Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6xkadkgVQwsLJzS1AmqRKgdXuXE.roa
File: 6xkadkgVQwsLJzS1AmqRKgdXuXE.roa (raw, json)
Hash identifier: wm5PEyr1uielvU/6e7KR0Vb1g3cFR2sBdOSPX8cEruo=
Subject key identifier: EB:19:1A:76:48:15:43:0B:0B:27:34:B5:02:6A:91:2A:07:57:B9:71
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01952370B14CF5BB61EE4D8D8F6DA873DB1B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6xkadkgVQwsLJzS1AmqRKgdXuXE.roa
Signing time: Thu 20 Feb 2025 12:59:02 +0000
ROA not before: Thu 20 Feb 2025 12:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215211
IP address blocks: 217.60.0.0/18 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.245.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
2a14:6e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Feb 2025 18:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:70:b1:4c:f5:bb:61:ee:4d:8d:8f:6d:a8:73:db:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 20 12:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb191a764815430b0b2734b5026a912a0757b971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:80:d4:3e:36:e7:1a:02:63:e1:be:4c:66:
f7:8d:96:0c:2a:2c:42:4d:f3:69:9a:bf:06:a5:3a:
7b:8f:ad:d5:54:f8:b2:87:70:fc:ae:37:63:42:97:
08:ef:39:3b:8a:99:cc:80:77:54:4d:f6:25:08:1a:
1a:e6:e5:67:4e:86:b0:7d:9b:09:14:da:25:d8:a2:
7b:de:56:ff:85:b9:dc:23:57:43:cd:0a:de:71:f6:
4a:00:07:89:2a:7b:68:09:62:b8:b5:35:bb:85:1a:
00:f9:3e:f4:a8:6c:ee:e1:7a:c8:bd:c9:ad:d8:82:
96:43:85:19:89:79:e7:4f:a5:7f:d9:4b:8c:2e:3e:
36:02:6e:51:01:c7:48:94:03:a1:95:e8:be:c8:7f:
89:c3:68:e8:04:c7:6f:83:5b:ae:ee:db:92:12:59:
3a:17:a8:12:2b:e9:87:c1:ce:13:5f:df:d1:49:43:
67:81:0c:e4:92:c8:d4:9b:6d:78:24:90:84:fa:4e:
b1:13:f4:72:59:f0:b6:53:c2:33:7f:8d:19:d1:c2:
65:44:4b:bc:cd:28:7f:01:e4:e7:bd:f6:aa:cc:5a:
a2:3a:53:3a:62:f6:06:23:73:99:41:7f:f5:ec:09:
84:1f:9e:8b:d1:ef:41:4d:d1:f6:72:4e:fb:00:37:
c5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:19:1A:76:48:15:43:0B:0B:27:34:B5:02:6A:91:2A:07:57:B9:71
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6xkadkgVQwsLJzS1AmqRKgdXuXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.0.0/18
217.60.188.0/22
217.60.245.0/24
217.60.248.0/24
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
a1:c2:22:79:7c:09:f4:80:f0:91:70:97:a1:1f:50:a0:43:62:
dc:24:3f:78:d4:cc:32:53:8a:f7:f0:ea:ce:0f:a4:05:25:f0:
ac:30:9e:11:2d:1d:7c:8e:ca:be:96:38:d5:65:dc:4c:23:e9:
2d:8f:31:10:8f:bc:b9:cf:2d:54:d2:80:23:3c:e3:13:a8:15:
ec:3b:ee:e2:bc:0b:d1:98:a0:37:00:cb:4f:77:52:c6:3d:d8:
d0:0b:ba:7e:f5:ab:ac:27:49:b7:fb:57:79:72:3d:1c:c7:01:
6a:8a:a9:1f:10:eb:14:36:63:10:69:fc:d0:b7:a7:79:8a:5a:
0d:21:bc:b7:b6:1b:bb:b3:6a:f6:bd:8e:49:8d:f9:74:30:f2:
65:ed:da:0f:e0:8a:3d:28:2f:11:3e:5e:1e:55:37:65:a1:85:
90:49:2a:91:e9:e9:e2:a4:8a:3d:54:30:e5:a9:19:09:5f:ec:
76:bd:bc:09:a0:45:a6:9f:29:72:1c:48:57:d9:fb:93:8a:da:
e0:4b:6a:ef:74:b5:f1:d5:1c:f9:eb:1f:97:41:ad:3a:d3:bf:
b5:97:58:69:f4:62:b5:47:3a:44:61:c2:93:c5:b2:fb:46:8e:
c4:fa:1a:10:ff:d7:7b:05:3c:31:b7:c6:1d:ea:c9:a7:11:f3:
43:48:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:03:58 2025 by rpki-client