Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G_QfBZ7-S-LomoBkIuCo4fsD1Bo.roa
File: G_QfBZ7-S-LomoBkIuCo4fsD1Bo.roa (raw, json)
Hash identifier: gbI3ZV3zwQhb+p4xjQ+IGhB2VGGoaP1LLXIMzhCdZ1M=
Subject key identifier: 1B:F4:1F:05:9E:FE:4B:E2:E8:9A:80:64:22:E0:A8:E1:FB:03:D4:1A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019026BFFCC2BD9061FCE246FC6BC65FFD99
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G_QfBZ7-S-LomoBkIuCo4fsD1Bo.roa
Signing time: Mon 17 Jun 2024 15:10:34 +0000
ROA not before: Mon 17 Jun 2024 15:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Jun 2024 16:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:bf:fc:c2:bd:90:61:fc:e2:46:fc:6b:c6:5f:fd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 17 15:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bf41f059efe4be2e89a806422e0a8e1fb03d41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:df:ac:10:e2:2a:c1:b1:ce:97:6c:83:fa:
fa:9a:26:b9:74:46:39:60:49:1d:5d:fd:a2:ba:0d:
01:00:3e:5e:ab:a7:21:1c:04:61:78:36:d1:74:f7:
22:88:c0:8b:38:29:58:5d:49:2e:d1:4b:be:01:88:
13:a7:e7:ed:0d:fd:96:a3:b8:49:cf:71:6e:8a:5d:
18:9a:56:a5:b4:e9:0a:04:15:69:d7:5e:42:56:0c:
80:a6:de:e6:44:ff:6c:06:34:e8:da:e4:b2:29:cf:
56:4f:99:b8:26:2a:77:ae:8c:f8:bd:6c:6a:11:8f:
b1:2b:8b:a1:cf:69:fb:b7:96:cf:90:c1:fe:4d:96:
cc:cc:ec:65:31:45:74:d6:6d:6b:c6:5b:5f:33:f9:
b0:a6:af:b7:e8:87:94:47:6e:63:1a:61:f5:97:a5:
c2:dc:05:05:24:fe:2f:5c:58:f7:e1:b9:80:9e:e6:
e2:b8:4c:a3:4f:9a:05:a6:0d:ba:8c:c2:23:ff:67:
40:1c:a3:aa:ba:bc:36:df:6c:8d:04:45:dd:9d:60:
3b:2e:11:de:10:15:e8:0a:89:eb:c2:57:58:39:82:
92:e0:e5:a7:99:5b:9d:b5:a6:fc:af:de:a1:44:c9:
01:72:0e:ce:6d:e1:b3:e9:5d:6e:b8:dc:52:b9:d8:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F4:1F:05:9E:FE:4B:E2:E8:9A:80:64:22:E0:A8:E1:FB:03:D4:1A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G_QfBZ7-S-LomoBkIuCo4fsD1Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:51:b4:50:17:a4:c5:26:f8:fa:34:3f:5c:41:9f:d0:e3:68:
fc:d8:8b:bd:86:05:73:ba:9a:80:a9:e7:56:e4:d2:d8:6c:9c:
6f:e3:59:9c:a8:ea:cf:94:b3:a4:67:e9:95:d7:c8:cf:d3:6c:
b8:d4:ad:e1:a8:ce:cf:6f:85:66:be:c8:b6:4b:d5:b3:97:8b:
3b:d3:d5:3c:20:c0:78:bb:c3:2a:31:6c:b9:c5:0d:15:f5:06:
cb:61:36:92:fd:01:51:b7:70:9b:d5:6d:88:33:0e:28:cb:af:
83:e8:71:61:b1:2e:81:0b:36:e3:5b:bb:cd:8a:97:38:2d:e3:
b6:b0:63:b3:7f:6d:c1:9e:6d:fd:64:ed:49:0b:a7:27:a5:09:
5d:a1:ab:33:3c:65:cc:9f:d2:a9:54:aa:26:ba:be:17:5d:8b:
ce:e3:45:12:50:c3:22:3d:23:54:51:37:2a:cc:5c:9d:8f:d0:
36:7a:27:a3:1b:12:70:44:64:96:e5:d4:22:66:e8:0b:35:c3:
d1:0c:9e:bc:13:46:c2:97:c6:a6:4f:5e:15:b8:d2:6b:8f:6f:
0a:f7:1c:dd:eb:2f:a0:06:3f:dd:f8:0a:9e:eb:c2:b9:78:fe:
14:9e:ed:c3:03:23:ca:ce:e2:99:e3:37:ae:fc:d5:aa:be:2c:
5f:59:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:43 2025 by rpki-client