Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PLBUsxnCjyXdhZ5Ts9IiNcL7n1g.roa
File: PLBUsxnCjyXdhZ5Ts9IiNcL7n1g.roa (raw, json)
Hash identifier: 8YVHzjpWkKjj5y3WE/1ZX0vcX/VG+d6gUC3zAFOkZXE=
Subject key identifier: 3C:B0:54:B3:19:C2:8F:25:DD:85:9E:53:B3:D2:22:35:C2:FB:9F:58
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB6F5A4023FB0149925ACF5624096E488
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PLBUsxnCjyXdhZ5Ts9IiNcL7n1g.roa
Signing time: Sun 26 May 2024 22:11:42 +0000
ROA not before: Sun 26 May 2024 22:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 26 May 2024 23:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b6:f5:a4:02:3f:b0:14:99:25:ac:f5:62:40:96:e4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 26 22:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cb054b319c28f25dd859e53b3d22235c2fb9f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:2c:34:f9:1c:47:97:b8:03:12:48:b3:81:
6d:4d:b5:cf:09:6c:4c:7a:dd:18:87:fd:b2:21:8d:
54:aa:f3:d3:7c:09:49:fd:44:60:64:7e:c1:eb:26:
2b:06:18:a3:bf:3a:1f:a5:c9:66:0d:7f:d0:25:d4:
a7:72:8a:86:1a:64:c0:5f:68:d7:25:a1:38:44:1d:
8b:03:d7:93:25:e3:c2:64:7e:ab:46:9e:63:2f:2a:
b8:c5:7e:5c:68:bc:e7:a3:bc:80:2f:16:d0:a7:b4:
b1:cc:af:47:77:4b:91:e3:c7:b0:45:7d:a6:ff:10:
7a:e4:cc:97:76:ed:78:19:35:82:bb:6d:71:bb:c1:
1b:c3:77:95:c9:47:6d:74:ff:6c:8e:78:f1:2a:ad:
01:84:84:2f:80:48:0c:a5:c3:67:a5:74:60:05:36:
56:a3:82:af:7e:f1:0b:fb:71:2d:bc:12:68:6d:a0:
a6:16:20:34:95:79:79:56:0f:ef:43:2a:8f:f8:8a:
47:b9:35:3a:e0:e3:b8:30:64:24:a1:1a:7c:05:a7:
9c:9c:9b:76:9f:97:d8:53:03:e7:f7:a5:ba:31:58:
d7:49:21:ab:4a:8a:57:80:31:1a:66:df:c5:f0:84:
38:30:56:33:d9:33:bd:f5:f0:cb:e0:f0:46:d4:11:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:54:B3:19:C2:8F:25:DD:85:9E:53:B3:D2:22:35:C2:FB:9F:58
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PLBUsxnCjyXdhZ5Ts9IiNcL7n1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:fd:0c:6a:70:63:e8:d8:c8:3e:9b:44:7c:9e:79:7d:d6:60:
7e:45:73:f0:04:03:04:b8:06:02:ff:ab:80:0a:97:0c:97:8c:
68:89:11:f7:76:22:d3:43:2c:7c:28:e8:30:67:a1:d3:b2:33:
28:b4:8b:0d:20:23:60:4d:2e:0e:35:87:48:10:3e:0c:99:fb:
0e:52:0d:e8:53:27:eb:33:08:19:95:a2:01:20:32:c7:95:6e:
11:78:e3:0f:d6:ee:74:57:f5:a9:22:d6:c1:42:da:e6:12:f0:
d8:6a:46:2c:fb:58:b9:de:91:60:31:e3:20:54:3b:e7:2d:7a:
b6:5d:87:6e:a6:f1:55:8a:0d:cc:b3:72:1d:37:53:de:b0:1b:
39:d2:d1:1a:ab:15:67:27:d9:3f:e6:7b:48:32:11:7b:b7:ec:
bf:76:f9:a1:31:37:25:fe:35:15:65:67:7e:55:93:f5:a7:61:
82:f7:9b:46:5d:7b:a2:50:d8:11:9e:fe:00:4c:f9:ff:b3:67:
57:75:e4:bb:ba:e9:8f:f0:bd:74:57:ba:b0:90:84:0c:b1:8a:
69:d8:66:f2:41:ea:59:37:a4:e7:d8:06:19:83:6e:24:d8:c0:
97:f1:f5:08:80:e8:e6:ae:b0:a4:71:ac:d2:35:5d:56:ae:76:
8b:9b:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:59 2025 by rpki-client