Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7PbSvUR6D7rqUXVUoHl6lT5UEuY.roa
File: 7PbSvUR6D7rqUXVUoHl6lT5UEuY.roa (raw, json)
Hash identifier: Czip7RTsyxMogGoinqhGFWyNx18vfh/mruX8SrXtLlI=
Subject key identifier: EC:F6:D2:BD:44:7A:0F:BA:EA:51:75:54:A0:79:7A:95:3E:54:12:E6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FF94174DC0AF8B93430AEF3B2DB1E75C7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7PbSvUR6D7rqUXVUoHl6lT5UEuY.roa
Signing time: Sat 08 Jun 2024 19:09:27 +0000
ROA not before: Sat 08 Jun 2024 19:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Jun 2024 20:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f9:41:74:dc:0a:f8:b9:34:30:ae:f3:b2:db:1e:75:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 8 19:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecf6d2bd447a0fbaea517554a0797a953e5412e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:fc:16:02:91:13:28:7a:5e:1b:41:6c:35:
d4:00:a5:e5:ef:16:69:4d:dd:30:ae:5d:79:7e:1e:
eb:df:a6:f1:ea:4a:bb:fd:30:3e:b8:81:1d:69:45:
1f:9a:73:78:74:2c:47:de:2f:8a:79:f7:7d:f1:9c:
3d:57:85:d8:9c:d8:d0:cb:09:8d:6a:c7:cc:07:f7:
86:4d:7a:df:3a:ac:dc:03:0b:48:29:1b:b4:c0:c1:
a4:3f:34:3b:1c:80:5c:e8:c4:e1:23:6f:91:63:ce:
e6:cb:30:bb:87:61:ef:e3:9f:33:e8:8c:28:e7:44:
37:17:7a:70:15:f4:b1:d4:f0:06:ae:56:73:0b:60:
7c:d0:d7:31:e4:ff:21:f0:9c:13:6d:a2:4b:01:71:
62:8d:b5:1a:92:af:45:f2:ec:03:84:76:ce:69:97:
83:c3:f6:44:ee:51:fc:7f:03:79:2e:d1:7d:35:b9:
2d:54:e2:6b:38:dc:68:d1:1b:93:95:9b:a0:6c:72:
9f:3d:a9:17:f1:93:d3:ca:df:06:f7:38:70:18:4e:
65:5e:08:c3:b4:97:8f:9a:7e:13:63:cd:38:86:02:
f8:05:80:dc:a1:fc:a2:cf:30:09:29:aa:16:ff:b2:
fa:8b:a2:cc:15:b7:4d:fb:43:d8:68:ec:4e:74:bf:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F6:D2:BD:44:7A:0F:BA:EA:51:75:54:A0:79:7A:95:3E:54:12:E6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7PbSvUR6D7rqUXVUoHl6lT5UEuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:83:33:b1:b1:1f:0b:84:26:b9:3f:5c:3d:fc:e2:b9:c4:5f:
84:8a:ec:b2:3e:5a:51:13:d1:1f:db:5e:74:5e:93:83:3f:24:
b8:45:8d:69:57:21:68:95:63:55:a6:fb:f7:9a:73:bd:ad:ae:
05:16:09:22:20:b5:c0:21:10:fa:62:81:ca:d8:70:8d:cd:4d:
ba:9f:4f:df:3f:1c:3f:9c:a2:99:ec:3e:af:40:30:c8:57:ff:
25:88:9c:f5:03:05:0a:cd:51:26:a6:95:f2:78:bd:03:c9:4e:
2b:c5:e0:f5:1a:84:70:83:9c:92:ad:b7:d0:54:8d:6b:82:36:
98:7f:86:f2:cd:07:0e:0e:9c:c8:1c:2a:b1:e9:3b:38:59:30:
42:50:0d:cc:fc:d0:a3:f1:70:07:6a:6d:dd:f9:55:c6:2d:c6:
a2:e8:11:3d:d7:af:a4:e9:8a:0f:1a:38:01:f8:7b:47:cc:02:
a8:cf:71:e0:b2:54:1b:01:bf:26:22:32:86:01:23:7b:a7:a1:
0f:9d:cb:85:62:ef:f3:70:10:df:b1:83:f7:a6:5b:8b:46:3d:
65:c5:82:d9:3e:83:68:e2:0e:62:9b:4f:e5:0e:98:f4:3d:9a:
cb:03:d6:f4:3d:a0:3e:7e:40:64:51:6f:ea:81:8d:7b:5b:c8:
93:f3:a2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:57 2025 by rpki-client