Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Kaqjh0xVDTPP1bsyCx7lALj4Hko.roa
File: Kaqjh0xVDTPP1bsyCx7lALj4Hko.roa (raw, json)
Hash identifier: f6Y0QPWoRjR0ph2tZ48utl0c30PvjNlBe0juYyVvhc0=
Subject key identifier: 29:AA:A3:87:4C:55:0D:33:CF:D5:BB:32:0B:1E:E5:00:B8:F8:1E:4A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB0869AD6DDA71B7D15D97A37783DA976
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Kaqjh0xVDTPP1bsyCx7lALj4Hko.roa
Signing time: Sat 25 May 2024 16:12:42 +0000
ROA not before: Sat 25 May 2024 16:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 25 May 2024 17:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b0:86:9a:d6:dd:a7:1b:7d:15:d9:7a:37:78:3d:a9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 25 16:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29aaa3874c550d33cfd5bb320b1ee500b8f81e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:99:3b:39:8d:08:87:cd:45:b2:48:46:5d:0c:
01:2c:ce:fc:cc:f9:c2:8d:a6:1a:d7:ee:72:e9:b3:
ab:40:8d:31:24:dd:b2:1e:b3:c4:f2:e9:5f:51:54:
ba:dd:0d:1f:1a:18:01:ef:ef:ff:02:f0:f0:d0:33:
4e:a6:1b:af:98:0a:06:b3:00:d5:6a:25:80:51:f6:
40:2f:00:f3:29:b7:47:54:fb:9e:09:71:9a:89:e1:
e4:9c:31:2c:95:1a:9b:67:f4:2c:88:a5:0e:c5:eb:
3f:7a:72:77:f7:ec:66:d2:51:79:23:3c:17:05:49:
06:f6:ec:0b:e6:2e:a7:61:7b:8b:1f:18:b0:fe:d7:
4b:bd:2e:23:8c:97:bd:a2:1d:35:36:fe:79:74:73:
2d:be:b2:23:a3:96:77:80:7d:77:04:3d:98:24:84:
9b:10:0f:df:72:f6:33:98:2c:19:d5:2d:c1:7f:d8:
6f:c5:b2:bd:4a:81:c4:a6:c6:c7:52:6a:92:05:9e:
45:1b:cb:30:56:48:cf:f4:dd:39:36:f8:02:db:60:
28:ca:1f:f5:fa:53:01:2d:06:16:31:15:88:dd:d3:
09:81:1f:92:a5:00:ef:ca:a6:56:a7:3a:d7:18:40:
93:0c:d3:b1:da:bd:05:84:d7:3d:68:a4:0d:cc:90:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AA:A3:87:4C:55:0D:33:CF:D5:BB:32:0B:1E:E5:00:B8:F8:1E:4A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Kaqjh0xVDTPP1bsyCx7lALj4Hko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:c0:86:e5:30:7a:6d:d4:35:a4:32:26:f7:02:dc:5b:e6:9e:
0b:17:d7:d9:7e:7b:d7:f5:da:62:ef:23:5f:f2:b4:4b:85:29:
f4:b3:9f:dc:c6:bb:31:d1:b0:cb:02:2f:a1:54:a3:e1:bb:9c:
bd:20:6f:17:31:a5:61:27:78:73:ba:dc:f9:2b:e5:e8:5c:cd:
ca:a0:2e:3a:a5:38:21:b7:dd:f5:ab:94:1e:a2:57:5f:7b:df:
08:25:e3:d8:36:95:b1:c5:db:65:a2:8e:32:da:62:33:6a:62:
cc:5d:c2:17:57:70:dd:78:b5:55:bf:cc:d5:ca:e8:54:a7:f8:
e1:9a:bb:7e:90:b1:33:40:16:cc:8f:d0:ac:01:1f:a6:9d:33:
12:20:fc:80:2c:96:1f:41:2b:39:e7:30:3e:ee:5e:02:e2:9e:
76:d6:97:ce:53:4f:a8:c3:ea:d1:54:2e:8e:d7:26:dc:00:d4:
35:e0:cf:36:6e:54:68:92:23:46:3a:ce:4a:8a:3e:b2:40:ed:
ab:a0:d9:72:17:b5:2c:1e:32:75:d1:73:08:0a:c4:05:84:82:
2e:32:0e:e8:4b:98:77:7f:7c:62:95:64:9c:4a:0e:fe:8b:61:
42:27:24:8b:88:72:09:0a:c9:e6:0b:44:f2:ef:a9:46:fe:51:
5a:31:77:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:22 2025 by rpki-client