Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Qlz5yodOdlfdmCZDmcvFPYQXUrY.roa
File: Qlz5yodOdlfdmCZDmcvFPYQXUrY.roa (raw, json)
Hash identifier: c+8KOsAHghpbV9oVJlPsO23VDT+z1niVbRF1Wa3QJrw=
Subject key identifier: 42:5C:F9:CA:87:4E:76:57:DD:98:26:43:99:CB:C5:3D:84:17:52:B6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A446FE3B82A7B16E01C75919059FE13D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Qlz5yodOdlfdmCZDmcvFPYQXUrY.roa
Signing time: Fri 12 Jul 2024 00:10:34 +0000
ROA not before: Fri 12 Jul 2024 00:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 Jul 2024 01:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a4:46:fe:3b:82:a7:b1:6e:01:c7:59:19:05:9f:e1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 12 00:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=425cf9ca874e7657dd98264399cbc53d841752b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:2d:b6:ce:31:f1:49:59:ce:ce:a5:9d:34:
9e:38:c6:6b:a8:af:79:15:95:a7:86:94:fa:57:84:
05:df:72:4b:cf:80:55:f6:cb:b2:4f:ab:a5:2e:09:
86:30:6f:47:39:74:63:a5:6a:65:05:aa:8d:3b:c8:
ef:cf:57:04:5f:a7:62:63:67:fb:5c:95:c6:0d:4b:
73:f6:a5:19:52:21:02:4a:49:8d:ca:84:f5:df:cb:
be:00:f2:e0:1e:3b:15:bc:1f:16:54:1b:ac:25:d8:
34:81:ba:ad:7f:cf:ea:a5:89:f1:76:85:ff:0e:5c:
ca:b1:0c:ef:72:0d:0d:17:44:25:20:2a:63:c1:9b:
bf:02:e8:cb:44:54:1f:1e:97:87:f1:14:af:96:f6:
f3:37:6d:ce:ae:b7:bc:bb:69:6c:81:00:5a:3a:2f:
01:f4:7c:74:d1:89:d7:68:c0:2d:1d:6b:d8:83:f7:
6a:fc:c1:4f:06:7d:27:be:a8:8f:5d:71:46:4a:6c:
28:6f:72:1e:75:16:dd:e2:9c:61:59:e8:a8:6e:5c:
90:ef:bd:22:cb:1f:18:a9:cd:fa:d2:e7:dd:de:f4:
90:5e:27:2c:51:0f:e6:23:98:a6:ed:f4:cf:08:7b:
79:82:0d:22:d2:76:1d:36:13:e6:6a:77:46:10:f6:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:F9:CA:87:4E:76:57:DD:98:26:43:99:CB:C5:3D:84:17:52:B6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Qlz5yodOdlfdmCZDmcvFPYQXUrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:e7:4f:51:99:b1:13:40:81:ea:72:27:07:15:6b:3c:7a:30:
38:84:a0:1d:85:b4:fb:51:22:ef:30:13:d1:92:4b:b2:37:d6:
7d:e8:fa:84:16:a5:55:1b:cd:f3:f4:a3:68:38:71:e5:4c:f5:
e0:17:21:dc:f6:3a:49:81:4c:bd:71:da:df:12:b5:ad:47:ac:
0b:52:4a:ff:a5:d5:a8:1e:46:c4:0d:b9:1f:9b:13:b4:05:49:
bd:b5:fa:0c:48:5c:f2:dc:e7:11:31:d1:85:16:91:08:bb:c2:
69:38:7a:e5:9f:33:5a:fc:79:bf:50:e0:36:50:d1:42:7a:aa:
46:6c:f4:23:a6:cf:bc:e7:a9:4b:e5:e5:79:8e:ef:b1:6f:ec:
21:c3:f4:5d:fa:31:3f:bd:a4:97:22:67:7e:37:e3:d6:a3:6a:
33:1c:e7:2a:3f:97:c7:f4:ef:fe:c5:86:02:01:4b:2b:b8:4f:
0a:66:1c:87:f1:64:49:34:a9:e5:45:71:08:c1:30:d5:a3:11:
d3:58:e7:79:c7:5b:5f:64:a9:be:af:17:28:31:aa:9c:60:91:
98:53:ed:dc:67:14:0e:42:fa:5e:30:2a:ed:c9:22:10:8a:8a:
ec:49:16:67:41:f7:7a:73:44:97:3b:bd:ae:98:1a:fe:50:93:
21:f3:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:57 2025 by rpki-client