Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AFdnBKGThldlgBBVFNjydj5UFyU.roa
File: AFdnBKGThldlgBBVFNjydj5UFyU.roa (raw, json)
Hash identifier: /skfJiQurwQFbuR5Ni/HWF0N4FBubz+60VTm+SuMvVQ=
Subject key identifier: 00:57:67:04:A1:93:86:57:65:80:10:55:14:D8:F2:76:3E:54:17:25
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01905D4060A4C61610B2EAD1A851D081DC3E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AFdnBKGThldlgBBVFNjydj5UFyU.roa
Signing time: Fri 28 Jun 2024 05:10:18 +0000
ROA not before: Fri 28 Jun 2024 05:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 28 Jun 2024 06:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:40:60:a4:c6:16:10:b2:ea:d1:a8:51:d0:81:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 28 05:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00576704a19386576580105514d8f2763e541725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:7b:e5:0f:a9:69:5f:b1:99:4f:f0:be:fa:
08:fb:c2:20:43:2e:98:57:af:70:30:cb:38:dc:2d:
fd:de:ea:d5:39:36:5a:03:13:62:39:de:dc:bc:59:
03:91:4e:16:0b:e1:9d:4b:93:a9:ff:a8:ab:48:25:
84:06:bf:35:4f:f9:6a:c4:91:9a:e1:0d:2e:4c:cc:
ca:ca:c4:d4:76:50:09:23:1a:35:6e:b4:7a:47:08:
c2:6f:06:e5:93:6e:1b:1f:c0:8a:22:57:64:3c:b8:
7a:64:a9:9d:0c:a9:2f:ff:96:a2:c8:a9:af:69:b8:
4f:95:f8:94:7e:bf:09:a7:65:6e:af:1c:ec:c2:f9:
ab:6c:f0:10:07:10:05:48:2c:b2:fa:a3:be:55:79:
6a:7c:b6:b6:09:79:47:f0:e7:29:ce:c9:87:41:bb:
41:ea:81:2d:0b:35:8c:2a:b1:3d:06:04:27:3f:9b:
32:f5:a6:ed:e9:6c:bc:ba:07:00:d1:65:fd:45:51:
55:07:18:8c:c5:32:9d:4b:e7:ac:32:2b:77:39:0e:
f6:f0:65:c5:f2:49:61:6e:4a:88:91:f2:ee:20:3e:
d6:cc:ad:08:e0:fb:3a:5f:db:f2:cf:73:ec:7f:29:
f2:89:e3:35:7b:9f:1d:87:90:47:dc:f0:f0:00:cb:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:57:67:04:A1:93:86:57:65:80:10:55:14:D8:F2:76:3E:54:17:25
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AFdnBKGThldlgBBVFNjydj5UFyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:00:e4:2f:18:43:28:4c:ba:ef:04:3b:6a:c8:8b:b1:61:68:
00:88:29:3f:0d:d5:23:2e:82:b5:89:bf:74:7f:da:df:49:43:
88:7c:9f:7b:33:47:3c:4f:91:e6:d2:d3:38:39:e0:6b:15:f1:
65:7c:c3:2a:c0:84:16:7f:fe:fc:b9:b0:43:db:08:75:df:74:
3a:c2:56:cb:4c:5f:51:99:db:86:4d:55:dd:3e:60:ef:4b:09:
20:a4:c8:8f:c1:5e:b0:0d:bf:ca:ee:a7:89:30:36:7e:ab:0b:
7b:fd:be:a5:1c:07:d4:cc:b7:7d:b2:0e:fc:d5:9a:6d:85:67:
96:3a:5b:b7:8c:01:8c:79:32:ad:30:91:79:d4:f1:12:6f:0e:
8c:89:4e:1a:e4:11:f7:88:5a:ac:33:aa:53:cc:df:34:4f:1a:
20:b2:70:e3:c3:ca:14:6a:28:20:e6:0f:1d:bd:46:c2:30:52:
e5:a2:08:c8:7d:9f:d1:b9:34:2f:ff:cb:52:9c:1c:31:64:55:
e7:4e:79:dc:3d:6c:31:c8:4d:11:c8:21:cb:ae:0a:82:65:6d:
88:68:03:5a:7b:71:a4:e5:07:13:74:9a:5b:54:1d:93:ce:22:
d8:d8:3e:11:e2:93:f3:85:8c:d2:db:84:ed:13:50:91:95:a0:
67:54:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:40 2025 by rpki-client