Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F9dGDtxj4j5nfuExi8FX-J9JNuc.roa
File: F9dGDtxj4j5nfuExi8FX-J9JNuc.roa (raw, json)
Hash identifier: hWw/dZv1WYIbJIiT4V2toTmgzeErZISlTHeqJgbZWDY=
Subject key identifier: 17:D7:46:0E:DC:63:E2:3E:67:7E:E1:31:8B:C1:57:F8:9F:49:36:E7
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01908C0A38A672C30BD884F2DB0245635EDF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F9dGDtxj4j5nfuExi8FX-J9JNuc.roa
Signing time: Sun 07 Jul 2024 07:13:18 +0000
ROA not before: Sun 07 Jul 2024 07:13:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 08:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8c:0a:38:a6:72:c3:0b:d8:84:f2:db:02:45:63:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 7 07:13:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17d7460edc63e23e677ee1318bc157f89f4936e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:24:7d:52:58:5e:7c:5c:28:fe:a9:c7:68:
78:b3:3c:a0:60:33:c7:b6:b1:a2:b4:25:de:60:93:
7a:95:0c:5e:4d:cf:8c:bd:25:be:1b:49:64:5f:07:
fd:30:a5:8e:ae:71:4c:e4:10:61:01:10:72:c6:6e:
75:df:63:d0:ff:42:4b:ac:af:db:91:22:8c:8e:86:
fe:e8:a1:37:03:1c:47:f2:f1:e2:22:bb:24:2e:68:
57:cb:e0:fb:2e:0a:0a:f0:c5:90:e1:9f:a1:ec:d3:
97:8d:8c:3c:bd:d8:17:f6:fb:8f:6e:95:87:b2:eb:
5b:ec:7d:7e:c0:b6:d6:6e:db:6f:ee:92:1a:87:6e:
79:96:06:a6:6c:96:65:b9:de:8f:f4:a6:02:56:10:
b9:5a:9b:ff:26:4a:08:d9:da:ae:20:86:36:93:47:
a7:03:17:29:18:95:a1:91:67:2a:36:e4:58:d2:c4:
03:73:28:db:b3:91:48:7f:f2:06:d0:36:5e:64:6c:
b4:2b:20:09:02:37:2a:0e:d3:d7:ec:9f:a8:10:68:
61:b9:bd:35:1b:25:f8:5e:8f:ad:e1:9a:07:06:bf:
2b:0e:ca:70:ba:e2:05:2a:63:4e:e9:d3:c3:44:c0:
64:65:9a:0c:5c:9b:2e:08:17:f0:82:16:aa:38:8b:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D7:46:0E:DC:63:E2:3E:67:7E:E1:31:8B:C1:57:F8:9F:49:36:E7
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F9dGDtxj4j5nfuExi8FX-J9JNuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:32:0a:ad:f7:0b:37:62:98:76:25:6f:9b:fe:c7:79:cf:aa:
b6:0c:bd:fb:ce:3a:9f:d9:06:56:1a:67:54:e8:79:e6:5b:1a:
c6:84:80:44:8c:f1:f2:9a:ef:4a:59:ff:a4:ad:90:26:b8:d1:
cc:67:d4:32:e2:90:e0:4c:07:5e:f5:86:18:f6:05:bc:26:62:
d7:48:a0:38:96:c0:1a:94:5c:c4:7e:d6:5b:8e:74:7d:e4:da:
3c:7e:dc:55:5f:43:51:fb:da:97:64:b6:1d:e8:ad:63:05:9b:
87:c6:07:83:1c:9f:7e:e6:b2:6d:15:06:65:e7:c0:5e:ed:37:
33:dd:fc:f4:a0:a7:ac:e8:ef:a2:cc:7d:48:1f:c3:32:cf:98:
6c:d6:d3:09:b2:1a:66:c2:80:0a:59:f3:a9:e0:3e:95:8b:41:
e5:13:86:f2:34:da:9e:de:8c:5a:fd:95:59:4c:4c:f4:1a:5c:
f8:6d:1a:43:08:d4:5f:3a:fd:65:d6:1f:ec:39:5d:86:a7:12:
01:92:86:7b:8f:90:06:b9:2d:e7:ba:66:7c:1a:4a:1b:e0:56:
b6:f8:bc:d7:9b:1c:bd:b8:4a:12:4b:b2:9e:c5:72:50:c4:46:
42:91:24:0d:bf:66:13:46:88:48:6d:04:52:4f:11:86:6a:a3:
42:4d:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:05 2025 by rpki-client