Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zW2m8OHbeiPnscTkZiMHvtf9hJ0.roa
File: zW2m8OHbeiPnscTkZiMHvtf9hJ0.roa (raw, json)
Hash identifier: 07eivfx/RMsLcPrndnuTxuW+v7U7bW7H2ILlXwP8UBk=
Subject key identifier: CD:6D:A6:F0:E1:DB:7A:23:E7:B1:C4:E4:66:23:07:BE:D7:FD:84:9D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01955B7383EC6E4575082B6C30C38FEC4677
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zW2m8OHbeiPnscTkZiMHvtf9hJ0.roa
Signing time: Mon 03 Mar 2025 10:00:51 +0000
ROA not before: Mon 03 Mar 2025 10:00:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18811
IP address blocks: 217.60.0.0/21 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.56.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Mar 2025 10:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:73:83:ec:6e:45:75:08:2b:6c:30:c3:8f:ec:46:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 3 10:00:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd6da6f0e1db7a23e7b1c4e4662307bed7fd849d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:dd:8e:df:c8:5a:57:6d:ea:9e:4a:48:27:
da:7e:40:a6:c8:4b:3c:a1:35:c8:c5:17:7c:c7:ed:
e2:cd:28:0e:66:20:d0:12:aa:ed:a8:57:06:72:ef:
8c:b3:21:cd:45:7f:c0:54:14:89:5a:22:0c:87:f5:
23:fd:67:d0:1a:b7:51:f2:78:63:f3:87:91:2a:9d:
91:00:dd:54:26:38:d1:00:e2:94:e8:4c:9c:de:37:
b5:5f:38:24:32:39:00:5d:99:53:6f:ef:22:68:b8:
ef:1f:3c:d8:a6:b9:85:49:d8:cb:c4:92:57:c9:96:
17:0b:f4:2a:33:c5:7e:e7:2b:18:c7:1c:ca:cc:83:
c8:2f:81:df:60:16:6d:a9:7c:81:c6:1f:77:c6:eb:
96:5e:eb:6a:05:44:0c:a0:3d:29:c3:f9:41:5c:2f:
87:5e:f9:cb:39:1d:c1:66:20:fd:a5:ef:15:c8:41:
09:86:b4:46:e9:91:48:e6:2e:d6:8f:c7:a2:dd:1c:
2c:97:23:d7:06:83:ae:73:a0:d4:fd:a2:f8:0b:7c:
92:a7:c8:3f:30:c2:1f:09:39:36:4f:d1:ba:ab:d5:
f6:96:68:a6:a1:b8:17:da:ed:49:3c:bf:22:d3:3a:
06:1a:fb:a8:0f:c2:dd:a1:f8:83:ea:e4:6d:2e:f8:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6D:A6:F0:E1:DB:7A:23:E7:B1:C4:E4:66:23:07:BE:D7:FD:84:9D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zW2m8OHbeiPnscTkZiMHvtf9hJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.0.0/20
217.60.24.0/22
217.60.32.0/21
217.60.56.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:da:36:cb:91:6b:c2:94:fa:4c:d3:3a:cb:86:39:2a:f5:5d:
54:02:78:87:13:48:4f:2d:74:9e:a4:7b:c5:d9:ac:05:49:c5:
34:01:79:28:00:e0:ee:06:17:90:ab:a3:02:c2:35:c1:ea:24:
76:83:63:47:22:18:5b:ee:eb:03:d0:fc:28:79:d9:44:10:2c:
7b:d6:4f:aa:29:b5:d4:7a:28:11:1f:55:0e:2e:2c:53:27:45:
3d:33:0b:d5:a7:1c:16:ae:9f:37:40:f4:6d:80:56:45:f3:1a:
7d:f2:7e:07:83:f7:4c:d3:8b:41:dd:4f:4a:f9:14:61:c6:e5:
53:ac:46:a8:44:fe:90:4a:2a:24:4f:69:4f:d0:8f:e0:19:16:
87:0d:7a:11:82:e7:8a:63:7f:96:d5:d3:52:b5:a6:45:97:7f:
e6:6f:c2:01:a9:c2:d1:92:80:1a:aa:ff:44:06:c4:83:f9:68:
02:af:cf:d4:db:9b:c7:ba:b1:c6:72:41:05:b8:fa:5f:f6:1c:
87:f1:ee:6f:b0:97:29:54:28:4a:cc:23:0c:f1:04:24:ee:e3:
ea:19:82:17:a2:91:29:98:77:2d:07:5d:a4:f7:bc:16:0a:c5:
55:15:f0:61:d2:a1:db:90:d2:03:1d:59:2a:e7:21:bd:92:fc:
75:2d:40:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:59:51 2025 by rpki-client