Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DubK-wT9MwYO0PmazEfKr-rph8k.roa
File: DubK-wT9MwYO0PmazEfKr-rph8k.roa (raw, json)
Hash identifier: +88Xkjqh+FKlYy0WQ3ZIox1ZUFZvQPiwrrehu+xTA00=
Subject key identifier: 0E:E6:CA:FB:04:FD:33:06:0E:D0:F9:9A:CC:47:CA:AF:EA:E9:87:C9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FCD3FE4D0C5C346389BE9FD5EE50BC5F7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DubK-wT9MwYO0PmazEfKr-rph8k.roa
Signing time: Fri 31 May 2024 06:04:27 +0000
ROA not before: Fri 31 May 2024 06:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:cd3f:b815/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 31 May 2024 06:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:3f:e4:d0:c5:c3:46:38:9b:e9:fd:5e:e5:0b:c5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 31 06:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ee6cafb04fd33060ed0f99acc47caafeae987c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d5:2f:68:6a:06:08:21:45:39:a7:8b:89:7f:
d4:16:df:01:9e:7b:94:b2:45:19:1e:f0:a1:e1:16:
fe:01:81:34:d8:43:b0:ef:b7:c5:31:e4:ad:ad:47:
e6:c4:f6:f6:9c:a1:a4:eb:7f:60:9e:ae:8e:51:81:
d7:06:4a:12:64:9b:e4:ad:eb:e5:12:d9:70:9b:54:
a7:14:f4:20:04:62:17:fc:32:1c:bf:8d:3b:91:e5:
08:77:a7:6f:e5:cb:82:4e:dc:20:64:09:e5:35:c2:
d9:3a:19:b0:e9:47:13:7b:60:eb:95:eb:98:76:bb:
2d:07:b2:19:ba:61:a9:fa:27:ca:a6:27:3e:14:75:
62:9a:fc:7b:57:64:00:a3:8d:50:f0:d1:48:3e:27:
fd:4a:6f:b9:36:88:a9:63:66:be:b2:75:77:19:50:
fc:fe:63:bb:11:87:ef:b2:6f:de:f5:8f:83:e0:1f:
58:6b:ff:65:19:ea:bd:57:ef:89:a6:00:d3:fb:ff:
bc:8c:de:7e:3c:aa:b8:05:33:ef:ec:eb:b1:38:b9:
57:b6:9f:6a:a4:28:f6:5d:74:36:cd:52:86:31:31:
d0:73:b5:e6:d8:47:b4:aa:52:0d:f9:45:2e:de:82:
ac:33:b7:01:90:d6:6a:22:ef:e5:29:11:e5:3f:70:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E6:CA:FB:04:FD:33:06:0E:D0:F9:9A:CC:47:CA:AF:EA:E9:87:C9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DubK-wT9MwYO0PmazEfKr-rph8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:c7:e2:ec:10:5c:42:56:d2:80:7a:32:57:1e:1c:1d:1a:52:
57:7b:7d:05:7e:cb:94:a9:5f:59:89:d9:9c:14:9c:88:4a:17:
d1:f9:b4:11:77:cb:b7:d8:47:b2:27:25:02:16:49:10:0f:25:
63:96:c3:cd:82:47:6b:ea:ec:cc:53:82:62:b0:35:e3:4b:50:
b4:6b:91:4b:bd:18:45:3e:0a:e2:02:6e:fe:16:76:a3:3e:f8:
32:dc:c4:a9:f7:e3:4e:02:c7:bc:f3:bc:a3:61:36:73:52:fa:
43:97:a2:4a:68:47:2e:00:97:fd:51:a8:94:2b:34:aa:de:c5:
40:ef:48:28:76:51:95:e8:80:6e:f1:b2:d6:d8:61:52:ea:e3:
df:71:3f:3c:4b:c6:16:53:d3:a5:e2:46:ac:41:3b:12:10:b2:
bd:31:8e:cd:f2:2b:b8:b0:56:f5:3d:6e:59:02:38:ad:99:29:
9b:70:0d:74:75:49:46:d4:b0:df:45:4b:dd:4c:63:5a:2c:6d:
f6:78:d0:7e:ac:3e:fc:20:d7:34:3d:20:c4:c2:fb:89:c9:86:
d9:45:24:08:f0:48:1f:dc:d9:e0:0e:43:94:df:8c:9d:49:1a:
48:96:49:c8:b1:88:51:e5:b5:be:10:d4:d5:17:bd:c2:65:26:
6a:15:0e:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/NP+TQxcNGOJvp/V7lC8X3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNTMxMDYwNDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWU2Y2FmYjA0ZmQzMzA2MGVkMGY5OWFjYzQ3Y2FhZmVhZTk4N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NUvaGoGCCFFOaeLiX/UFt8BnnuU
skUZHvCh4Rb+AYE02EOw77fFMeStrUfmxPb2nKGk639gnq6OUYHXBkoSZJvkrevl
Etlwm1SnFPQgBGIX/DIcv407keUId6dv5cuCTtwgZAnlNcLZOhmw6UcTe2DrleuY
drstB7IZumGp+ifKpic+FHVimvx7V2QAo41Q8NFIPif9Sm+5NoipY2a+snV3GVD8
/mO7EYfvsm/e9Y+D4B9Ya/9lGeq9V++JpgDT+/+8jN5+PKq4BTPv7OuxOLlXtp9q
pCj2XXQ2zVKGMTHQc7Xm2Ee0qlIN+UUu3oKsM7cBkNZqIu/lKRHlP3DaQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA7myvsE/TMGDtD5msxHyq/q6YfJMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRHViSy13VDlNd1lPMFBtYXpFZktyLXJwaDhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJXH4uwQXEJW0oB6Mlce
HB0aUld7fQV+y5SpX1mJ2ZwUnIhKF9H5tBF3y7fYR7InJQIWSRAPJWOWw82CR2vq
7MxTgmKwNeNLULRrkUu9GEU+CuICbv4WdqM++DLcxKn3404Cx7zzvKNhNnNS+kOX
okpoRy4Al/1RqJQrNKrexUDvSCh2UZXogG7xstbYYVLq499xPzxLxhZT06XiRqxB
OxIQsr0xjs3yK7iwVvU9blkCOK2ZKZtwDXR1SUbUsN9FS91MY1osbfZ40H6sPvwg
1zQ9IMTC+4nJhtlFJAjwSB/c2eAOQ5TfjJ1JGkiWScixiFHltb4Q1NUXvcJlJmoV
Dg4=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:25 2025 by rpki-client