Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/043kbsIxqBBqQWaeYgekCtEc1j8.roa
File: 043kbsIxqBBqQWaeYgekCtEc1j8.roa (raw, json)
Hash identifier: U6mzlbVlL5eADuzBCOTa44wRx/wacYxs3ds5cyjAMFI=
Subject key identifier: D3:8D:E4:6E:C2:31:A8:10:6A:41:66:9E:62:07:A4:0A:D1:1C:D6:3F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A59353FD204CEA86C652FED4B505DEED
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/043kbsIxqBBqQWaeYgekCtEc1j8.roa
Signing time: Fri 12 Jul 2024 06:13:34 +0000
ROA not before: Fri 12 Jul 2024 06:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 Jul 2024 07:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a5:93:53:fd:20:4c:ea:86:c6:52:fe:d4:b5:05:de:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 12 06:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d38de46ec231a8106a41669e6207a40ad11cd63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:1f:aa:ca:7f:65:bd:25:a6:d4:69:e0:54:
42:58:71:01:38:9b:e4:f4:35:bf:99:d4:15:42:1a:
f2:dc:85:8d:8f:26:56:5b:b5:9c:3e:fc:a9:66:0a:
9a:0b:3b:c4:fc:ad:fc:13:54:2d:34:50:6a:22:26:
ff:89:f9:11:a1:f3:0a:21:4c:d2:17:d6:bb:fc:d7:
df:bc:66:63:9d:6e:04:8f:14:7b:9f:d9:49:e0:ff:
56:fb:98:2c:d9:8a:dc:4e:87:70:ac:fd:aa:3b:34:
e3:f0:40:1e:e7:94:be:50:f7:98:31:62:47:22:94:
7f:3e:8c:8e:5d:2e:72:28:16:1e:45:28:ff:08:ee:
87:77:2d:93:d5:72:2b:2b:cb:61:58:c5:a0:50:66:
62:88:de:4c:28:2d:0b:be:cb:01:bf:c7:04:17:f3:
dd:58:43:72:b1:b7:fd:1b:14:df:fa:73:88:13:b2:
96:a4:86:26:6b:a6:8c:d1:cd:5a:9f:b1:0b:47:75:
4f:8e:0b:5f:17:53:5c:d3:58:2f:86:df:6a:5c:f5:
76:1b:91:c7:da:5f:36:69:b7:72:a1:2a:91:88:17:
97:c2:e6:df:46:78:ed:d2:c4:88:ab:16:ff:19:9e:
9f:57:b0:77:d6:fd:6c:0f:5d:df:e8:e8:f8:85:b9:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8D:E4:6E:C2:31:A8:10:6A:41:66:9E:62:07:A4:0A:D1:1C:D6:3F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/043kbsIxqBBqQWaeYgekCtEc1j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:7f:92:d4:e4:eb:c3:e2:83:63:c4:50:b3:c8:65:ab:dc:e6:
d6:e2:2f:43:04:86:6e:ee:f7:a6:c1:09:a7:3b:ee:c1:e2:a6:
f1:06:89:ff:49:ef:2d:23:84:d3:46:95:41:70:ec:2a:40:33:
f0:14:da:e5:e7:ea:54:a3:06:5f:f4:e5:a9:c0:75:2d:c0:9d:
bc:d7:6c:45:6d:d6:65:73:7c:ba:cc:b2:b5:1d:1d:57:7e:08:
2a:73:26:83:47:70:53:a4:a1:eb:ea:d0:b4:ac:ef:61:3a:a5:
d4:77:a4:2f:8d:48:8b:85:06:d6:77:d9:83:1d:f7:80:c6:dc:
4e:6b:e5:a6:af:59:0b:46:c1:52:da:e2:c3:cb:28:d4:ff:34:
81:18:bb:0d:ff:ab:f0:49:28:0e:33:74:cd:ae:5a:37:b0:44:
df:a3:bc:06:02:9c:28:4f:f1:37:f9:98:b0:1d:4d:97:d2:62:
ea:f4:a3:f2:06:26:9e:6a:3c:9e:04:d8:c1:c1:c7:09:7e:43:
1d:fd:5c:2a:2c:1c:4a:be:c8:1a:ad:92:b1:55:98:32:03:0b:
07:5a:b2:f8:52:9e:e7:3c:a0:f7:2a:b6:6c:04:7a:1c:7d:08:
2d:97:06:8a:be:24:f7:2f:2e:95:e4:46:87:13:6a:a2:c2:b2:
ec:f0:be:6d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZClk1P9IEzqhsZS/tS1Bd7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzEyMDYxMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzhkZTQ2ZWMyMzFhODEwNmE0MTY2OWU2MjA3YTQwYWQxMWNkNjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj8fqsp/Zb0lptRp4FRCWHEBOJvk
9DW/mdQVQhry3IWNjyZWW7WcPvypZgqaCzvE/K38E1QtNFBqIib/ifkRofMKIUzS
F9a7/NffvGZjnW4EjxR7n9lJ4P9W+5gs2YrcTodwrP2qOzTj8EAe55S+UPeYMWJH
IpR/PoyOXS5yKBYeRSj/CO6Hdy2T1XIrK8thWMWgUGZiiN5MKC0LvssBv8cEF/Pd
WENysbf9GxTf+nOIE7KWpIYma6aM0c1an7ELR3VPjgtfF1Nc01gvht9qXPV2G5HH
2l82abdyoSqRiBeXwubfRnjt0sSIqxb/GZ6fV7B31v1sD13f6Oj4hbnj/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNON5G7CMagQakFmnmIHpArRHNY/MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvMDQza2JzSXhxQkJxUVdhZVlnZWtDdEVjMWo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI9/ktTk68Pig2PEULPI
Zavc5tbiL0MEhm7u96bBCac77sHipvEGif9J7y0jhNNGlUFw7CpAM/AU2uXn6lSj
Bl/05anAdS3AnbzXbEVt1mVzfLrMsrUdHVd+CCpzJoNHcFOkoevq0LSs72E6pdR3
pC+NSIuFBtZ32YMd94DG3E5r5aavWQtGwVLa4sPLKNT/NIEYuw3/q/BJKA4zdM2u
WjewRN+jvAYCnChP8Tf5mLAdTZfSYur0o/IGJp5qPJ4E2MHBxwl+Qx39XCosHEq+
yBqtkrFVmDIDCwdasvhSnuc8oPcqtmwEehx9CC2XBoq+JPcvLpXkRocTaqLCsuzw
vm0=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:20 2025 by rpki-client