Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FxA-5Pz8knFM-qnvFXs_OvGcQuc.roa
File: FxA-5Pz8knFM-qnvFXs_OvGcQuc.roa (raw, json)
Hash identifier: elTLeEowe6+ci7V+iXpeh4dTS2N570xvAu20152BixM=
Subject key identifier: 17:10:3E:E4:FC:FC:92:71:4C:FA:A9:EF:15:7B:3F:3A:F1:9C:42:E7
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019052182CAA098ACAA489D364D8560E78BB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FxA-5Pz8knFM-qnvFXs_OvGcQuc.roa
Signing time: Wed 26 Jun 2024 01:10:34 +0000
ROA not before: Wed 26 Jun 2024 01:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Jun 2024 02:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:52:18:2c:aa:09:8a:ca:a4:89:d3:64:d8:56:0e:78:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 26 01:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17103ee4fcfc92714cfaa9ef157b3f3af19c42e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:f7:a3:1a:50:b3:9e:e1:e0:b0:75:2d:4f:
81:41:d5:34:1e:25:72:96:d9:7d:94:f8:4a:3a:d9:
91:da:37:03:ee:f6:38:21:0a:07:07:15:1d:e1:10:
7f:f2:e9:a5:a5:b7:b1:f9:5b:e8:bc:f4:6d:c6:9f:
63:f5:ba:5e:8e:44:4f:31:95:de:fb:8a:16:ea:ca:
a4:9b:89:d8:81:27:6a:a8:1f:26:7b:ad:4d:e0:18:
71:cc:d6:14:ad:67:97:00:8c:5a:f4:b3:ab:8e:f7:
7b:05:9a:ee:77:0e:7a:e3:32:86:c0:08:94:0b:86:
7b:81:4b:26:b8:1c:a8:db:7e:f1:f0:fb:56:ca:64:
d4:8f:01:0b:0e:b6:a7:fe:dd:68:b9:62:19:50:3d:
f6:1b:0f:c0:b1:22:43:88:55:64:0e:0d:71:1f:cd:
eb:90:9b:94:d0:80:9a:06:89:0e:d5:3b:2c:6a:45:
4a:5e:2f:34:b9:90:71:23:5e:f3:f8:c6:e2:89:a2:
04:5a:6e:0c:e0:bc:cd:49:e4:53:46:b2:ae:3d:fd:
cc:a8:d4:b2:64:1e:1d:8d:46:d4:cd:c9:9e:92:fe:
b3:91:b2:dc:11:a2:f8:9c:0c:98:43:d2:66:e4:cf:
9b:fc:e0:bc:a1:4f:c0:90:63:b5:48:12:95:f4:45:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:10:3E:E4:FC:FC:92:71:4C:FA:A9:EF:15:7B:3F:3A:F1:9C:42:E7
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FxA-5Pz8knFM-qnvFXs_OvGcQuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:ec:f9:37:a6:cc:d3:56:0f:27:dc:d0:4c:ab:04:c8:f1:8e:
72:3e:e0:b3:24:86:07:1a:6c:9a:6e:c3:4b:f5:d1:08:b5:39:
e5:1c:1c:0d:d6:f5:cf:8a:ab:48:36:0f:63:f7:47:9b:1f:6f:
e1:72:34:53:fc:fe:50:76:64:6f:28:75:f7:9d:49:3c:13:0a:
86:ac:40:5d:20:f1:60:b3:a4:b6:d0:29:13:a1:30:4a:b8:ef:
e3:41:69:f2:fd:4d:e2:2f:1c:98:72:30:e8:17:b1:8a:54:79:
d5:62:de:b6:65:b1:72:d3:1c:bc:e0:e6:2c:26:5e:b3:ef:31:
97:66:7e:5f:b3:65:90:6a:20:a4:b0:71:fd:85:17:2c:e6:62:
fb:1f:a6:e1:74:ce:b3:40:51:0f:ba:23:9b:da:90:a4:ec:11:
54:42:70:30:d5:91:35:93:12:68:76:0c:53:53:6e:71:9b:5f:
9a:46:5b:27:06:09:ce:13:a1:7a:1a:c7:6f:47:96:56:fb:98:
a7:7d:08:39:f3:11:ba:86:db:7b:1d:ad:4a:7a:15:20:b4:6c:
2f:9d:fd:c6:bd:ba:22:86:0e:dd:a0:06:c2:e0:b8:63:eb:0e:
65:a8:24:f4:c0:82:d2:f0:82:c8:04:a3:fa:25:f0:0f:47:75:
b3:46:d3:c6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZBSGCyqCYrKpInTZNhWDni7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjI2MDExMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzEwM2VlNGZjZmM5MjcxNGNmYWE5ZWYxNTdiM2YzYWYxOWM0MmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquv3oxpQs57h4LB1LU+BQdU0HiVy
ltl9lPhKOtmR2jcD7vY4IQoHBxUd4RB/8umlpbex+VvovPRtxp9j9bpejkRPMZXe
+4oW6sqkm4nYgSdqqB8me61N4BhxzNYUrWeXAIxa9LOrjvd7BZrudw564zKGwAiU
C4Z7gUsmuByo237x8PtWymTUjwELDran/t1ouWIZUD32Gw/AsSJDiFVkDg1xH83r
kJuU0ICaBokO1TssakVKXi80uZBxI17z+MbiiaIEWm4M4LzNSeRTRrKuPf3MqNSy
ZB4djUbUzcmekv6zkbLcEaL4nAyYQ9Jm5M+b/OC8oU/AkGO1SBKV9EVpKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBcQPuT8/JJxTPqp7xV7PzrxnELnMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRnhBLTVQejhrbkZNLXFudkZYc19PdkdjUXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF/s+TemzNNWDyfc0Eyr
BMjxjnI+4LMkhgcabJpuw0v10Qi1OeUcHA3W9c+Kq0g2D2P3R5sfb+FyNFP8/lB2
ZG8odfedSTwTCoasQF0g8WCzpLbQKROhMEq47+NBafL9TeIvHJhyMOgXsYpUedVi
3rZlsXLTHLzg5iwmXrPvMZdmfl+zZZBqIKSwcf2FFyzmYvsfpuF0zrNAUQ+6I5va
kKTsEVRCcDDVkTWTEmh2DFNTbnGbX5pGWycGCc4ToXoax29Hllb7mKd9CDnzEbqG
23sdrUp6FSC0bC+d/ca9uiKGDt2gBsLguGPrDmWoJPTAgtLwgsgEo/ol8A9HdbNG
08Y=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:08 2025 by rpki-client