Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JgFDW0GBuZ-ctCTxtzUqEiJHMkg.roa
File: JgFDW0GBuZ-ctCTxtzUqEiJHMkg.roa (raw, json)
Hash identifier: snNDQU9aNxxAkwF2JZTX18RnTvLpMQ74QFpKEu1E8GE=
Subject key identifier: 26:01:43:5B:41:81:B9:9F:9C:B4:24:F1:B7:35:2A:12:22:47:32:48
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019076CB131D9368B2FDB5497A68D8A9ADA7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JgFDW0GBuZ-ctCTxtzUqEiJHMkg.roa
Signing time: Wed 03 Jul 2024 04:12:18 +0000
ROA not before: Wed 03 Jul 2024 04:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 03 Jul 2024 05:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:76:cb:13:1d:93:68:b2:fd:b5:49:7a:68:d8:a9:ad:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 3 04:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2601435b4181b99f9cb424f1b7352a1222473248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:3f:c4:92:b9:0e:8a:8f:53:b5:35:7b:d1:
31:ae:f9:a1:d4:7a:57:07:ce:9b:df:52:20:cd:71:
88:cc:bc:d3:ef:b7:da:3d:74:72:c2:05:a1:b9:1d:
78:63:93:b7:33:56:17:5b:08:27:cc:9f:a5:2c:67:
b7:20:15:4f:8a:a3:f5:f4:5d:65:69:f4:8b:21:77:
44:5e:57:93:7d:ab:e1:b2:c7:ae:45:62:de:64:c1:
a6:1e:96:a0:83:94:8f:7d:cc:52:8c:c3:f9:48:b7:
d0:90:79:6f:2c:6c:e7:46:34:5b:72:ff:1b:bf:ee:
cf:b6:84:a4:bf:92:84:79:df:a4:76:61:a0:c9:98:
e9:de:bf:e5:eb:fe:30:5b:7d:91:9c:ca:4d:21:26:
f7:d9:aa:68:0a:4d:6e:38:9e:bd:ad:dd:a8:6b:7d:
f5:06:59:b7:39:c9:26:ae:99:ca:fa:58:eb:e2:0e:
b2:f7:60:00:f9:1f:09:f0:0a:52:c6:dd:45:e8:d0:
5f:7a:33:44:08:51:d0:e2:aa:90:59:b6:29:35:d2:
10:33:f2:51:dc:bb:ec:86:ba:40:82:f3:c3:18:df:
e3:25:1e:de:52:44:5d:4b:dc:5a:4d:cd:c0:5d:f7:
c9:28:6c:c8:6b:ee:a7:9c:6d:d4:01:16:f9:9c:f5:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:01:43:5B:41:81:B9:9F:9C:B4:24:F1:B7:35:2A:12:22:47:32:48
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JgFDW0GBuZ-ctCTxtzUqEiJHMkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:64:67:2a:0b:90:c1:ea:99:de:25:8e:51:f7:9e:83:19:70:
9d:ef:99:46:37:90:84:b8:4b:5e:7a:42:5c:d2:1f:2b:05:35:
a2:be:b6:94:99:8d:ec:51:f6:b7:fb:ee:45:8c:f9:9d:34:25:
40:b1:50:38:9e:4d:a4:78:24:81:58:61:73:7a:94:a6:15:12:
65:30:2f:f5:b4:02:18:36:4e:9c:90:c2:e9:09:7a:93:ae:03:
fe:bb:24:6f:9c:3f:e9:26:0d:5d:90:0f:09:fc:da:d7:42:4e:
27:76:93:f4:60:5d:f4:f6:6d:9a:24:91:b3:82:6f:2d:0b:8f:
e7:fe:d4:94:34:95:9f:bc:bf:c9:17:4d:16:c7:7d:75:1b:89:
08:2d:a7:c4:61:19:c9:08:6b:05:13:89:fe:45:e5:7b:ae:6c:
c4:6d:43:5c:72:15:0b:ec:05:c6:6a:de:e0:98:75:ff:6a:05:
5f:24:2d:16:27:26:a4:8a:54:74:0d:52:81:91:4b:4f:c3:4f:
e1:c3:40:c5:e9:68:c1:ad:98:bc:0d:bf:34:6a:30:c2:f2:33:
a7:b2:fc:6b:41:72:f7:b2:44:4a:a9:00:77:3e:0e:d5:99:e6:
0b:4a:ae:13:d1:cc:f5:d4:77:84:52:cb:ba:6c:f1:e9:42:dc:
53:1e:75:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:46 2025 by rpki-client