Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3Zw2v_i53lAVa-pMU5taTI6dPs4.roa
File: 3Zw2v_i53lAVa-pMU5taTI6dPs4.roa (raw, json)
Hash identifier: KjMydQbJNL3il1SxU8WZXztrfPmxjHk2hptNamqMmK4=
Subject key identifier: DD:9C:36:BF:F8:B9:DE:50:15:6B:EA:4C:53:9B:5A:4C:8E:9D:3E:CE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190705B1FDAA6876F4DF13A14A3F8544AEC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3Zw2v_i53lAVa-pMU5taTI6dPs4.roa
Signing time: Mon 01 Jul 2024 22:12:18 +0000
ROA not before: Mon 01 Jul 2024 22:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jul 2024 23:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:70:5b:1f:da:a6:87:6f:4d:f1:3a:14:a3:f8:54:4a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 1 22:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd9c36bff8b9de50156bea4c539b5a4c8e9d3ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:f7:18:5d:0c:ec:2a:ed:bc:8a:fb:74:79:
b7:00:7c:20:ad:3d:87:21:cb:e7:ff:db:dc:49:51:
a6:11:6b:05:ec:41:e2:e0:49:bd:97:56:c0:6e:4d:
86:63:2d:ec:5a:2a:71:f3:08:07:99:7d:53:db:6f:
d6:3a:cd:56:69:58:41:34:bf:54:c6:d4:4f:ba:6f:
c7:8e:04:b8:45:da:fc:64:e1:a4:0e:14:70:7f:9a:
60:c3:d3:87:d2:8c:a9:6d:0e:bc:e2:d7:ae:64:30:
4b:34:4f:3f:af:e6:c8:83:df:4a:7c:78:ff:5f:df:
6b:e2:dc:f2:41:bd:29:e9:31:e0:42:b4:3a:10:d8:
4a:7a:d0:e5:35:e1:7f:3f:de:1a:04:40:e2:e9:b8:
82:b4:4d:5a:e1:0b:a5:f4:08:66:2a:c8:f0:76:2d:
cc:72:95:fd:5a:7a:e5:b7:76:d9:92:85:fa:38:60:
0b:c6:87:d1:39:75:b4:30:bb:bf:6f:42:80:0a:8d:
08:ae:26:8c:eb:45:a0:4d:17:15:69:bc:c5:21:9f:
3c:38:f3:b2:c6:39:90:c6:ef:b5:b6:64:23:c6:50:
03:88:8f:b4:81:43:1b:4b:38:d0:a2:30:fd:c2:b8:
fa:45:b2:ac:df:b9:b3:6a:22:80:55:1e:a3:a4:c7:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9C:36:BF:F8:B9:DE:50:15:6B:EA:4C:53:9B:5A:4C:8E:9D:3E:CE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3Zw2v_i53lAVa-pMU5taTI6dPs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:0f:68:2c:7c:48:db:4d:60:a3:4b:54:22:90:fd:f9:d7:16:
70:83:46:7f:0a:c8:f5:3c:51:88:75:35:1d:58:c5:25:97:b2:
c5:c7:e9:d1:44:a6:d4:37:88:f9:a7:fb:b2:39:e7:58:8c:3c:
71:2b:c9:62:40:f5:76:85:34:ce:ad:e2:ea:54:5a:a6:2c:d1:
3a:13:3d:c5:ba:b0:c3:4a:71:f4:24:65:14:2c:99:11:a4:74:
74:8c:bd:f4:6d:5d:87:6e:38:19:7d:2d:e4:20:1a:e5:af:d0:
d4:fa:d5:5b:da:37:23:63:2a:c7:3f:b5:91:77:2c:5d:86:4c:
68:8d:99:2a:92:46:66:d3:aa:69:4f:d8:83:e0:3b:1e:e6:81:
a8:3a:1e:0e:21:9b:a1:dd:04:63:28:45:a8:ac:84:53:ef:ca:
5c:34:32:97:04:f1:bb:48:5d:88:80:e5:59:b7:bd:2d:68:6a:
5e:22:4e:11:31:00:ab:8f:0c:ed:85:c4:84:18:62:45:44:0f:
27:78:af:c3:53:7c:c3:fc:eb:4d:3b:36:ff:20:34:06:9c:fe:
cd:79:bb:af:db:f0:07:8c:5c:09:bc:7f:2e:5a:90:99:a4:b2:
1d:be:15:94:e8:3e:9c:22:af:fd:e2:4c:0e:f4:06:a7:a5:c0:
1c:c5:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:40 2025 by rpki-client