Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/J3s3Tepx2hvMZKLibPV1Sna-bUc.roa
File: J3s3Tepx2hvMZKLibPV1Sna-bUc.roa (raw, json)
Hash identifier: w1o8fPHrzF4iy8JZnKA2lWmF7J5xuF4sww2iE3gzOKI=
Subject key identifier: 27:7B:37:4D:EA:71:DA:1B:CC:64:A2:E2:6C:F5:75:4A:76:BE:6D:47
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190AE24EF72FDF0B2D3572C317A99CD0B6D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/J3s3Tepx2hvMZKLibPV1Sna-bUc.roa
Signing time: Sat 13 Jul 2024 22:09:34 +0000
ROA not before: Sat 13 Jul 2024 22:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jul 2024 23:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ae:24:ef:72:fd:f0:b2:d3:57:2c:31:7a:99:cd:0b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 13 22:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=277b374dea71da1bcc64a2e26cf5754a76be6d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:95:c9:68:c6:13:79:4a:e8:5f:48:5c:7e:
a0:b2:15:f0:ea:45:c5:02:7d:c3:96:4f:12:c3:ed:
85:ae:9f:9e:5c:17:fd:5e:14:3a:a8:98:a3:cb:98:
4e:90:e5:f9:71:84:74:25:10:23:5e:ac:44:5d:d8:
7c:0f:08:c9:e5:52:35:75:0c:bc:0d:fb:24:1f:a4:
23:8a:00:e9:82:11:62:c6:e1:5f:e1:ab:f9:6b:82:
42:da:70:03:d9:d4:35:b7:9c:c9:a2:a5:f2:35:4c:
88:bc:4b:94:d6:46:e9:72:93:fb:b9:0d:28:f8:9c:
73:ca:93:63:de:cf:cf:5c:c5:51:72:ea:11:8f:f1:
ff:ca:5b:c9:49:23:5c:bb:7a:b5:75:c5:e0:7a:e7:
5a:38:a7:ed:5e:2a:59:3e:91:ad:6a:5d:32:cc:b0:
35:b0:45:e5:15:af:53:e3:4c:a3:08:e4:0a:3b:3f:
2c:a8:a1:9e:2a:9f:43:06:a5:74:56:a5:ad:00:94:
ed:63:5e:f5:09:9c:65:32:37:db:24:1c:b7:1b:60:
cf:1f:79:2f:56:a3:49:9a:64:ed:f0:6f:2f:f9:2a:
55:d0:28:c2:d1:06:35:34:e0:fd:02:7e:c3:4b:45:
4b:f1:a9:cf:b1:42:eb:02:25:3a:6c:61:39:71:47:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7B:37:4D:EA:71:DA:1B:CC:64:A2:E2:6C:F5:75:4A:76:BE:6D:47
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/J3s3Tepx2hvMZKLibPV1Sna-bUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:f1:68:14:80:2f:5a:0f:ca:3b:3a:ec:e4:90:be:ac:cf:f9:
e3:23:bd:08:81:ed:79:2c:49:d5:35:7c:68:b0:98:9b:d7:6e:
bc:8c:40:8c:e0:21:f7:44:70:be:04:06:5f:c8:b4:fc:ae:b3:
ad:59:5e:42:b1:71:9a:bf:07:0a:c6:38:fa:e9:7f:cc:75:de:
c1:b8:8e:95:2b:52:66:c9:49:be:c6:5b:03:b2:13:76:2c:3d:
38:47:63:ae:c3:66:31:ca:a7:18:8c:20:dc:5e:34:b1:0a:04:
e5:2e:f7:7d:fb:7b:80:5b:ab:3a:f6:69:50:d5:31:47:ba:5e:
1c:16:38:e0:b2:b9:db:cc:cb:ea:b8:0e:16:26:5d:cf:89:56:
65:07:d6:8f:19:31:42:98:be:de:3b:39:1f:be:0c:23:92:bd:
9f:57:f4:8b:52:b3:3e:3f:66:a3:7a:0e:b1:ac:17:49:99:b0:
19:7b:ad:f8:cb:b9:7a:67:ac:ed:55:0d:3b:c9:66:70:f7:02:
a3:0c:64:24:d2:05:91:bb:f4:0c:07:f0:b5:1b:b2:2c:6c:50:
61:06:23:fb:31:3d:38:8b:cc:d9:d4:e1:3d:a7:4b:42:c6:37:
e1:fe:65:27:a1:42:2a:68:e8:02:bc:f0:52:1b:29:18:7c:c5:
55:fa:1b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:28 2025 by rpki-client