Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RVhOEHc1V8F42ET2QeTb5l_kvYY.roa
File: RVhOEHc1V8F42ET2QeTb5l_kvYY.roa (raw, json)
Hash identifier: Q/qrIo253l6xvA7XQvf6O+ysQpnZeaG+CKv0J0+DtJg=
Subject key identifier: 45:58:4E:10:77:35:57:C1:78:D8:44:F6:41:E4:DB:E6:5F:E4:BD:86
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FD45B0B853DB447F80D3D4FBE1CBD17F5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RVhOEHc1V8F42ET2QeTb5l_kvYY.roa
Signing time: Sat 01 Jun 2024 15:11:27 +0000
ROA not before: Sat 01 Jun 2024 15:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jun 2024 16:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d4:5b:0b:85:3d:b4:47:f8:0d:3d:4f:be:1c:bd:17:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 1 15:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45584e10773557c178d844f641e4dbe65fe4bd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:2c:5a:ed:5b:e5:3c:cf:a1:9a:4c:ab:66:
26:da:6b:61:d5:19:fb:26:87:d1:5a:ee:96:fc:ea:
c7:d0:aa:15:68:c4:72:93:69:67:e4:82:85:dc:be:
68:f0:dc:e2:3e:8d:94:4a:dc:84:4b:a8:3d:68:4d:
59:0e:f2:56:ab:33:bb:0d:a8:38:cc:14:b9:d5:24:
40:6c:b0:ac:79:7a:89:01:11:a3:6b:16:56:a3:15:
10:23:72:02:3f:6f:15:38:76:30:4e:e5:c8:71:54:
40:9a:3e:73:37:0a:76:20:bf:1e:68:f4:bd:90:57:
f0:35:8a:27:c2:e8:2f:ec:ef:4b:83:75:01:91:4b:
31:61:9e:de:d6:dc:a1:e1:b4:1a:1e:92:ee:40:71:
49:fa:c7:8f:10:76:35:34:df:d7:26:7b:0f:a1:11:
3d:fe:a4:6e:9b:8c:73:48:43:10:3c:2d:f6:0a:40:
34:25:bf:36:0a:6c:58:b8:28:40:e6:dd:f3:73:71:
08:68:30:c1:d5:02:61:79:f0:c1:58:3d:1e:79:77:
2f:f6:c3:78:7a:b2:45:36:b8:78:18:ad:e2:05:bd:
fb:77:72:d9:16:2a:82:b3:dd:cc:7e:8b:77:b0:c8:
4c:15:21:b3:c6:66:5e:f0:c7:ed:fe:bd:bb:11:5a:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:58:4E:10:77:35:57:C1:78:D8:44:F6:41:E4:DB:E6:5F:E4:BD:86
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RVhOEHc1V8F42ET2QeTb5l_kvYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:34:0c:1b:c1:9a:c0:3c:53:0d:0f:ad:98:d0:4e:40:8f:46:
04:5b:4f:b9:d2:ad:f4:0f:07:1f:3d:8e:ec:07:6c:fd:79:54:
b8:15:19:b5:75:0e:c5:07:3c:76:57:4e:24:25:8f:46:e9:3d:
73:38:e4:d8:d8:c7:02:2e:80:9d:f1:3b:e2:4b:74:19:51:83:
d5:32:c0:ba:8d:dd:5b:f3:31:28:1d:39:41:c4:07:22:2a:56:
04:b3:f6:68:d5:27:95:73:bc:9b:bb:2d:f1:34:df:67:81:77:
a7:8f:c6:62:e9:e1:08:31:b3:6d:32:03:bd:eb:3b:35:69:91:
25:39:4f:24:9d:32:c8:6e:e0:76:9d:de:c9:36:ec:8d:ef:98:
a1:ef:8d:e2:8c:e1:3d:d2:47:57:b3:15:a3:2e:7e:d1:ca:f0:
6f:eb:2b:40:f2:e4:27:27:ad:65:a5:7c:5d:c6:98:2b:3a:a5:
2b:12:d5:c8:33:7a:7a:43:94:ae:5b:60:35:af:15:8f:c8:9e:
ad:2e:c9:af:7b:dc:0a:86:3b:f1:53:0c:34:93:e3:c6:f7:09:
2f:f6:4e:e7:50:d3:ff:9d:65:98:e4:0a:5b:41:a2:b6:28:1e:
a1:77:57:ec:b6:be:ba:4e:be:19:89:f9:5a:21:44:38:b7:6c:
6e:e8:1a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:52 2025 by rpki-client