Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9x6iPsT-5P-AOoCPAj9k4ADHdic.roa
File: 9x6iPsT-5P-AOoCPAj9k4ADHdic.roa (raw, json)
Hash identifier: UGkVd1LJYu3rm8Dk7oTii1brW1h0WaHqVJwLeHmn4fA=
Subject key identifier: F7:1E:A2:3E:C4:FE:E4:FF:80:3A:80:8F:02:3F:64:E0:00:C7:76:27
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01973A242B5371B66B9F5EA519DBAC3AC5A0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9x6iPsT-5P-AOoCPAj9k4ADHdic.roa
Signing time: Wed 04 Jun 2025 08:52:18 +0000
ROA not before: Wed 04 Jun 2025 08:52:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 217.60.32.0/21 maxlen: 24
217.60.239.0/24 maxlen: 24
217.60.242.0/24 maxlen: 24
217.60.246.0/24 maxlen: 24
217.60.247.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 08:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:24:2b:53:71:b6:6b:9f:5e:a5:19:db:ac:3a:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 4 08:52:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f71ea23ec4fee4ff803a808f023f64e000c77627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:29:dc:87:59:da:a0:4c:54:d6:6d:e6:17:
79:5b:4b:c5:41:82:e6:19:d8:f1:9a:69:33:0e:eb:
43:eb:f7:9d:b2:9a:9a:fa:0a:fc:9a:e0:f8:c5:22:
07:92:44:ff:ad:ef:fd:ee:5d:aa:95:29:d5:ea:0e:
db:ec:e9:55:83:bc:a8:5c:82:e9:05:79:b3:c7:4e:
ec:b7:c2:71:9a:2b:dc:10:52:69:44:93:b9:2d:f9:
95:ea:75:f4:d0:eb:ba:fe:f6:6a:82:d7:ab:6c:91:
ae:fb:d6:e4:2e:e9:5f:b1:8a:06:20:9d:f4:f7:71:
27:c2:96:4e:4a:fc:b5:15:bf:10:77:d6:12:88:5e:
d6:eb:13:67:fc:ed:66:fd:63:26:81:d0:db:22:ec:
5a:2e:c0:ac:b4:a9:6a:21:79:31:91:05:5c:a6:08:
00:09:ae:cc:a9:30:c8:cb:49:f8:5e:06:87:93:cb:
6d:37:e7:26:9d:c5:8a:38:32:11:92:cf:da:bb:6c:
a0:3d:88:59:b3:e9:82:1d:a0:11:45:e5:f9:e7:7b:
fa:f2:ff:dc:4f:11:08:ae:fb:67:61:69:4e:32:14:
c2:40:ee:4f:7c:15:4f:95:ce:8b:e3:fa:d9:07:dc:
a0:8b:7d:64:8b:5c:e7:09:88:a3:6f:bb:fa:7c:64:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1E:A2:3E:C4:FE:E4:FF:80:3A:80:8F:02:3F:64:E0:00:C7:76:27
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9x6iPsT-5P-AOoCPAj9k4ADHdic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.32.0/21
217.60.239.0/24
217.60.242.0/24
217.60.246.0-217.60.249.255
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0b:aa:a5:7f:44:32:0e:75:ca:ae:06:c5:5d:c9:97:37:75:
f4:2b:ca:20:e7:09:47:44:16:76:7d:3c:bc:ba:e8:91:b8:42:
6d:58:45:3e:c6:c5:c1:32:16:30:08:b4:1c:57:e7:c3:3f:c0:
ab:69:bd:92:14:f7:8c:b8:e7:42:ec:e9:3f:cb:e3:bd:dc:11:
c4:52:1c:50:81:9f:12:7d:1a:55:e3:dd:60:94:74:d0:a3:68:
68:bd:d4:b9:2d:ad:71:c2:65:c0:6b:53:25:f7:12:03:04:0a:
b2:b5:1d:62:0a:a1:88:e8:f6:77:41:8e:95:d2:ad:1d:22:cb:
d0:d5:e2:f7:4e:e7:75:76:16:ba:ba:00:25:1e:08:26:92:9e:
da:a5:c0:c8:e7:e8:3b:fa:1f:81:f3:87:3c:04:68:15:e5:19:
1a:a4:db:aa:35:1e:dd:22:0c:45:d2:10:2c:a9:8e:96:6e:0e:
1f:8d:10:85:8e:5f:ee:04:4e:ce:e3:1c:c1:b8:bd:da:0e:1c:
64:a4:38:b2:4e:52:e5:6b:0b:fa:be:ec:b7:c3:7e:dc:b0:e5:
aa:1f:23:60:a2:73:7c:50:93:d9:16:63:76:ce:54:8b:6a:a9:
78:9f:23:3d:c6:40:0a:69:dd:c9:c5:c5:e5:74:d9:49:6a:05:
ae:9a:6e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:56:51 2025 by rpki-client