Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2MfduaakdYY_qSQExums35SBuZg.roa
File: 2MfduaakdYY_qSQExums35SBuZg.roa (raw, json)
Hash identifier: Wt9RH1k7D4firMFpkI98HduxnwQTLEcSf+eAo+kOqQQ=
Subject key identifier: D8:C7:DD:B9:A6:A4:75:86:3F:A9:24:04:C6:E9:AC:DF:94:81:B9:98
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FDF837E1F8A1A85BE5AB47C6D209F3F25
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2MfduaakdYY_qSQExums35SBuZg.roa
Signing time: Mon 03 Jun 2024 19:11:27 +0000
ROA not before: Mon 03 Jun 2024 19:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Jun 2024 20:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:df:83:7e:1f:8a:1a:85:be:5a:b4:7c:6d:20:9f:3f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 3 19:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8c7ddb9a6a475863fa92404c6e9acdf9481b998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:5e:5e:3b:20:ca:ee:64:0e:21:7d:48:e3:
5e:f6:28:d1:31:b0:9b:c4:79:67:1d:aa:a6:3d:5d:
d4:6a:d7:21:d1:78:bf:c3:a7:99:fa:3c:7e:5c:ab:
28:3b:85:cd:e5:10:cb:6e:ed:17:4c:71:2d:dc:c5:
4a:0c:a7:19:af:fa:58:9d:70:6a:e1:47:d2:13:77:
63:15:95:40:6c:ad:e7:3b:2c:5c:15:9a:c5:88:73:
a3:1b:5a:85:87:66:3b:19:73:5f:7e:7e:7c:75:2e:
76:69:91:90:c8:9c:07:ba:a5:81:75:00:71:09:70:
5f:fb:68:a3:02:6f:42:6d:56:af:7f:bd:a3:bb:91:
2e:38:83:aa:b1:ab:f4:37:51:6c:be:c7:8e:78:42:
cb:09:73:4e:13:90:2a:63:d4:89:19:9f:db:9c:b8:
e3:b1:30:08:8a:7d:e6:d6:52:42:93:13:80:cf:6e:
86:d4:14:53:d0:68:10:56:9e:8c:ed:aa:9a:96:1f:
6f:22:bf:ce:88:db:00:49:25:b5:45:e2:57:b7:a8:
ff:cd:d9:26:ba:ce:35:bc:8a:96:85:f0:7b:44:a9:
63:10:d6:27:c6:7c:dd:d9:05:9e:c9:b2:be:d4:75:
c0:4f:58:0a:3a:44:13:6f:8a:5c:82:c0:81:aa:be:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C7:DD:B9:A6:A4:75:86:3F:A9:24:04:C6:E9:AC:DF:94:81:B9:98
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2MfduaakdYY_qSQExums35SBuZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:3c:cc:fb:e3:dd:ae:38:ac:11:6f:80:e1:5e:b1:63:ad:11:
6b:d0:1f:22:0c:18:67:26:d1:39:27:a5:a2:3f:5c:32:d8:d9:
fb:49:dd:ff:11:fa:52:f3:28:d4:ab:16:71:41:10:74:d0:cb:
11:8e:42:0c:25:6b:93:5c:b3:cc:3b:d0:eb:4f:8a:9c:e1:a7:
e2:77:e0:b3:58:54:49:0a:c0:ed:ef:a6:5c:59:f8:17:8a:fc:
21:fa:e5:07:35:8a:02:19:2b:cb:12:60:48:84:62:73:e0:ac:
86:1f:be:85:a8:a6:1c:81:f1:77:cd:3e:ff:a6:4a:71:88:1b:
c3:2c:3a:63:21:ab:38:6a:7d:61:89:e5:83:aa:b9:7a:61:ee:
84:ec:99:7d:61:4f:c3:db:8e:d8:61:ee:ba:97:0a:28:78:89:
91:b8:56:b7:9a:55:f7:57:08:f6:2a:bb:70:a7:0b:09:6d:9c:
d8:9f:84:93:cd:f5:17:6b:5b:5a:37:dc:ed:c0:7b:5f:dd:f6:
f1:30:08:54:b3:1b:9d:08:d7:d6:50:c8:9d:95:72:5c:a4:82:
e7:65:91:32:a5:55:fe:a0:e8:06:1c:1c:36:25:fe:d4:62:2c:
0a:ba:f9:6e:cd:64:42:c4:1d:72:d0:dd:d5:b7:c1:fb:b2:27:
3c:7f:6a:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/fg34fihqFvlq0fG0gnz8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjAzMTkxMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGM3ZGRiOWE2YTQ3NTg2M2ZhOTI0MDRjNmU5YWNkZjk0ODFiOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZJeXjsgyu5kDiF9SONe9ijRMbCb
xHlnHaqmPV3Uatch0Xi/w6eZ+jx+XKsoO4XN5RDLbu0XTHEt3MVKDKcZr/pYnXBq
4UfSE3djFZVAbK3nOyxcFZrFiHOjG1qFh2Y7GXNffn58dS52aZGQyJwHuqWBdQBx
CXBf+2ijAm9CbVavf72ju5EuOIOqsav0N1FsvseOeELLCXNOE5AqY9SJGZ/bnLjj
sTAIin3m1lJCkxOAz26G1BRT0GgQVp6M7aqalh9vIr/OiNsASSW1ReJXt6j/zdkm
us41vIqWhfB7RKljENYnxnzd2QWeybK+1HXAT1gKOkQTb4pcgsCBqr5LxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNjH3bmmpHWGP6kkBMbprN+UgbmYMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvMk1mZHVhYWtkWVlfcVNRRXh1bXMzNVNCdVpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJQ8zPvj3a44rBFvgOFe
sWOtEWvQHyIMGGcm0TknpaI/XDLY2ftJ3f8R+lLzKNSrFnFBEHTQyxGOQgwla5Nc
s8w70OtPipzhp+J34LNYVEkKwO3vplxZ+BeK/CH65Qc1igIZK8sSYEiEYnPgrIYf
voWophyB8XfNPv+mSnGIG8MsOmMhqzhqfWGJ5YOquXph7oTsmX1hT8Pbjthh7rqX
Cih4iZG4VreaVfdXCPYqu3CnCwltnNifhJPN9RdrW1o33O3Ae1/d9vEwCFSzG50I
19ZQyJ2VclykgudlkTKlVf6g6AYcHDYl/tRiLAq6+W7NZELEHXLQ3dW3wfuyJzx/
arg=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:17 2025 by rpki-client