60BD2EA
Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/4l8OJYbP8BG3l_GXeQxKPZKYOQo.roa
Signing time: Mon 30 Sep 2024 15:52:48 +0000
ROA not before: Mon 30 Sep 2024 15:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209475
IP address blocks: 217.64.156.0/22 maxlen: 22
217.64.156.0/24 maxlen: 24
217.64.157.0/24 maxlen: 24
217.64.158.0/24 maxlen: 24
217.64.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:43:a2:64:bd:26:64:fe:84:de:2e:f3:aa:a6:0b:d2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Validity
Not Before: Sep 30 15:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e25f0e2586cff011b797f197790c4a3d9298390a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:0b:43:ab:58:c5:25:31:af:fc:99:f7:24:
6e:bf:ec:35:f5:5c:e3:14:8f:1d:e7:0c:23:ce:87:
41:b7:6b:0c:59:7b:e5:2e:b8:36:6a:b0:55:ff:ba:
3b:e5:dc:1c:82:ee:72:06:d0:9e:7f:1b:85:ce:f5:
38:ea:d0:56:92:84:8d:8e:af:c5:35:73:88:6a:15:
d5:53:a5:4e:10:46:4d:8b:88:1b:a7:3e:2e:96:90:
a9:8f:5d:e1:ed:b0:2a:a9:29:2d:f5:c5:51:ba:ef:
09:cd:9a:24:aa:2d:fc:b0:b2:e8:fe:fc:22:01:d0:
94:bd:91:98:f4:29:87:18:76:87:94:4f:65:eb:15:
df:ba:46:a6:40:b7:e2:d1:48:6d:ce:d9:96:13:04:
b2:7d:85:71:9b:29:69:f5:ad:f4:ec:c1:66:b9:b0:
ac:90:4f:b8:01:23:57:da:7f:30:8a:3b:65:06:26:
00:73:56:90:d9:a5:d7:11:dc:70:49:56:1a:12:d8:
28:eb:f6:8a:2a:7d:b9:f2:30:e9:af:5f:f1:3b:2c:
9e:4e:a4:07:10:a8:a3:c5:f1:41:25:fe:eb:92:21:
d2:6f:50:bb:63:52:66:0f:bf:24:0e:23:1f:66:a8:
4a:5a:82:0c:e7:36:95:25:19:d9:19:94:b0:d0:5c:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5F:0E:25:86:CF:F0:11:B7:97:F1:97:79:0C:4A:3D:92:98:39:0A
X509v3 Authority Key Identifier:
keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/4l8OJYbP8BG3l_GXeQxKPZKYOQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.64.156.0/22
Signature Algorithm: sha256WithRSAEncryption
89:bf:79:19:66:f0:c5:d3:42:b0:19:7d:8b:b2:e0:29:9f:da:
d3:0b:04:ca:dc:f2:66:45:75:79:28:a0:9d:2b:79:46:d8:a7:
c4:72:7f:e9:0b:2a:38:e2:c2:3f:68:c8:6d:e6:ed:54:23:75:
cf:67:21:7a:f4:cb:0e:ae:d2:fa:a5:2b:78:48:98:ca:8c:ee:
5c:70:81:24:9d:77:a9:fd:7c:7a:f8:7a:06:60:22:64:2e:4e:
7f:6b:a2:90:a8:97:80:e2:eb:73:74:49:0c:4a:53:6b:02:ba:
9d:b4:d2:1d:81:f4:15:00:1f:aa:41:31:80:e5:99:77:8b:39:
96:4f:ac:eb:c7:fe:33:1d:a9:26:6e:bd:0e:8b:63:67:91:97:
1c:c1:4f:ee:3e:dd:23:76:70:a2:e7:d4:88:78:1c:dd:98:4d:
26:df:be:b0:e3:96:86:f4:2a:e8:0f:07:37:63:d1:3d:49:0b:
22:ae:1c:33:7c:72:10:d5:03:af:ac:a7:65:ba:4d:20:86:49:
b0:68:b1:80:f9:4a:b8:9b:f5:0a:c8:fa:59:5a:2c:04:f7:ba:
2a:81:b0:dd:82:7c:e6:48:52:22:a1:fb:e2:e3:6a:56:d2:f2:
03:0e:be:d3:42:cb:f1:95:a2:5e:ad:92:28:46:6d:7a:5d:34:
4a:9b:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:22 2025 by rpki-client