Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Sr3J0IH-vbe1Bl3QXt3F1oRS-d0.roa
File: Sr3J0IH-vbe1Bl3QXt3F1oRS-d0.roa (raw, json)
Hash identifier: 2JH/WarmVji+k6SuaxxZ2Ywg6+lyaxUNQ9oHBTE/2jU=
Subject key identifier: 4A:BD:C9:D0:81:FE:BD:B7:B5:06:5D:D0:5E:DD:C5:D6:84:52:F9:DD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01907EB488F35C0889D8377B2D47FE3FC6BC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Sr3J0IH-vbe1Bl3QXt3F1oRS-d0.roa
Signing time: Thu 04 Jul 2024 17:04:38 +0000
ROA not before: Thu 04 Jul 2024 17:04:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:7eb4:37e8/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 04 Jul 2024 17:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:b4:88:f3:5c:08:89:d8:37:7b:2d:47:fe:3f:c6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 4 17:04:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4abdc9d081febdb7b5065dd05eddc5d68452f9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:d7:9b:79:1e:2d:82:b8:7e:53:db:50:b8:
3a:34:4a:88:c6:20:35:77:e9:e1:30:8f:cc:f6:9a:
a3:87:06:08:b9:53:26:63:4d:9c:c4:a5:57:74:57:
63:23:83:d9:42:b0:0c:2d:1f:f4:85:24:50:ae:a9:
8d:f9:b1:6b:45:58:7b:9a:93:f6:e2:10:00:4d:c3:
7e:23:2c:48:dd:35:78:c1:b1:1a:b2:3b:2f:2a:87:
85:3e:d7:78:aa:6c:85:8b:12:4c:2a:a9:f6:cc:f4:
53:51:d2:8e:5b:dd:76:04:55:28:77:91:cc:88:65:
b9:11:cc:f7:ea:5f:4c:51:6c:38:0d:b2:89:fd:fb:
31:19:c1:0d:2f:ca:80:e0:18:cb:97:46:04:61:7a:
c9:bb:1f:76:8b:aa:4e:10:bc:3b:e9:43:2b:21:4f:
68:2c:80:e7:1a:61:18:c8:21:f4:c3:81:42:ec:0f:
14:5f:ed:30:94:74:ad:19:58:10:48:90:83:ad:42:
1c:7a:b8:0e:de:fd:3a:61:21:9d:47:56:9d:bb:31:
26:05:67:1e:c9:bc:a2:39:36:54:dc:38:f1:8b:5e:
88:c4:a5:d1:df:b3:a7:de:d2:69:9a:15:f8:5f:d2:
9c:4d:21:cc:4e:17:f9:b2:15:27:4f:18:2c:f0:44:
1e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:C9:D0:81:FE:BD:B7:B5:06:5D:D0:5E:DD:C5:D6:84:52:F9:DD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Sr3J0IH-vbe1Bl3QXt3F1oRS-d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:0f:2f:dc:b1:b8:f9:6e:5a:c7:aa:bd:43:4d:37:cc:58:ff:
f4:0c:33:be:b2:3f:1d:a9:ef:51:da:ad:8c:b5:5a:3d:0b:2c:
6d:df:f9:51:36:d2:1f:df:fb:e7:90:7b:17:54:e4:be:31:19:
fd:37:2c:44:ca:3b:77:b2:e6:10:59:1d:d9:de:04:d3:85:23:
a4:84:fd:f0:57:97:04:51:5a:de:25:4d:64:de:d0:f4:40:c3:
1d:31:75:9e:75:2a:d3:4b:3e:b4:f4:60:6c:9e:00:45:ff:dc:
86:db:4a:c3:3d:0c:b5:e1:ef:c9:06:21:82:46:aa:2d:97:98:
36:09:cc:d3:c7:fb:87:6c:cd:93:e5:80:b3:ca:e1:01:db:f5:
0a:58:a9:7a:5c:8b:5e:06:11:39:cb:ab:d5:b0:b7:61:1e:4a:
0b:b0:b1:67:db:e5:b9:a1:5e:63:e1:9d:a2:19:35:bd:51:5c:
4d:a7:e4:e5:fc:d0:1e:92:71:8e:c0:e6:dd:a5:d0:e0:6a:0f:
de:2c:c7:9d:23:6b:cd:35:2b:80:0f:46:90:1a:b4:0f:bc:f3:
7d:83:8a:45:43:12:9a:a8:d6:2a:3c:1e:04:74:dc:30:d4:57:
c9:b1:ee:d5:24:10:3a:26:e2:67:99:33:f3:88:0d:82:18:e6:
24:24:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:15 2025 by rpki-client