Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ApsAngacwPwnmSCNpNOmfOtH8v0.roa
File: ApsAngacwPwnmSCNpNOmfOtH8v0.roa (raw, json)
Hash identifier: xTnWfU6Cy2QSBie90D5asB4y41J1JK+z1BrbLRPj8Hg=
Subject key identifier: 02:9B:00:9E:06:9C:C0:FC:27:99:20:8D:A4:D3:A6:7C:EB:47:F2:FD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190B34C34D8BBA493CBAC594AC334F3C608
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ApsAngacwPwnmSCNpNOmfOtH8v0.roa
Signing time: Sun 14 Jul 2024 22:10:34 +0000
ROA not before: Sun 14 Jul 2024 22:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 Jul 2024 23:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b3:4c:34:d8:bb:a4:93:cb:ac:59:4a:c3:34:f3:c6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 14 22:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=029b009e069cc0fc2799208da4d3a67ceb47f2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e9:23:a2:ba:72:82:8d:3b:0a:47:6e:6a:c2:
b5:dc:8c:6d:72:99:df:a6:2e:e2:eb:ef:a7:3c:0b:
34:17:37:18:63:12:6b:e6:fe:22:1d:a0:f8:e8:3e:
c5:8d:05:ca:61:eb:3d:6a:eb:02:d1:e0:4e:c3:9b:
a6:00:6c:90:d5:eb:3f:72:75:26:37:f6:c4:c2:f5:
54:85:fe:6a:1e:99:b8:f4:a6:03:92:65:a3:4e:01:
30:90:30:4c:25:10:99:13:30:51:6f:1d:b1:db:34:
32:47:a7:8a:46:55:57:5e:4e:f5:7f:c9:4b:b8:93:
35:d2:a3:32:30:77:a0:6f:2e:a2:41:6a:a9:8d:e6:
87:7f:a7:f3:6b:51:fc:73:df:5b:94:00:70:6f:da:
5e:98:92:67:60:4c:7b:46:91:2c:62:77:7e:54:ac:
b3:c2:1d:74:48:e5:dd:f9:6e:47:9b:26:bb:03:11:
b6:64:34:29:18:51:3b:ff:6d:08:b7:81:bd:d8:e2:
fa:2e:ee:72:40:4b:92:84:18:16:0b:83:b1:f7:c0:
da:4d:a2:d8:b8:cf:fa:15:4d:ed:15:ab:25:27:bc:
f8:c6:ac:14:a7:f5:42:03:f4:14:34:11:10:17:85:
ca:f3:74:0a:58:26:17:0f:02:18:2a:84:57:86:33:
eb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9B:00:9E:06:9C:C0:FC:27:99:20:8D:A4:D3:A6:7C:EB:47:F2:FD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ApsAngacwPwnmSCNpNOmfOtH8v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:b2:a9:2c:ec:82:d8:64:3f:09:45:10:9a:b5:88:19:51:b3:
11:83:81:f6:54:06:d1:81:89:06:b2:b6:cb:d7:c8:32:42:66:
83:7f:8f:a9:e2:55:5d:4c:d7:e3:55:18:4e:94:29:c7:ff:e3:
d3:eb:49:93:75:20:b3:ea:17:0e:9c:d6:b0:ec:ba:91:5e:7c:
ac:67:03:6f:2c:4e:f0:aa:cd:f8:c2:6a:44:29:31:10:69:0b:
ea:c9:c8:45:51:a2:b1:60:66:68:2e:78:cc:b3:d1:5e:bf:e2:
67:9a:22:2f:90:26:71:44:8b:73:c0:fb:b0:30:79:e0:e0:34:
61:e5:e6:57:5b:27:c7:12:a4:cf:da:3d:a5:19:f4:70:1c:0e:
5f:d8:76:a3:db:75:e8:0b:29:49:ab:85:2c:75:7e:1c:e9:3c:
58:3d:14:a1:d6:dd:da:e3:31:eb:bf:0a:b2:70:f6:51:d4:2d:
04:3d:77:88:78:3a:9e:ca:0b:e6:9b:f8:24:f4:01:87:16:54:
be:ae:a0:29:5c:96:58:35:00:96:cf:28:1d:e7:09:87:e5:5b:
68:e7:b5:c2:87:80:37:05:f9:62:02:48:95:ba:63:41:dc:70:
05:cb:98:f1:89:39:53:d0:c2:f2:13:59:9d:c0:c3:8d:2e:00:
ab:d5:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:58 2025 by rpki-client