Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F1b12yNpfHiCOSRB2mNv-vefGKQ.roa
File: F1b12yNpfHiCOSRB2mNv-vefGKQ.roa (raw, json)
Hash identifier: BugYNiQBPbtGmOsoco5qccVdY2Px6U3hYY65QFuYNhU=
Subject key identifier: 17:56:F5:DB:23:69:7C:78:82:39:24:41:DA:63:6F:FA:F7:9F:18:A4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019509F67A5711A771EC0EB6564646394DB5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F1b12yNpfHiCOSRB2mNv-vefGKQ.roa
Signing time: Sat 15 Feb 2025 14:15:02 +0000
ROA not before: Sat 15 Feb 2025 14:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215211
IP address blocks: 217.60.0.0/18 maxlen: 24
217.60.187.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
2a14:6e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Feb 2025 12:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:09:f6:7a:57:11:a7:71:ec:0e:b6:56:46:46:39:4d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 15 14:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1756f5db23697c7882392441da636ffaf79f18a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:d4:5c:c6:a8:ef:19:d5:5d:61:49:53:50:
2d:22:37:b3:5f:4a:27:78:d3:d7:d4:f3:7f:a9:e2:
1e:6e:0c:09:2e:f9:be:5e:ef:d5:a3:9b:2b:ce:7f:
cf:4f:0a:af:52:ae:1e:9c:3f:c9:49:24:2c:a1:b0:
20:f7:24:74:3b:06:ef:ca:75:4f:bb:bc:08:38:dc:
33:19:09:cc:9a:eb:7d:1d:66:d8:4e:ad:6d:08:9a:
02:a2:12:a9:f7:3a:43:b3:66:30:b0:15:ba:fc:89:
5c:22:04:4c:9c:4e:e8:45:36:54:6f:8a:7d:43:1d:
a2:d7:cc:0f:dc:29:36:bd:0e:ca:ed:7e:e0:63:53:
bc:88:fa:63:a4:30:c5:15:bf:52:06:da:21:9f:a9:
0c:b5:19:91:8c:66:be:42:53:9b:ba:cd:d8:16:b2:
69:76:a8:d8:6b:30:ae:71:5a:99:06:13:86:32:87:
eb:3b:2a:7a:3f:bd:24:80:fc:18:86:4a:b2:f9:7d:
c7:9c:ce:24:37:54:5a:9a:f6:d1:4e:92:a8:c2:4d:
7a:45:db:b6:e2:1d:7b:fd:0e:18:7a:40:a0:d1:f3:
ee:65:6a:84:d4:63:da:5e:3b:c6:b1:3a:10:50:11:
33:55:b1:e9:89:bf:a5:84:cc:9b:7f:b5:41:87:0d:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:F5:DB:23:69:7C:78:82:39:24:41:DA:63:6F:FA:F7:9F:18:A4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/F1b12yNpfHiCOSRB2mNv-vefGKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.0.0/18
217.60.187.0-217.60.191.255
217.60.245.0/24
217.60.248.0/24
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
79:5c:fa:6d:4f:dd:53:df:f7:ac:80:f8:01:ac:cb:7d:b6:37:
db:a7:ba:67:75:92:de:ef:40:48:c7:b6:1c:1c:61:32:56:56:
23:69:e0:43:f9:18:36:0e:96:fb:9f:6f:d6:7f:17:6d:18:1f:
98:16:d3:c5:fb:9e:62:bc:92:b7:b9:31:07:1f:01:d4:45:30:
03:a0:af:49:c0:2b:b7:63:34:c6:12:d3:53:37:85:49:61:19:
5f:fd:97:44:6b:56:77:57:c3:f4:5f:a1:80:d3:00:e9:29:9a:
cb:d2:b0:db:8d:71:b1:d1:f1:6b:69:30:6d:5e:76:5b:cb:8d:
3d:fc:e7:2f:08:1e:5e:b8:41:bd:df:d7:51:d1:f9:9a:69:00:
7d:ea:a8:cd:bb:62:a8:8d:f8:7e:6a:b2:5c:d9:f3:5a:0d:d4:
13:9e:cb:42:08:cc:b5:6e:08:cd:df:cb:7b:1b:e7:c3:6b:5c:
7e:6d:be:f3:57:f5:b7:6d:49:ea:56:5e:64:02:3d:57:4b:79:
5f:25:fd:a5:b1:81:14:2b:fc:66:ac:b0:7f:6f:3e:c3:9b:ff:
e1:22:99:ff:46:25:2d:ac:b5:79:83:a2:a9:6d:2f:cb:02:41:
90:27:ce:1f:db:85:b1:aa:dc:fc:a7:44:aa:24:9a:59:99:ae:
49:bc:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:48:32 2025 by rpki-client