Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/agZOUjSHLU9-IZCojxbRKBRHj3w.roa
File: agZOUjSHLU9-IZCojxbRKBRHj3w.roa (raw, json)
Hash identifier: f9cOCVQSxt2Rlyxhu3ZOtf9yxNpDhQVFN0ark38nyi4=
Subject key identifier: 6A:06:4E:52:34:87:2D:4F:7E:21:90:A8:8F:16:D1:28:14:47:8F:7C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01901E61A66F74020ECA748340EBBB6B61BD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/agZOUjSHLU9-IZCojxbRKBRHj3w.roa
Signing time: Sun 16 Jun 2024 00:10:34 +0000
ROA not before: Sun 16 Jun 2024 00:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Jun 2024 01:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:61:a6:6f:74:02:0e:ca:74:83:40:eb:bb:6b:61:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 16 00:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a064e5234872d4f7e2190a88f16d12814478f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:9f:7a:2d:b9:a1:7a:dc:ba:a9:46:03:6f:
88:11:97:fe:2b:53:5a:b9:19:fb:c8:12:43:be:db:
e1:42:19:c8:cc:99:20:b6:5e:53:a4:94:7b:11:56:
9a:2e:9c:de:4f:34:15:c2:bb:f9:e0:54:88:a8:b6:
08:e4:1a:c0:21:fe:69:28:6b:d3:1b:d6:d4:06:40:
66:88:a5:52:e2:d9:25:37:b8:31:b6:6c:09:43:a1:
d9:f4:ee:ec:da:06:2a:2e:95:bd:65:94:10:47:05:
7c:c3:8c:d6:1a:64:86:9c:f2:95:43:45:89:fa:a9:
ea:4f:a1:00:71:8a:2f:d7:b5:66:26:b1:76:31:d3:
96:3a:a7:2f:ba:c5:b3:db:65:77:fb:4d:1b:41:0b:
b7:bc:6b:2d:dd:52:9c:16:a6:48:dc:80:f8:37:0c:
01:35:20:63:aa:45:20:36:5a:ed:93:8d:eb:65:21:
d6:87:fd:6a:ec:43:59:31:8a:bb:f0:59:c1:1c:8e:
ad:2a:3b:33:27:f1:de:3a:0b:e9:e1:93:ab:fa:43:
a1:15:c3:b0:55:9c:e2:45:7d:a4:ed:71:32:b6:a5:
24:67:f8:98:62:04:fd:55:54:ae:84:26:46:4a:8f:
99:0e:35:2d:84:22:45:22:3a:cd:da:da:20:12:12:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:06:4E:52:34:87:2D:4F:7E:21:90:A8:8F:16:D1:28:14:47:8F:7C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/agZOUjSHLU9-IZCojxbRKBRHj3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:7a:83:b0:b0:cf:2c:64:70:99:95:32:85:3b:b6:e3:3c:30:
d4:5d:b2:b1:90:91:bc:33:0b:58:e0:08:1d:26:8f:74:41:ad:
ce:5c:5a:ae:d5:50:9e:4b:e6:52:56:b7:83:2b:58:99:de:c4:
9e:82:23:3d:9e:ff:a2:d3:6a:c5:fa:ea:93:cb:af:73:0b:c8:
37:68:ce:66:df:f1:70:69:0d:62:3b:2d:fc:ea:86:ab:74:f1:
93:ca:8a:e3:58:8b:13:cb:24:e2:2c:40:64:29:fa:b1:d6:cc:
13:50:aa:db:b3:4e:02:db:09:54:00:cc:f3:4d:4d:51:0c:4b:
ba:c2:65:18:7e:9a:63:58:f9:be:87:82:5d:ed:23:37:a7:83:
95:77:eb:55:16:9c:65:ad:4f:14:44:d4:d6:2b:bd:0c:a3:92:
f1:2b:28:4e:ce:8a:76:86:29:20:c3:18:c2:88:59:47:eb:b9:
41:a4:31:c0:df:be:c8:4d:76:13:8b:df:6d:62:e1:f2:47:44:
e6:1d:e8:ca:fd:6b:53:3e:95:1c:7e:60:90:23:7c:b0:e2:83:
79:7f:91:c4:36:aa:eb:63:0a:fd:b5:96:ad:80:6b:56:99:3b:
19:cc:2f:10:f5:c9:5d:c1:39:c8:20:fa:9a:ff:25:4e:87:e6:
a1:d4:e8:a2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZAeYaZvdAIOynSDQOu7a2G9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjE2MDAxMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTA2NGU1MjM0ODcyZDRmN2UyMTkwYTg4ZjE2ZDEyODE0NDc4ZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9afei25oXrcuqlGA2+IEZf+K1Na
uRn7yBJDvtvhQhnIzJkgtl5TpJR7EVaaLpzeTzQVwrv54FSIqLYI5BrAIf5pKGvT
G9bUBkBmiKVS4tklN7gxtmwJQ6HZ9O7s2gYqLpW9ZZQQRwV8w4zWGmSGnPKVQ0WJ
+qnqT6EAcYov17VmJrF2MdOWOqcvusWz22V3+00bQQu3vGst3VKcFqZI3ID4NwwB
NSBjqkUgNlrtk43rZSHWh/1q7ENZMYq78FnBHI6tKjszJ/HeOgvp4ZOr+kOhFcOw
VZziRX2k7XEytqUkZ/iYYgT9VVSuhCZGSo+ZDjUthCJFIjrN2togEhIgvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGoGTlI0hy1PfiGQqI8W0SgUR498MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvYWdaT1VqU0hMVTktSVpDb2p4YlJLQlJIajN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIJ6g7CwzyxkcJmVMoU7
tuM8MNRdsrGQkbwzC1jgCB0mj3RBrc5cWq7VUJ5L5lJWt4MrWJnexJ6CIz2e/6LT
asX66pPLr3MLyDdozmbf8XBpDWI7Lfzqhqt08ZPKiuNYixPLJOIsQGQp+rHWzBNQ
qtuzTgLbCVQAzPNNTVEMS7rCZRh+mmNY+b6Hgl3tIzeng5V361UWnGWtTxRE1NYr
vQyjkvErKE7OinaGKSDDGMKIWUfruUGkMcDfvshNdhOL321i4fJHROYd6Mr9a1M+
lRx+YJAjfLDig3l/kcQ2qutjCv21lq2Aa1aZOxnMLxD1yV3BOcgg+pr/JU6H5qHU
6KI=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:39 2025 by rpki-client