Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NN8jIL183SemZsRaNwUx-HwI-tM.roa
File: NN8jIL183SemZsRaNwUx-HwI-tM.roa (raw, json)
Hash identifier: gHaL/bD9rZ5CY8Obj4pIKAHjMarN9vHEyxI8yXLqxiI=
Subject key identifier: 34:DF:23:20:BD:7C:DD:27:A6:66:C4:5A:37:05:31:F8:7C:08:FA:D3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01908D1CE2078977201DB0CA10F9E93F8BF2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NN8jIL183SemZsRaNwUx-HwI-tM.roa
Signing time: Sun 07 Jul 2024 12:13:18 +0000
ROA not before: Sun 07 Jul 2024 12:13:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 13:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8d:1c:e2:07:89:77:20:1d:b0:ca:10:f9:e9:3f:8b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 7 12:13:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34df2320bd7cdd27a666c45a370531f87c08fad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:f9:63:4e:aa:01:37:1f:b9:6c:47:b3:2e:
87:ef:8c:1d:1a:cd:33:87:f5:f7:04:56:6c:8e:01:
8b:94:39:7b:b0:a2:79:b9:31:10:fb:44:91:9b:e7:
bb:7c:e0:26:5e:0d:f3:9f:86:cd:33:3c:c6:59:eb:
3b:8e:a0:fe:dc:ba:17:17:b2:9f:31:8f:1b:f4:15:
5b:60:55:5b:5d:3b:ba:53:b5:f2:68:30:ee:84:d4:
50:68:a2:75:27:27:7e:a1:2a:e1:d1:aa:d8:16:9a:
a6:54:e1:17:22:14:b3:bf:d7:81:e1:c4:75:42:de:
37:bd:15:c1:23:89:8c:29:2f:03:bf:8f:63:d2:af:
70:7b:1f:36:e0:7a:38:a3:85:8f:24:ea:01:82:77:
c3:9e:63:27:e7:9e:4a:f6:0f:0b:d3:e5:d2:cb:2d:
50:61:8f:b8:4d:2f:d3:8d:d2:29:cf:57:b9:1b:1a:
39:75:87:7f:e8:c0:5e:43:8d:f0:c5:28:5d:73:27:
6f:19:5b:b5:52:e9:d1:f7:67:ce:9c:81:c4:bb:3f:
99:20:0f:6e:b7:9a:d4:53:d4:38:07:00:f6:08:50:
52:22:cb:65:35:18:31:7c:5e:c9:60:30:dd:50:f1:
07:4a:08:fc:57:2a:14:73:3c:fb:db:7b:16:f6:33:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:23:20:BD:7C:DD:27:A6:66:C4:5A:37:05:31:F8:7C:08:FA:D3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NN8jIL183SemZsRaNwUx-HwI-tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:ae:92:05:7a:76:22:e2:22:1b:b8:95:e7:fb:30:da:70:e0:
71:d5:39:2a:71:e2:8c:55:26:e3:75:be:d7:11:6f:54:f5:b5:
2c:3b:e9:c3:16:30:5f:63:8e:1d:75:db:7c:87:d9:3f:f1:eb:
c6:1a:10:81:00:2d:cc:d1:2c:9f:c1:36:bf:1d:b2:84:91:d7:
1e:9f:2f:5a:87:3f:cd:69:ba:c5:c9:c5:ee:60:d7:6b:7e:7a:
ae:4a:73:81:2e:f4:c8:99:5e:69:b5:6a:54:68:32:f2:79:50:
0d:d9:ec:43:a0:ee:95:cd:74:00:98:e9:45:23:39:6c:d7:fb:
ba:a7:32:d2:79:02:74:bb:ac:36:9a:6d:51:98:4c:f3:92:da:
5f:96:14:59:cf:83:c6:c3:f7:62:c8:20:d3:ec:66:5e:4f:f2:
47:13:9b:70:34:5b:05:3a:10:a5:49:4f:0f:1b:91:bb:1e:c7:
be:28:87:c5:41:bd:9c:ec:9d:5f:e5:e7:16:94:09:c4:95:a1:
ee:e9:bb:8f:b8:26:75:55:0a:2c:06:d2:c7:a0:25:e5:fe:9f:
65:e8:2a:b7:24:8c:13:59:ea:99:ac:4b:db:3f:06:01:54:e9:
25:72:62:9a:2b:ef:b2:7b:d6:26:3d:98:4f:e1:0e:00:6d:39:
e1:0f:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:51 2025 by rpki-client