Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iurznzHzlYre-7b4i2u5u8ctKUI.roa
File: iurznzHzlYre-7b4i2u5u8ctKUI.roa (raw, json)
Hash identifier: 2cy3IBr+CFjiYVuY773hleyEQDJrV8viCdNRryuGIhU=
Subject key identifier: 8A:EA:F3:9F:31:F3:95:8A:DE:FB:B6:F8:8B:6B:B9:BB:C7:2D:29:42
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01969A2AB1731A287594ABB83A7F208FAFF0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iurznzHzlYre-7b4i2u5u8ctKUI.roa
Signing time: Sun 04 May 2025 07:20:11 +0000
ROA not before: Sun 04 May 2025 07:20:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398704
IP address blocks: 217.60.0.0/21 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.36.0/22 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 07:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:2a:b1:73:1a:28:75:94:ab:b8:3a:7f:20:8f:af:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 4 07:20:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8aeaf39f31f3958adefbb6f88b6bb9bbc72d2942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:bd:2c:67:55:e1:b9:db:13:01:4a:aa:7a:
50:e9:10:ae:ae:6a:2f:f3:c4:a7:2e:34:23:f1:b1:
94:c7:21:fd:78:68:ca:44:e3:01:bc:17:06:92:7b:
b3:43:27:62:0c:6d:18:3e:1e:dc:10:67:99:6e:2b:
1f:3c:01:b4:a8:b4:37:fa:25:67:f9:ef:67:da:5a:
f6:4b:9f:0a:b0:13:eb:73:0f:28:c3:f0:56:b1:82:
86:8e:e7:c7:0d:ba:58:01:e8:9f:65:c9:2f:94:1d:
04:cf:18:c0:7e:9d:20:b5:08:ee:60:76:19:62:1b:
ca:90:94:71:fa:ac:68:60:3b:45:14:13:ad:52:06:
e3:69:bd:88:1e:b6:04:b7:29:71:db:e4:69:e7:37:
e4:aa:8f:bd:4e:f3:d9:de:83:a4:b6:4d:bd:cf:e3:
6d:bc:43:ea:46:0f:d4:17:0f:fa:0f:ce:0f:70:f1:
f1:b8:58:55:a9:5b:d4:c1:b7:dd:0a:57:2b:cb:77:
d6:ab:95:d9:bd:8a:3e:35:90:c4:d9:8a:d3:bc:6f:
70:3b:7b:ff:52:fe:f1:db:e1:27:5b:f0:d8:26:35:
a5:15:d8:7c:c0:0c:dd:45:ac:f1:37:42:63:30:81:
6a:eb:d3:16:b5:c9:6c:ed:47:9d:99:16:c5:34:b1:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EA:F3:9F:31:F3:95:8A:DE:FB:B6:F8:8B:6B:B9:BB:C7:2D:29:42
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iurznzHzlYre-7b4i2u5u8ctKUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.0.0/21
217.60.12.0/22
217.60.24.0/22
217.60.36.0/22
217.60.44.0/22
217.60.56.0/21
Signature Algorithm: sha256WithRSAEncryption
96:ec:15:30:ab:45:69:3f:a9:63:45:41:7b:84:6e:a6:71:03:
57:c1:37:04:77:19:6f:4e:1f:73:b3:8c:5c:c0:de:b9:16:e8:
d1:37:ff:df:1f:f8:98:da:fd:66:08:ba:37:08:e3:df:bd:cd:
9b:b6:47:d3:2a:7a:d0:8f:a0:dd:6b:74:74:1b:2b:53:e3:36:
39:67:d0:c9:af:10:14:91:cc:c8:00:71:a9:99:75:79:71:de:
38:1d:af:7f:eb:7c:e9:29:81:35:de:5a:0f:94:fa:de:d6:3d:
07:88:37:e4:6e:92:c7:3f:3e:79:7b:ca:96:cb:3b:21:b7:90:
4e:59:ee:8c:c8:33:2e:38:88:bb:26:fd:a3:9e:07:94:30:3c:
d4:72:5d:96:35:39:13:b8:41:e7:0d:b4:7c:3e:6a:05:6b:00:
a0:f6:ca:2c:75:7d:84:d0:ff:25:47:54:2a:06:b1:1c:a5:fe:
bb:5b:b6:64:90:b9:fc:f8:90:4a:1a:51:60:48:be:aa:ae:3f:
17:61:8f:a9:f1:74:c0:9b:6e:65:dd:3d:65:0c:df:12:83:3e:
a5:40:dd:8c:15:3c:c0:39:6e:ee:60:88:c3:3a:4c:19:b2:ad:
1a:40:97:d3:21:81:82:d1:27:5b:3a:95:a2:69:5f:98:8d:a7:
3e:1e:10:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:57:29 2025 by rpki-client