Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7_27Y863tVxH9zFhbVqeaGt5mfM.roa
File: 7_27Y863tVxH9zFhbVqeaGt5mfM.roa (raw, json)
Hash identifier: hkm3urBh77Pu4QouTFhlJpliSRAKT76RlEw1ZH+1DGw=
Subject key identifier: EF:FD:BB:63:CE:B7:B5:5C:47:F7:31:61:6D:5A:9E:68:6B:79:99:F3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196577559BA932C9C0ACD3C932FF924A959
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7_27Y863tVxH9zFhbVqeaGt5mfM.roa
Signing time: Mon 21 Apr 2025 08:27:10 +0000
ROA not before: Mon 21 Apr 2025 08:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204203
IP address blocks: 217.60.239.0/24 maxlen: 24
217.60.241.0/24 maxlen: 24
217.60.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Apr 2025 13:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:75:59:ba:93:2c:9c:0a:cd:3c:93:2f:f9:24:a9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 21 08:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=effdbb63ceb7b55c47f731616d5a9e686b7999f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:e6:81:cb:cb:45:13:d2:2c:04:4f:e3:8f:
2a:a4:60:1d:56:b9:2b:ba:0e:95:25:7b:75:90:fe:
b0:f8:e0:c4:65:cc:fc:b4:0d:b0:ad:9c:5f:59:e4:
59:f8:b3:ac:ef:f3:34:bc:f9:0f:dd:65:86:6b:fb:
18:73:0a:0c:d7:38:55:de:b0:20:fb:a0:10:6c:c0:
2a:83:32:25:3f:f5:6c:c8:61:59:4a:3e:83:00:63:
f6:ed:a7:ae:ee:3f:fa:f2:5a:c0:54:1d:f2:7c:73:
ed:76:00:54:e7:c8:7a:c2:58:d5:3e:ef:e2:ae:42:
d6:f9:e8:7d:60:4f:58:12:2f:cf:ed:38:cb:0c:b9:
52:30:a0:d2:c8:12:f7:19:8e:e3:ff:ce:49:8e:a3:
3e:97:9d:91:a4:73:46:d7:70:ea:53:86:f4:e6:b7:
e5:92:74:ce:a6:1f:57:86:79:07:a1:1f:92:be:b0:
3a:85:04:5b:44:f3:dc:6c:57:d1:e7:07:a7:4c:15:
6c:a2:2b:64:14:76:ec:f6:cc:e1:7a:50:7e:32:9b:
0b:4e:04:a3:ef:9f:01:c0:c7:21:29:09:d6:fb:0d:
e2:f0:bb:22:57:86:6f:a5:b3:13:2f:67:8a:aa:a7:
59:5c:2e:4c:45:11:86:b6:4b:28:a9:5d:38:c9:d5:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:BB:63:CE:B7:B5:5C:47:F7:31:61:6D:5A:9E:68:6B:79:99:F3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7_27Y863tVxH9zFhbVqeaGt5mfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.239.0/24
217.60.241.0/24
217.60.255.0/24
Signature Algorithm: sha256WithRSAEncryption
80:55:03:46:54:5b:37:6f:49:71:c4:97:16:0d:25:6d:81:8e:
56:08:21:0f:45:75:85:65:6c:f2:f0:17:08:b1:27:39:78:9a:
b0:50:cc:64:bb:2b:09:fc:97:66:8d:ec:f9:d7:21:97:dd:23:
26:0a:a2:20:ab:2f:be:74:c9:a9:16:66:38:a1:34:ff:aa:3c:
ac:36:b9:e3:5e:85:3f:2d:db:37:3f:c4:98:8d:1c:d2:a5:6a:
65:1d:77:e1:df:72:05:de:60:c8:8d:6a:8d:46:26:e7:1d:f4:
6e:f6:a9:61:e4:bb:a5:11:b2:60:99:9c:3b:b5:9b:d0:1d:49:
85:a9:cd:c8:25:01:b1:bd:d8:69:67:21:74:25:f4:02:48:29:
1b:62:5b:69:95:2b:37:ca:2a:d5:9c:bc:6c:13:47:d4:5c:c5:
36:49:2e:e5:7a:78:e4:db:dd:ea:72:84:6f:ac:76:c8:51:3b:
a6:3c:20:cf:d6:18:ba:90:9c:ba:2b:e6:fc:86:b0:56:00:0e:
2b:0b:fe:fa:b4:f9:8f:ac:61:fd:44:ee:59:20:fc:5f:af:ff:
4b:1a:9b:98:5a:12:ff:75:25:30:1f:28:b1:7e:c6:1b:ed:ef:
03:d3:c0:2d:00:32:54:de:85:c9:1a:ce:24:cc:9b:a9:5e:47:
df:b2:d9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:17:11 2025 by rpki-client