Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZJ6s-at6PFYowgS-Fu4Ibruev-E.roa
File: ZJ6s-at6PFYowgS-Fu4Ibruev-E.roa (raw, json)
Hash identifier: N+MbsFGwcSFJTjiKATKXdJZOxzizkwcuU/r0ey/5Hww=
Subject key identifier: 64:9E:AC:F9:AB:7A:3C:56:28:C2:04:BE:16:EE:08:6E:BB:9E:BF:E1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FADF36CBF2EED80052C00FAED40078875
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZJ6s-at6PFYowgS-Fu4Ibruev-E.roa
Signing time: Sat 25 May 2024 04:12:42 +0000
ROA not before: Sat 25 May 2024 04:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 25 May 2024 05:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ad:f3:6c:bf:2e:ed:80:05:2c:00:fa:ed:40:07:88:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 25 04:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=649eacf9ab7a3c5628c204be16ee086ebb9ebfe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:db:e6:83:38:76:ff:3c:9f:27:d0:be:cd:
c2:ea:db:07:f8:ee:89:98:36:eb:24:dc:97:8d:a9:
20:1d:e8:42:4e:b3:ab:94:a1:20:07:47:16:95:96:
a8:2b:63:1e:42:be:48:d0:ba:28:3e:1c:a4:29:bc:
ef:9f:49:f2:57:42:2f:74:f5:cd:65:1b:52:79:70:
0a:87:5c:e4:90:ca:ce:09:f3:16:51:4c:e6:eb:32:
c3:f8:70:4d:5d:b7:ab:ac:b4:85:d1:e1:49:1a:2d:
6d:01:96:8e:21:91:15:39:d9:21:60:76:4e:81:40:
60:17:75:5c:b1:cf:36:b8:bf:f4:34:2a:a1:29:b1:
f3:89:b4:3e:63:1f:fd:16:ff:2b:e8:85:52:db:67:
e3:ac:d7:1f:54:84:d2:57:c1:81:7d:c3:68:57:73:
80:0e:39:70:55:9b:c4:22:14:9e:ae:8d:39:8e:a3:
3a:4f:88:10:56:cb:34:37:bc:5d:9d:bf:20:85:8f:
f7:5b:7c:f6:87:e4:a7:70:bf:e2:85:14:17:21:43:
e2:50:f5:fe:c0:af:49:08:78:2b:d5:d7:40:72:a5:
93:f1:0a:99:c7:49:e4:a8:8a:63:9a:32:d2:8f:50:
ac:3c:12:6f:e8:cf:a4:df:4c:db:87:3e:e2:75:44:
3a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9E:AC:F9:AB:7A:3C:56:28:C2:04:BE:16:EE:08:6E:BB:9E:BF:E1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZJ6s-at6PFYowgS-Fu4Ibruev-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:95:22:03:0e:3f:03:a7:fd:7a:1f:9c:0f:87:02:b2:47:b9:
ac:ff:1d:d4:80:d3:a7:18:e4:94:40:f8:fd:cb:5d:11:22:7d:
6d:4c:c7:9a:f8:a4:e3:84:54:05:b5:8c:9e:42:de:bd:4f:f7:
67:d4:fc:a4:03:22:43:fb:48:c5:27:cd:89:06:d4:48:7f:59:
ad:fe:be:9c:d8:7a:4f:85:94:1b:0e:c8:af:b0:b8:a1:43:0d:
68:4b:bc:50:ca:c3:47:b2:0f:ca:41:f8:82:6f:2f:a7:33:a1:
f3:e6:37:ae:99:7c:99:6b:b6:88:42:ad:1a:9d:d8:4f:e3:1b:
0d:6d:72:5f:ab:7d:15:4b:28:b7:02:2d:9a:2c:4d:85:75:22:
3c:79:2d:2c:7b:1b:2b:c0:99:42:b9:d7:56:40:b9:1d:c5:47:
6e:90:dc:7f:ec:00:33:f1:6c:90:c5:3c:4f:36:99:be:47:db:
29:47:03:db:97:8f:54:4e:2b:ce:c9:2b:61:7f:9d:d3:e3:bc:
25:fe:85:8d:7e:f2:84:a8:d7:38:c7:f2:fe:c9:fc:ac:62:c6:
7b:4a:1b:f0:d3:19:9d:a3:c2:b3:d8:a0:a4:57:41:a8:ab:e1:
f6:c8:87:ea:83:a4:40:57:46:2a:2c:13:70:81:55:00:0e:58:
f5:a1:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:01 2025 by rpki-client