Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AWv8tsDq_ZuZepq6zEkCQjOt5tw.roa
File: AWv8tsDq_ZuZepq6zEkCQjOt5tw.roa (raw, json)
Hash identifier: evYS9A9y3xStxrxrozVAZEJz2yg2UlcfrhGNccbj264=
Subject key identifier: 01:6B:FC:B6:C0:EA:FD:9B:99:7A:9A:BA:CC:49:02:42:33:AD:E6:DC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194930419100F2BC4361822A73FA0676B4D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AWv8tsDq_ZuZepq6zEkCQjOt5tw.roa
Signing time: Thu 23 Jan 2025 11:55:06 +0000
ROA not before: Thu 23 Jan 2025 11:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31548
IP address blocks: 217.60.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Jan 2025 12:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:04:19:10:0f:2b:c4:36:18:22:a7:3f:a0:67:6b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 23 11:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=016bfcb6c0eafd9b997a9abacc49024233ade6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:10:19:03:7d:30:1b:3a:48:00:36:56:fe:
a9:21:34:37:1d:01:3a:02:d5:e5:d4:20:5d:f6:a4:
86:b8:eb:13:be:19:88:3c:f9:22:05:b5:4f:98:e3:
54:48:b3:37:fc:bd:ce:f7:5f:ee:9b:d3:0f:b5:90:
df:c2:81:dd:3c:02:32:4b:c3:15:41:ff:fa:b9:24:
64:bf:ff:5d:44:5b:e5:e5:ba:60:5a:17:ea:cc:b6:
7d:59:ae:80:1d:fb:14:66:9e:7a:86:0e:66:fa:f1:
0d:e3:0e:c1:74:67:53:d5:d7:f4:25:70:99:a2:3d:
e5:2f:6b:d3:3b:3e:98:cf:b1:f3:c1:86:bd:e6:bf:
ce:96:5f:76:57:93:f5:27:f4:7d:de:36:ea:f4:e1:
c6:74:2c:93:36:87:93:57:b9:e2:4b:38:4e:3c:21:
9c:b4:18:12:93:6e:03:b0:e1:40:6c:d8:2b:e8:7a:
d6:e8:d9:c1:20:7f:69:ee:f4:42:b4:d9:46:de:28:
60:78:b4:16:74:2a:94:e8:7b:85:98:5e:0a:91:64:
9f:1f:1a:7d:2a:a8:d3:6d:21:54:93:ee:34:5e:b0:
2d:ce:15:60:d2:6b:4a:d8:e6:4e:d8:cc:4c:8b:89:
87:8b:7e:04:50:2d:c2:83:cb:0f:30:be:93:63:ba:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6B:FC:B6:C0:EA:FD:9B:99:7A:9A:BA:CC:49:02:42:33:AD:E6:DC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/AWv8tsDq_ZuZepq6zEkCQjOt5tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.244.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c4:a3:3e:60:3b:07:73:0a:c9:0b:4a:44:28:82:f9:fc:cc:
31:63:fb:d4:bf:b6:c6:05:a3:52:6a:f2:d0:5c:31:04:a5:4f:
8b:77:2c:1b:f3:14:c8:aa:a7:f3:62:06:7a:1d:0f:37:fc:31:
2c:4d:43:32:61:2a:41:11:73:4d:dc:21:75:dc:94:b9:28:cd:
48:d9:68:53:27:ca:e2:b5:e5:d5:64:08:ec:2c:b2:e3:2f:8e:
da:65:a5:5b:e6:b6:ed:73:3c:34:5b:ee:80:cc:9e:70:1d:33:
61:4f:5c:64:fb:3c:5a:4b:8a:54:a3:b0:c9:77:a6:90:0e:00:
3c:42:6b:e8:86:43:10:e0:ab:39:45:14:31:7d:49:13:6d:73:
20:54:e8:10:c1:c3:a2:81:60:5e:53:f7:84:43:fc:ae:33:fa:
f3:38:45:ca:f8:7f:26:b5:66:ec:09:8a:82:32:31:57:69:ce:
27:18:0e:46:77:4c:a2:1f:00:05:2d:cf:08:d1:3c:b3:1d:36:
f6:83:87:61:ba:0e:7f:dc:6e:1b:61:30:ef:59:e4:10:82:70:
c4:3e:06:72:9d:c4:c3:af:dd:33:71:05:94:29:05:2a:49:dc:
63:6a:80:a5:d0:ac:fb:d2:64:30:0c:50:28:68:ba:d6:d6:ad:
63:57:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:06:02 2025 by rpki-client