Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/59yPettZgcU3ynZYbbKswQWyFdQ.roa
File: 59yPettZgcU3ynZYbbKswQWyFdQ.roa (raw, json)
Hash identifier: diW9OG3/JnAmqAPbKDRWxVgv09/13HVBSYMAbEnbF64=
Subject key identifier: E7:DC:8F:7A:DB:59:81:C5:37:CA:76:58:6D:B2:AC:C1:05:B2:15:D4
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01932A5208869C2818F98DE1ED6A779C92AB
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/59yPettZgcU3ynZYbbKswQWyFdQ.roa
Signing time: Thu 14 Nov 2024 10:57:19 +0000
ROA not before: Thu 14 Nov 2024 10:57:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6900
IP address blocks: 195.203.127.0/24 maxlen: 24
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:52:08:86:9c:28:18:f9:8d:e1:ed:6a:77:9c:92:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Nov 14 10:57:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7dc8f7adb5981c537ca76586db2acc105b215d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:b9:1d:e7:5b:76:68:b1:4f:c3:da:9d:6f:
f1:a3:25:cb:2c:46:67:45:06:1f:68:70:94:3a:9c:
32:88:6f:eb:4a:26:41:91:ce:a0:31:aa:52:bb:92:
83:89:d0:c9:f5:f4:23:2b:06:3b:37:0d:25:8f:e1:
4b:48:76:71:f5:6f:4a:c2:6c:0d:b4:a6:1e:30:64:
62:ce:fb:27:59:0c:5a:d4:6e:8b:86:ec:8a:33:47:
12:51:53:75:f3:23:54:6a:52:87:9e:c4:00:48:0e:
63:4c:05:29:f9:d8:58:1b:25:2d:67:f1:7c:2f:38:
91:e2:92:ea:25:02:33:9a:e5:af:2a:b9:e6:da:e5:
c0:6c:a7:24:76:23:9c:e3:1c:52:1d:93:83:4d:91:
d6:12:b9:c2:be:a1:49:52:c0:19:91:18:8a:25:d6:
03:26:1e:eb:ae:b5:c5:1b:92:b7:76:68:f3:5f:60:
c3:55:d5:d4:47:5a:1a:bb:07:d2:7f:65:0c:da:3f:
2a:34:06:ee:2b:75:ee:9b:ad:2d:66:8c:94:78:fb:
fb:71:75:2b:ac:bd:fe:73:e0:ff:34:25:f9:0b:9e:
ac:c0:eb:37:75:e1:ee:b8:c8:d4:c8:37:ad:37:ab:
fa:d3:71:80:02:4a:cc:28:1e:78:31:da:67:46:04:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DC:8F:7A:DB:59:81:C5:37:CA:76:58:6D:B2:AC:C1:05:B2:15:D4
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/59yPettZgcU3ynZYbbKswQWyFdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.203.127.0/24
217.27.4.0/24
217.27.6.0/23
Signature Algorithm: sha256WithRSAEncryption
db:0b:65:88:cd:a1:9d:e9:f2:89:b3:40:ad:fc:30:99:75:f0:
41:bf:35:4f:e0:f5:5e:00:0a:bd:85:f2:bf:04:f8:ba:c6:72:
87:4a:7e:ab:df:87:6f:7d:a7:49:8e:57:90:77:1b:6c:1a:ae:
0f:44:03:c6:8b:39:2a:a7:63:a5:28:5d:07:e4:b7:ec:8d:31:
17:56:81:31:eb:b4:c1:51:f8:ea:75:7e:40:cb:4b:45:40:47:
46:aa:c1:af:90:1e:55:9e:a4:67:84:2f:a3:99:d8:b9:d9:2b:
04:cb:0a:30:0d:94:f5:1b:2b:6f:11:45:d5:3f:9f:6d:82:66:
4f:a3:ca:30:cd:56:90:07:5f:f6:6e:69:3d:7c:63:4a:d0:b9:
64:6c:9d:1a:31:4d:32:56:8d:97:23:11:c7:1c:5f:a0:8d:42:
e2:47:91:09:93:7a:9f:74:37:d3:fe:f5:d4:97:52:73:68:b3:
e6:7f:8a:76:62:ee:2c:40:db:76:72:89:21:fa:48:55:b5:dd:
ae:9b:8c:39:41:44:08:a0:f5:a1:7b:72:7e:e6:4f:ab:5b:1b:
86:eb:d7:3d:0e:8c:fb:27:88:54:0c:d7:99:8f:17:58:95:b7:
ea:61:a2:ff:1d:1e:b5:99:e9:e7:41:8f:5e:1a:59:c0:c8:93:
59:d9:f0:93
-----BEGIN CERTIFICATE-----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 at Mon Nov 18 16:25:51 2024 by rpki-client on console-fra.rpki-client.org