Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4lYTbP6EMhIpIf1WNQxj-F-avOg.roa
File: 4lYTbP6EMhIpIf1WNQxj-F-avOg.roa (raw, json)
Hash identifier: FoCmMNsnvKmkKxV1EZ71Ay1o+76K63Z4jEIyaqf/4Mw=
Subject key identifier: E2:56:13:6C:FE:84:32:12:29:21:FD:56:35:0C:63:F8:5F:9A:BC:E8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01908B6484FB79371CEF45AC78EAE2D07589
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4lYTbP6EMhIpIf1WNQxj-F-avOg.roa
Signing time: Sun 07 Jul 2024 04:12:18 +0000
ROA not before: Sun 07 Jul 2024 04:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 05:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8b:64:84:fb:79:37:1c:ef:45:ac:78:ea:e2:d0:75:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 7 04:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e256136cfe8432122921fd56350c63f85f9abce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:ff:e9:fb:b9:e0:65:95:19:71:7e:84:05:
78:5a:b3:97:b9:37:3b:ba:a1:3e:d8:37:ac:43:f3:
c7:e9:08:1a:c5:81:98:0d:4a:b8:bb:2a:51:7c:86:
c7:5a:8b:0e:77:3a:94:d1:ac:1d:c2:c6:72:1c:c3:
88:fb:0d:11:5f:c0:c3:b5:64:d6:a1:c5:61:1b:dc:
c5:31:77:d9:19:3e:bd:0e:9e:8a:f3:98:b9:c0:99:
58:21:7c:dc:64:c6:fb:83:dd:40:e7:9f:e0:fc:87:
3d:fb:ea:29:6a:b4:36:0c:a5:71:05:fd:7e:20:50:
48:be:ee:78:33:30:07:d3:18:71:fe:f7:ed:7f:3e:
9e:35:59:ee:1b:12:8c:63:f3:79:15:a6:f8:ad:2c:
6e:64:06:9e:8f:c6:f5:50:bb:3f:1f:fb:97:a8:75:
58:cd:05:41:99:ec:76:fe:6a:6c:03:f7:bc:7f:da:
c4:ec:05:23:ed:a6:10:3f:8c:3e:81:97:ab:60:e8:
8d:63:76:40:b2:57:d4:89:22:76:06:97:42:59:e3:
85:0b:80:4c:e8:bc:25:68:25:55:01:bc:d6:96:a3:
d0:0c:5e:2b:d6:9c:d9:b6:bc:bc:c9:d2:a1:8b:97:
2a:e1:9e:c8:55:9c:79:16:52:03:36:21:d0:8a:2b:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:56:13:6C:FE:84:32:12:29:21:FD:56:35:0C:63:F8:5F:9A:BC:E8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4lYTbP6EMhIpIf1WNQxj-F-avOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:20:d5:06:99:53:b0:ff:c2:fd:20:47:bb:63:ad:a4:8f:d3:
57:b5:bb:2a:7d:8d:db:4f:e2:d7:f5:3e:c8:82:0c:46:91:43:
e2:ee:2c:cb:11:9b:75:3a:73:14:ca:af:25:f0:9e:eb:be:29:
d9:ad:a3:78:b8:b0:40:5b:79:47:73:31:35:d5:5a:05:93:f2:
72:55:91:14:46:ca:c9:13:d4:91:cd:06:f1:c3:8f:46:b6:bd:
5d:ba:93:cf:9b:aa:2f:fb:16:9c:2c:9d:03:0f:d6:0a:13:28:
cf:9b:a3:83:6f:c2:3e:61:4e:a5:ff:b3:ef:61:6c:8e:55:07:
81:99:49:44:bb:74:ac:b0:d1:3e:87:80:db:af:78:a2:e6:e6:
2c:c7:95:03:2a:3d:30:1d:fb:d7:28:85:3c:d3:9d:77:88:c9:
27:18:47:48:d2:3c:1e:a6:15:b3:5f:b0:52:36:e3:8a:d3:e2:
0f:d7:81:84:23:0b:76:33:ca:d9:43:97:67:1a:b8:b4:ae:88:
bd:43:d7:59:8f:e7:a2:af:40:cd:7c:e5:69:10:a2:af:7a:ae:
4f:d6:56:56:f5:ce:9c:d7:e7:63:c1:76:89:e1:d8:a8:12:de:
cc:5e:d9:31:a1:3c:13:08:7f:93:f2:0b:16:63:85:52:23:4f:
ed:3b:35:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:30 2025 by rpki-client