Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SNaFPyNAf0YBZmzAeqqt1aKwFhw.roa
File: SNaFPyNAf0YBZmzAeqqt1aKwFhw.roa (raw, json)
Hash identifier: Ke3AGDvAtxrgQ7rZuOU3+M/QH1ps+5g/okAMCNqoGhM=
Subject key identifier: 48:D6:85:3F:23:40:7F:46:01:66:6C:C0:7A:AA:AD:D5:A2:B0:16:1C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A6A33D8DE367C96E19216AF8040E8EF5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SNaFPyNAf0YBZmzAeqqt1aKwFhw.roa
Signing time: Fri 12 Jul 2024 11:10:34 +0000
ROA not before: Fri 12 Jul 2024 11:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 Jul 2024 12:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:a3:3d:8d:e3:67:c9:6e:19:21:6a:f8:04:0e:8e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 12 11:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48d6853f23407f4601666cc07aaaadd5a2b0161c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:78:59:91:f9:e4:4d:d4:a4:46:51:72:fa:
cc:7d:9f:5f:61:b7:bb:07:f0:25:21:60:8f:6f:3f:
01:01:95:4b:c0:0b:d1:c7:37:1b:48:4d:f5:7f:66:
f9:77:74:64:55:36:56:ef:0c:d7:80:c8:6b:7c:e2:
49:70:b7:e9:07:4a:a5:8a:d8:eb:b7:f4:23:84:3b:
a9:b9:df:d8:2f:7c:6a:a6:1a:f6:20:5a:99:d4:3d:
d4:c4:9f:58:cb:02:ae:c8:42:b0:85:1e:96:df:f3:
49:cf:22:d7:dd:74:ae:58:fe:10:78:61:9e:70:fd:
43:27:c1:f0:36:55:f8:53:c0:a1:64:f7:e5:05:c7:
80:17:9c:84:d4:bd:e4:f6:0e:05:ac:65:b7:9c:96:
e5:e4:09:22:35:0d:9a:e6:35:1b:88:a6:fc:d4:2b:
7d:d8:79:db:ec:85:2a:84:b4:48:90:4a:36:78:8e:
60:ef:e1:20:8b:d4:06:c4:fc:21:22:44:f6:c9:7b:
bf:05:e3:45:ff:9e:42:60:cd:d6:3b:a7:0f:0c:22:
aa:c4:3c:3a:3b:63:aa:41:cf:05:78:45:d4:a8:8b:
85:3d:59:df:f7:33:54:ca:23:ba:ac:26:d8:85:30:
66:92:b4:b1:65:d1:77:e5:70:16:e2:3b:07:7d:59:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D6:85:3F:23:40:7F:46:01:66:6C:C0:7A:AA:AD:D5:A2:B0:16:1C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SNaFPyNAf0YBZmzAeqqt1aKwFhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:96:ec:20:83:02:a0:44:2e:37:62:b3:36:0a:cf:06:01:e9:
0f:df:06:00:2d:34:b0:b5:06:f5:a9:48:31:18:64:53:c0:44:
82:4a:56:a7:80:c2:d8:da:bd:c9:be:ee:f1:0c:3c:2f:fa:97:
85:d9:9c:27:95:21:fb:72:0a:87:58:df:b4:28:8d:60:d4:3f:
39:6e:0e:a2:91:57:91:ea:28:eb:e3:51:8b:54:d1:6c:49:20:
ed:dc:ae:02:a1:0a:48:ab:4e:00:06:2c:61:47:71:f3:6b:d4:
34:83:3c:50:81:e8:2a:03:f5:0a:6d:4c:c3:13:82:97:9a:6c:
c7:30:38:3b:be:11:b1:d5:0c:b8:ea:93:af:75:e3:7f:20:76:
52:2d:4b:4e:d7:92:65:f1:1a:90:ea:eb:a0:ff:cc:86:b7:f9:
62:be:80:01:12:44:a8:e2:e2:1c:54:74:74:05:5a:9d:5a:db:
b9:26:21:0f:de:a6:e7:8b:de:e9:95:93:6c:9d:59:fa:2f:df:
20:f6:3d:3d:ba:92:c7:54:ad:ed:92:67:a8:df:ba:2a:7a:79:
f7:e2:be:d6:d4:e4:7f:42:e5:67:ab:b9:66:aa:03:35:f9:12:
80:74:90:40:af:13:1e:02:1f:17:5f:5e:2b:2e:7f:7f:76:ad:
04:7f:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:49 2025 by rpki-client