Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EeRtmeQVaZDi8OaaEGolWoLjwEs.roa
File: EeRtmeQVaZDi8OaaEGolWoLjwEs.roa (raw, json)
Hash identifier: igdJh1/+RNZrdVednz/+u4W06sGALtT/E0gXkBSCbc4=
Subject key identifier: 11:E4:6D:99:E4:15:69:90:E2:F0:E6:9A:10:6A:25:5A:82:E3:C0:4B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190901DED30312FC7AE934ADB8854440BA3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EeRtmeQVaZDi8OaaEGolWoLjwEs.roa
Signing time: Mon 08 Jul 2024 02:13:18 +0000
ROA not before: Mon 08 Jul 2024 02:13:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Jul 2024 03:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:90:1d:ed:30:31:2f:c7:ae:93:4a:db:88:54:44:0b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 8 02:13:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11e46d99e4156990e2f0e69a106a255a82e3c04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:77:9d:ee:cd:82:99:68:9d:ef:ab:56:75:
08:3c:0c:79:40:6e:32:fc:65:78:5b:9f:7b:cc:b4:
67:e5:fc:fe:7e:a8:dc:33:74:b7:cc:e6:74:79:a8:
e2:d3:ad:e6:1b:34:71:6f:fb:4e:1f:5a:03:6b:19:
c0:cd:06:7b:13:6b:c1:d9:73:70:85:47:2b:2f:24:
61:c8:af:95:70:b1:92:15:ba:d2:ff:c2:e0:4e:62:
61:f6:64:11:1d:a2:9b:f0:a2:03:28:a0:37:c4:e5:
6c:f4:40:d6:aa:8b:99:80:2e:6a:51:43:35:f4:eb:
44:a7:bf:f0:24:7a:d0:f2:e6:a6:73:f8:ab:30:3e:
0d:72:b6:13:a3:c4:b8:ea:35:14:6d:30:22:bd:e1:
86:2f:dd:6d:a3:40:1c:1a:5c:00:1d:2f:13:ae:db:
b1:51:26:e0:71:f2:c8:60:c8:c5:6a:6d:06:b8:ad:
ce:27:dd:bd:0a:59:bc:26:f9:a4:06:e8:da:65:f7:
97:7c:4d:42:89:96:ca:c5:df:1a:db:9a:82:2c:c5:
83:bc:94:54:50:7c:4e:0d:57:d8:df:bf:e4:a3:78:
7e:8a:f8:e9:3a:42:75:df:1b:96:b6:4b:85:97:c3:
da:d7:04:2f:35:1d:c3:cd:b1:9b:07:28:22:34:a1:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E4:6D:99:E4:15:69:90:E2:F0:E6:9A:10:6A:25:5A:82:E3:C0:4B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EeRtmeQVaZDi8OaaEGolWoLjwEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:7b:7d:83:08:36:57:e2:7f:70:26:87:30:c9:c9:80:29:9f:
cf:b2:81:79:bf:97:d7:cf:d4:50:36:44:6b:e5:3d:c4:c4:bc:
21:bd:34:16:1a:01:31:62:5d:5d:b4:e8:db:c5:11:ae:e3:17:
9f:78:6b:52:68:29:0d:0d:6a:ce:b5:70:2f:4e:27:45:83:f4:
9c:01:ad:e7:f4:c2:c9:a8:31:6a:99:c3:5b:f4:f3:e7:81:52:
46:36:98:11:82:f4:79:77:90:2f:ed:89:c1:e8:ac:11:f2:96:
da:84:2a:17:1b:b1:7c:92:f7:1d:95:f7:d2:0a:9b:79:71:db:
f5:f4:10:3a:10:d3:66:1f:4d:02:b0:99:a0:62:b0:48:be:bd:
ac:36:a8:3b:20:d6:04:43:50:bd:87:d6:34:f1:2f:7a:db:2d:
ef:61:bd:6d:a9:2c:2e:e1:15:1d:fa:21:25:f4:51:fd:26:62:
c2:fa:44:ca:ae:64:eb:79:12:dc:34:4c:2f:95:3f:ec:e0:bb:
14:62:e0:af:a2:6d:ef:8f:b0:a4:f0:e2:34:6f:2b:3e:87:38:
48:5f:72:17:16:6c:0c:7e:df:ff:af:9c:1f:8a:07:4b:81:86:
30:6d:16:dc:e2:cb:7d:ef:38:1c:d3:25:13:78:fa:05:25:a7:
7a:ef:71:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZCQHe0wMS/HrpNK24hURAujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzA4MDIxMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWU0NmQ5OWU0MTU2OTkwZTJmMGU2OWExMDZhMjU1YTgyZTNjMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohl3ne7Ngplone+rVnUIPAx5QG4y
/GV4W597zLRn5fz+fqjcM3S3zOZ0eaji063mGzRxb/tOH1oDaxnAzQZ7E2vB2XNw
hUcrLyRhyK+VcLGSFbrS/8LgTmJh9mQRHaKb8KIDKKA3xOVs9EDWqouZgC5qUUM1
9OtEp7/wJHrQ8uamc/irMD4NcrYTo8S46jUUbTAiveGGL91to0AcGlwAHS8Trtux
USbgcfLIYMjFam0GuK3OJ929Clm8JvmkBujaZfeXfE1CiZbKxd8a25qCLMWDvJRU
UHxODVfY37/ko3h+ivjpOkJ13xuWtkuFl8Pa1wQvNR3DzbGbBygiNKEGKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBHkbZnkFWmQ4vDmmhBqJVqC48BLMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRWVSdG1lUVZhWkRpOE9hYUVHb2xXb0xqd0VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEl7fYMINlfif3AmhzDJ
yYApn8+ygXm/l9fP1FA2RGvlPcTEvCG9NBYaATFiXV206NvFEa7jF594a1JoKQ0N
as61cC9OJ0WD9JwBref0wsmoMWqZw1v08+eBUkY2mBGC9Hl3kC/ticHorBHyltqE
KhcbsXyS9x2V99IKm3lx2/X0EDoQ02YfTQKwmaBisEi+vaw2qDsg1gRDUL2H1jTx
L3rbLe9hvW2pLC7hFR36ISX0Uf0mYsL6RMquZOt5Etw0TC+VP+zguxRi4K+ibe+P
sKTw4jRvKz6HOEhfchcWbAx+3/+vnB+KB0uBhjBtFtziy33vOBzTJRN4+gUlp3rv
cTE=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:31 2025 by rpki-client