Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CpHOUa9XdQjauPOwhg3umkHiNbU.roa
File: CpHOUa9XdQjauPOwhg3umkHiNbU.roa (raw, json)
Hash identifier: B0Kv3uGvZYzhLLctU/pI5yvKgEekeIyK5EPyVMWcUVE=
Subject key identifier: 0A:91:CE:51:AF:57:75:08:DA:B8:F3:B0:86:0D:EE:9A:41:E2:35:B5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FD6496E17F8817CAD8948B60CE6428BB2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CpHOUa9XdQjauPOwhg3umkHiNbU.roa
Signing time: Sun 02 Jun 2024 00:11:27 +0000
ROA not before: Sun 02 Jun 2024 00:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Jun 2024 01:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d6:49:6e:17:f8:81:7c:ad:89:48:b6:0c:e6:42:8b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 2 00:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a91ce51af577508dab8f3b0860dee9a41e235b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a2:e0:a5:44:b6:a8:62:9f:fc:0b:55:54:21:
f8:2f:de:8d:64:48:50:5a:f8:fb:ee:0a:9c:fa:f0:
ae:97:a3:87:9e:8a:9b:bf:3f:26:2d:1c:26:a1:e5:
43:09:68:47:2c:52:55:3a:02:14:a4:60:c8:b8:8a:
83:41:49:1e:7d:bc:22:5d:6e:39:f8:97:a8:a1:55:
26:fb:85:c2:db:46:55:ed:62:9b:0e:43:f0:30:83:
bc:58:10:92:26:cb:6e:61:3e:c4:7b:9d:ba:c9:92:
52:0a:ad:cd:30:c6:85:e9:42:65:81:6e:3b:c1:20:
27:c0:62:ec:39:6d:25:7f:d5:83:4d:a1:dd:c2:47:
74:aa:4b:1f:d2:ac:cd:0a:5b:aa:94:bd:c0:22:f9:
66:8d:9a:db:43:5e:b4:7e:6f:82:34:7d:4e:db:54:
f9:5f:f2:fd:91:f4:ea:dd:15:fc:d0:d5:4d:41:c1:
6f:21:60:ba:71:77:61:b9:28:ca:30:42:82:03:65:
3d:aa:a9:28:8f:08:7e:92:a8:9d:54:46:08:50:96:
71:dc:80:e8:68:ff:f1:59:a4:f0:1c:2e:33:c9:e8:
b0:aa:f6:22:14:66:55:50:af:6c:43:3f:d5:78:b9:
9f:f4:ea:2d:fd:05:98:eb:d9:a0:37:b3:5e:7c:74:
8f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:91:CE:51:AF:57:75:08:DA:B8:F3:B0:86:0D:EE:9A:41:E2:35:B5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CpHOUa9XdQjauPOwhg3umkHiNbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:bc:f5:bf:3c:bf:f8:55:ab:53:f4:e2:c2:ba:86:69:24:c6:
6f:89:3d:ae:c6:42:0d:0e:f0:f4:60:ff:7c:04:b0:61:83:6b:
c9:19:84:05:80:d9:ae:7c:28:4c:07:bc:78:e8:eb:f0:c5:b4:
97:e7:0c:2b:7b:f7:21:3b:18:70:e3:fd:2f:8c:77:d9:3d:88:
78:f4:28:16:62:c8:3d:14:8f:6b:85:25:7b:94:a4:73:82:eb:
aa:94:45:17:23:4b:27:b6:71:e0:66:c0:17:24:b3:dc:22:17:
7b:f9:4d:38:c6:6c:09:9c:75:a3:cb:1a:0c:3e:f4:22:06:dd:
9c:ae:6a:ac:1f:42:e1:84:db:0e:cd:85:3d:b9:9b:cf:00:dc:
28:80:02:c4:95:f5:a9:05:4f:32:f5:21:ad:47:77:99:a0:fb:
a0:90:bf:03:92:22:4b:6b:3b:f2:ae:c3:06:24:8d:63:f0:26:
3e:bc:92:fa:8d:f7:f6:54:f5:5f:14:d9:cc:2f:48:30:8a:8a:
06:eb:0c:fd:fa:cf:0b:d9:d8:bb:5a:28:b3:e5:60:f5:32:ac:
25:e7:c0:b2:0a:0c:29:e7:66:2d:53:5d:7a:7b:02:3d:5f:c7:
90:ef:6f:a5:7e:bc:bf:54:a8:55:91:33:6e:1b:25:68:d2:75:
02:4f:82:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:35 2025 by rpki-client