Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VFeieYqfTA4xta7v_2VxRPGnzFA.roa
File: VFeieYqfTA4xta7v_2VxRPGnzFA.roa (raw, json)
Hash identifier: SzDLsrpjXtT2sSXZGQoiqIbYDbhCSbpcOtCk7MOSWfQ=
Subject key identifier: 54:57:A2:79:8A:9F:4C:0E:31:B5:AE:EF:FF:65:71:44:F1:A7:CC:50
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019033A2A19393AFFBD7B8CE560F0D9B953B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VFeieYqfTA4xta7v_2VxRPGnzFA.roa
Signing time: Thu 20 Jun 2024 03:13:34 +0000
ROA not before: Thu 20 Jun 2024 03:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Jun 2024 04:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:33:a2:a1:93:93:af:fb:d7:b8:ce:56:0f:0d:9b:95:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 20 03:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5457a2798a9f4c0e31b5aeefff657144f1a7cc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:f1:d8:df:a2:01:b8:56:84:7a:76:7e:90:
94:ad:3e:a7:c9:d5:b4:92:7d:8d:dd:09:dd:41:fd:
1c:0c:a6:83:eb:2d:31:25:a4:84:71:dd:6f:c7:14:
95:82:19:93:2e:db:fd:19:8d:16:3a:14:16:cb:66:
b7:40:0a:97:68:d0:98:74:92:00:21:5b:5d:10:8a:
90:e2:c2:93:81:cd:2a:5b:0a:4e:f8:48:41:a9:f6:
3d:6f:b0:1c:ce:e4:b3:18:ee:ae:f1:f9:d6:bc:b6:
6d:9d:93:12:10:7c:c8:89:cf:bf:76:3b:1c:81:6f:
90:1f:07:bd:c5:5e:3b:62:e9:3c:50:59:8a:4c:06:
be:b2:21:c2:36:e8:0d:eb:67:bc:45:60:39:07:2f:
62:d7:49:36:70:9f:40:b9:61:22:dc:5e:77:8a:12:
c8:d9:5f:d3:00:2d:67:5e:36:64:de:97:f5:63:58:
57:09:c4:f2:fc:f6:c0:62:6b:01:12:01:54:ba:66:
92:58:08:21:17:af:a6:15:8e:41:dc:b7:cd:d9:6f:
c3:eb:57:8f:00:7d:6b:95:36:8a:80:e7:2a:0d:8d:
91:29:9d:51:49:d0:de:0c:a0:be:bb:b6:a6:19:e6:
26:44:a2:d6:0b:7b:90:4a:34:bf:0f:ae:0f:ba:e2:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:57:A2:79:8A:9F:4C:0E:31:B5:AE:EF:FF:65:71:44:F1:A7:CC:50
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VFeieYqfTA4xta7v_2VxRPGnzFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:ab:34:0e:3f:07:45:ba:83:0e:f2:d3:40:71:b7:dc:a5:56:
2b:d5:e2:58:a2:fe:05:df:4f:fc:62:f6:38:94:d0:6f:e1:a8:
d0:54:c4:13:5d:4f:d9:68:d5:22:48:5b:05:9e:4a:33:da:ff:
76:d9:f0:10:d9:b5:c4:20:9b:92:af:b1:a4:fb:56:b0:2d:d6:
2b:2f:06:44:8b:34:82:12:3c:de:63:03:94:3c:46:2f:89:e8:
fa:2b:6d:f4:ab:1f:d7:7d:86:7f:94:92:71:7d:56:2c:60:5e:
6a:95:ec:59:13:ef:f3:2b:87:8a:80:a5:1b:cf:28:58:55:76:
10:4b:4f:a5:03:16:32:6b:83:1e:b3:a0:2c:e0:da:54:4d:10:
ef:7b:15:97:f1:82:70:54:f1:68:2d:54:0f:74:96:44:b0:5e:
d3:7f:25:ae:93:ba:af:5f:0c:24:75:fb:61:16:59:7b:e6:1f:
75:b3:82:0a:42:00:1b:de:35:a4:22:58:24:b5:b8:55:07:01:
01:53:e0:28:7c:e6:e9:7f:22:9e:b4:8f:ce:52:69:78:fd:9a:
e1:3b:68:b4:30:29:ff:6e:fb:ba:1b:46:56:a8:df:cd:10:b4:
2b:10:5d:9d:da:08:84:bf:eb:d3:7c:de:85:3a:70:32:6f:2d:
f0:72:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:26 2025 by rpki-client