Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ReZb3JjqKch0YHWrZdjiHVl9meo.roa
File: ReZb3JjqKch0YHWrZdjiHVl9meo.roa (raw, json)
Hash identifier: RzdF6Zvk1ZHGeShh3BT8qgHBfbZexitZr3rsKMJShmE=
Subject key identifier: 45:E6:5B:DC:98:EA:29:C8:74:60:75:AB:65:D8:E2:1D:59:7D:99:EA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019087F6852B7D9830BD906FDD26ABF1B646
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ReZb3JjqKch0YHWrZdjiHVl9meo.roa
Signing time: Sat 06 Jul 2024 12:13:18 +0000
ROA not before: Sat 06 Jul 2024 12:13:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 06 Jul 2024 13:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:87:f6:85:2b:7d:98:30:bd:90:6f:dd:26:ab:f1:b6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 6 12:13:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45e65bdc98ea29c8746075ab65d8e21d597d99ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:b5:63:50:0d:e2:e7:03:0b:89:4a:18:9f:
65:7d:56:86:24:63:36:88:84:70:88:28:8b:1d:be:
d8:c0:8d:0d:0d:db:4a:f8:00:4d:0a:f5:85:00:f8:
3d:61:08:e8:49:9c:b7:ad:85:02:6a:77:82:06:67:
41:b7:b9:93:be:f7:f3:5c:61:63:c2:cb:eb:5e:df:
fc:77:ed:8a:e4:49:d2:c2:40:92:5d:e3:ff:1f:6e:
1f:77:11:12:11:f5:dd:5b:7b:55:e1:a5:97:d6:72:
61:11:61:42:13:67:79:ac:35:b3:71:a8:94:c9:e9:
09:37:61:3d:80:57:1c:14:12:6b:46:76:a9:16:91:
46:d8:92:cb:5a:41:1a:99:56:aa:d2:d2:6e:fd:09:
47:08:dc:9e:5c:d2:fd:c9:43:8d:35:9c:cc:1b:67:
fb:37:17:b2:22:54:7e:73:f3:70:87:f5:b5:e7:e8:
5b:92:35:9e:4c:f9:de:85:8c:7b:d9:63:53:80:d0:
ab:53:e7:6a:0a:1a:f6:c0:7c:35:db:7f:fd:1f:72:
a7:c3:3d:ee:8a:b2:61:ed:28:c3:b7:36:2b:c2:e4:
c4:f1:7c:fe:fc:ab:fa:94:c1:30:db:5f:ea:dd:bd:
69:34:51:58:37:7d:ca:33:1d:3f:83:3b:7a:79:7f:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E6:5B:DC:98:EA:29:C8:74:60:75:AB:65:D8:E2:1D:59:7D:99:EA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ReZb3JjqKch0YHWrZdjiHVl9meo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:e3:2f:37:72:fe:0f:c7:f1:4b:ba:73:98:c7:83:de:03:75:
d3:3d:4c:fe:76:e7:12:0c:e3:77:cf:6e:c4:37:80:bf:48:9d:
46:8d:11:66:1a:07:3b:44:d6:fb:02:f4:e0:26:6d:c2:c8:7c:
cf:99:42:c7:ba:d3:77:ac:b1:ff:44:e5:68:89:8f:c3:d4:2e:
a6:fc:47:28:c3:08:45:a6:a7:02:e8:33:8e:b2:0b:c2:ee:93:
61:5a:e7:e1:53:b6:4f:a0:13:26:cf:b5:e0:2b:d0:6c:2d:6e:
94:43:5c:b5:90:17:6c:52:4a:21:8e:d5:5a:fb:7e:f1:de:b8:
93:81:b7:92:66:e2:91:6e:9f:c9:68:bb:17:8b:dc:96:7e:d9:
f8:bd:16:9a:43:97:a9:7c:1e:4c:b5:65:da:85:1a:38:22:03:
2a:e0:d7:24:75:6f:4f:f9:4a:4f:ed:59:6b:cd:57:9d:34:22:
c8:1f:24:d6:ab:60:2f:73:50:2b:66:03:99:0e:2a:3c:f8:0c:
80:8a:94:4b:d5:5f:f3:94:bf:fd:5d:08:c3:15:2a:04:3f:7e:
24:97:94:49:91:e9:1d:e8:56:19:4e:87:a1:85:87:5a:49:c5:
5b:98:0e:75:05:b2:25:11:f5:2f:d7:2d:1f:76:ac:68:d3:79:
ff:60:b9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:45 2025 by rpki-client