Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Jl63-SEcN7Pcw11DBXZTjVcrh0s.roa
File: Jl63-SEcN7Pcw11DBXZTjVcrh0s.roa (raw, json)
Hash identifier: 2jFDq5FZm82nf+VBZO449T2LXYYob0RNfI6E+VvHlJY=
Subject key identifier: 26:5E:B7:F9:21:1C:37:B3:DC:C3:5D:43:05:76:53:8D:57:2B:87:4B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01953EDCF503035D8EBC8094F034DC91CAB1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Jl63-SEcN7Pcw11DBXZTjVcrh0s.roa
Signing time: Tue 25 Feb 2025 20:47:02 +0000
ROA not before: Tue 25 Feb 2025 20:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215211
IP address blocks: 217.60.0.0/18 maxlen: 24
2a14:6e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 28 Feb 2025 13:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:dc:f5:03:03:5d:8e:bc:80:94:f0:34:dc:91:ca:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 25 20:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=265eb7f9211c37b3dcc35d430576538d572b874b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:98:05:43:5f:40:dc:6f:65:91:97:45:68:
d1:a3:5b:08:01:56:13:1c:4f:6d:a8:bf:30:53:af:
51:2a:b0:b7:25:cb:d0:20:b6:de:f6:da:e8:fd:40:
29:c5:93:15:5c:79:45:45:c3:38:3b:d6:7e:9d:2b:
e8:80:1c:95:d8:de:e4:a4:ff:84:f5:b6:03:66:40:
b5:60:c8:d8:99:22:18:b3:10:8c:7f:9f:dd:7c:86:
05:51:ff:e3:f0:c7:4e:87:dc:1d:a1:8e:12:88:e5:
82:44:5b:a7:b9:cb:44:e7:dd:a0:23:3e:25:c4:33:
a0:d6:78:8f:36:68:ce:39:76:42:c0:71:d0:ca:34:
52:94:d6:a0:e2:08:c6:43:f9:76:f3:25:dd:17:ee:
e4:3d:db:c9:92:3f:e8:81:8c:89:85:52:f0:6a:8b:
6b:d3:b3:7a:11:5d:a0:a0:fd:ae:14:18:32:fd:b6:
86:d4:e7:f5:0c:8c:1f:cf:91:1e:db:4d:2b:13:f3:
03:93:bf:ba:1b:d2:78:71:a9:03:be:f2:2a:21:50:
04:6f:46:d5:7b:1e:6e:5b:0b:e9:22:42:70:1f:49:
04:7f:c0:e3:bc:9c:0e:1a:7f:f5:c7:90:b6:71:d4:
a1:fd:1d:bc:88:47:5c:8c:8c:7a:9f:48:0a:37:c4:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5E:B7:F9:21:1C:37:B3:DC:C3:5D:43:05:76:53:8D:57:2B:87:4B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Jl63-SEcN7Pcw11DBXZTjVcrh0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.0.0/18
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
00:bf:ab:4d:93:b3:8b:04:1d:76:7d:d1:ec:c3:89:dd:e6:b3:
45:7f:1e:ef:f6:47:15:59:48:9f:64:14:3e:61:ec:b4:aa:5b:
b7:ca:b5:12:4f:77:9b:e5:29:85:62:76:2f:5f:a7:d5:33:5d:
66:df:57:07:3a:b6:2e:58:91:3c:5f:b4:67:7a:2b:6a:09:93:
3c:ae:e3:74:2f:2c:fd:8f:27:b5:44:06:dc:5e:6b:8b:6c:b5:
3c:12:68:0d:1e:19:1c:49:a3:d3:d4:67:ae:19:97:42:e5:6e:
5a:4f:38:78:9d:5c:61:75:45:10:57:19:e6:e0:b0:c6:cc:7e:
7b:b7:e3:2b:c1:1f:b9:ae:80:ce:19:c1:f2:57:8a:49:2c:45:
88:e2:19:9c:09:13:1e:f0:ec:f6:af:85:30:dc:f2:0f:52:e3:
3f:ae:8a:9d:86:eb:5c:71:36:a4:47:37:3a:f2:d6:02:7d:70:
c7:07:b5:15:28:fd:29:65:06:89:06:2c:fa:a3:4a:c8:17:2e:
c0:2f:11:1d:a3:86:52:18:a8:4b:0d:31:00:d2:80:d0:13:a0:
9b:9e:71:38:15:be:c0:fb:c8:68:ab:2a:26:67:44:86:5a:53:
8e:7f:39:12:09:33:80:fb:4d:60:89:79:00:ee:6b:f3:d8:16:
c3:b5:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:48:16 2025 by rpki-client