Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0PASgOB6yl1r43PVHEu79OkopFI.roa
File: 0PASgOB6yl1r43PVHEu79OkopFI.roa (raw, json)
Hash identifier: Nmx7f32AWW3KzUPlS8e6fViGo4iL551qzGmz/BxWYC8=
Subject key identifier: D0:F0:12:80:E0:7A:CA:5D:6B:E3:73:D5:1C:4B:BB:F4:E9:28:A4:52
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01908181FF4EB0B2FE7E88BD79BDC45715BB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0PASgOB6yl1r43PVHEu79OkopFI.roa
Signing time: Fri 05 Jul 2024 06:08:18 +0000
ROA not before: Fri 05 Jul 2024 06:08:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 05 Jul 2024 07:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:81:81:ff:4e:b0:b2:fe:7e:88:bd:79:bd:c4:57:15:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 5 06:08:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0f01280e07aca5d6be373d51c4bbbf4e928a452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:b1:bc:bd:39:75:77:da:c1:a9:0c:6a:57:
60:47:c3:18:64:f0:c8:be:1c:1b:ae:ab:a3:e1:5d:
18:c9:77:09:11:f2:f8:ac:ae:b9:3d:58:f6:04:78:
c2:47:8c:60:92:41:59:24:af:29:b1:b6:c0:45:03:
d9:2d:71:da:f0:cd:a5:12:12:6b:31:32:74:91:de:
7b:4f:65:f9:91:38:c3:1d:7c:de:e7:52:76:83:7a:
52:cf:41:fc:36:1f:0f:31:f4:2a:9b:31:56:b9:28:
cf:68:b9:2b:ff:74:ec:92:8f:ba:42:db:6c:61:71:
af:fb:47:e2:47:7b:ce:41:70:f0:66:ac:18:b2:9f:
11:db:f8:b9:97:4b:f8:8b:20:ae:3f:2e:e9:9d:44:
26:52:57:83:3c:35:de:3a:43:70:e9:75:c7:e1:74:
ee:19:77:26:7d:ef:df:a5:4f:62:69:d5:db:af:1e:
02:01:da:75:4b:ca:1d:49:5c:56:5e:7b:ff:25:97:
15:a7:ea:43:cb:61:1e:fd:6e:46:36:5a:d0:eb:6b:
11:fe:8c:b1:4c:54:61:b6:19:19:3b:cd:c7:c5:ee:
b7:1f:d9:f7:f4:ef:34:d7:6a:e5:05:8b:be:85:a3:
1a:e4:28:c7:c2:1c:15:41:d3:ef:b9:b3:70:7a:6d:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:12:80:E0:7A:CA:5D:6B:E3:73:D5:1C:4B:BB:F4:E9:28:A4:52
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0PASgOB6yl1r43PVHEu79OkopFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:15:16:9f:c0:09:21:7a:9a:d8:86:24:61:72:aa:4a:63:99:
84:bc:cb:69:dc:4d:2b:2e:16:b8:47:47:dd:a0:e1:33:1e:a2:
50:2e:08:38:0d:78:59:53:cd:80:dc:2a:e4:f9:1a:0c:c2:21:
8a:91:38:6b:d7:53:00:2b:83:90:fd:d9:eb:88:c9:db:70:8c:
f3:64:10:c2:03:7d:a2:da:70:9f:95:51:37:cb:e9:0e:ff:29:
a9:23:38:e5:61:32:d8:92:e2:ce:77:59:cf:83:7d:06:01:76:
d3:f4:2d:63:85:e0:4d:1c:b9:41:df:27:5c:33:58:34:cb:9c:
80:b0:c5:10:69:11:59:28:54:6b:f6:fd:5a:c4:69:66:23:2b:
da:c8:71:3e:f6:17:d1:b3:6b:17:f9:c0:cd:4c:9b:56:7b:4a:
a3:b1:0a:16:53:24:02:07:96:6a:8c:10:a7:36:d3:55:f7:0b:
10:0f:aa:43:a4:a0:1a:93:9d:fb:cb:51:c3:61:bf:05:59:02:
9f:c8:5a:5e:c1:c0:76:c5:5e:a0:20:09:7c:09:84:1a:cb:50:
21:96:52:93:14:2c:09:52:54:4c:d6:ae:1a:70:c4:fb:c5:05:
4d:21:bc:fe:32:7d:b3:0b:68:32:24:88:3a:26:f4:c1:bd:c5:
21:40:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:49 2025 by rpki-client