Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Tfp9BqRNpwG_QnsMiMbW-tN4COI.roa
File: Tfp9BqRNpwG_QnsMiMbW-tN4COI.roa (raw, json)
Hash identifier: +nGp7Hv3R6eWPqeU16zuJbBNhUDEvSaS6xjPHcD/3R4=
Subject key identifier: 4D:FA:7D:06:A4:4D:A7:01:BF:42:7B:0C:88:C6:D6:FA:D3:78:08:E2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190957A8A12F4321D4816964193B5DA25B5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Tfp9BqRNpwG_QnsMiMbW-tN4COI.roa
Signing time: Tue 09 Jul 2024 03:12:34 +0000
ROA not before: Tue 09 Jul 2024 03:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jul 2024 04:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:95:7a:8a:12:f4:32:1d:48:16:96:41:93:b5:da:25:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 9 03:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dfa7d06a44da701bf427b0c88c6d6fad37808e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:00:d4:93:58:33:b7:a9:d7:35:be:21:7e:
db:1e:cf:c2:f6:25:9e:f7:b2:1f:8a:bb:24:25:9d:
bc:06:e3:4f:fb:38:a9:40:cd:38:04:8e:87:39:66:
d6:9c:0c:b9:90:32:03:92:f7:cf:ac:51:4c:09:99:
b9:94:7d:a8:fc:65:f0:a4:05:c7:a0:28:c9:82:89:
81:69:c1:ab:8c:47:df:2a:17:83:1e:88:de:ce:db:
bd:21:20:e0:05:9f:7b:1e:a7:ac:15:bc:5f:34:db:
27:bc:91:63:92:8f:70:f0:3c:d2:24:dd:57:52:ea:
46:16:6d:3b:1f:a4:70:12:c2:57:91:a7:f9:a8:04:
74:cc:16:80:8a:3d:d5:de:b5:a9:1c:bf:9d:d9:2c:
8c:3b:be:e6:b3:de:b8:eb:53:e6:2d:bb:b2:81:63:
57:1f:22:5f:32:89:37:0c:e4:dc:52:08:06:df:27:
39:79:bf:3a:8e:36:c9:4d:b5:6a:bd:1e:9c:e1:66:
bc:67:d0:3d:36:e1:29:0f:93:57:de:eb:f0:8b:4e:
bf:81:fc:d7:18:da:86:06:02:f8:f9:14:bf:0e:e5:
6a:a1:c0:1d:50:16:38:39:f8:d5:2f:54:27:bc:31:
03:61:6a:22:37:d9:44:be:dd:f7:64:fd:e6:15:c7:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FA:7D:06:A4:4D:A7:01:BF:42:7B:0C:88:C6:D6:FA:D3:78:08:E2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Tfp9BqRNpwG_QnsMiMbW-tN4COI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:39:44:13:be:c5:6b:32:6a:b9:3c:66:af:c5:91:56:b3:04:
46:3a:85:b3:90:f1:3a:a8:96:a2:44:6c:d5:b8:07:e0:14:29:
e9:a4:cf:d8:58:3a:75:73:05:f6:0c:30:04:ec:2a:63:e6:13:
c3:92:74:5d:81:73:f4:62:b5:20:68:7d:0e:a6:db:dd:e5:86:
3a:1c:e5:2d:eb:61:23:08:54:34:43:57:9f:a7:9c:60:6c:e9:
9a:c8:bc:b0:b8:ba:22:c7:58:1b:f3:96:2b:e1:61:8c:b0:9d:
78:ff:1d:29:41:71:1d:60:06:a2:9b:d5:18:5a:22:5a:90:a8:
9d:f4:8f:bd:81:f6:ab:85:0c:b5:c9:5c:71:ef:6f:b9:82:2a:
5c:15:22:0e:d5:48:6d:ca:a4:d6:37:95:d4:85:d4:5a:ee:65:
94:b1:a8:a6:08:85:eb:23:8c:79:36:06:52:b3:26:1f:57:41:
7f:15:8b:3a:51:65:54:1d:53:63:64:45:74:18:9d:5b:61:56:
b7:86:c6:c8:68:56:32:9c:7b:13:27:34:8c:e4:5f:54:12:5e:
5a:72:1e:aa:ee:b0:ec:31:c1:f9:f6:f1:d5:2e:1c:67:b6:b4:
3d:2e:73:6d:48:d0:8f:90:fb:d7:a1:04:2b:ef:bf:14:38:c9:
aa:79:49:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:32 2025 by rpki-client