Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/auxDjIVp4wdjw-oC0iT4Wo9AlK0.roa
File: auxDjIVp4wdjw-oC0iT4Wo9AlK0.roa (raw, json)
Hash identifier: ZR1g0Jh7IDjciIS1yGjaOOPXwzI6kFVEPbcsbPKyfUE=
Subject key identifier: 6A:EC:43:8C:85:69:E3:07:63:C3:EA:02:D2:24:F8:5A:8F:40:94:AD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01900DDAFF5F1E032E6B989CB57C32341BEC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/auxDjIVp4wdjw-oC0iT4Wo9AlK0.roa
Signing time: Wed 12 Jun 2024 19:09:34 +0000
ROA not before: Wed 12 Jun 2024 19:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Jun 2024 20:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:da:ff:5f:1e:03:2e:6b:98:9c:b5:7c:32:34:1b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 12 19:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6aec438c8569e30763c3ea02d224f85a8f4094ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:9f:da:d9:9e:ee:8f:ec:fc:fb:cc:e7:44:
ce:28:0c:1d:61:b2:35:60:2a:14:fa:01:e7:ad:24:
3c:1c:a9:81:b3:98:3a:10:14:39:8e:a2:f8:6e:11:
29:62:e4:f1:c6:ce:ac:07:b3:a3:ac:12:00:11:d2:
de:2e:da:25:f6:36:b6:8e:40:c6:16:a7:cb:d6:1c:
6c:8f:41:8e:19:e4:2c:4d:d9:6a:be:18:fe:5d:03:
ce:fa:22:09:af:26:f7:40:22:b5:dd:45:7e:70:ad:
73:62:b8:57:88:f6:1f:69:78:18:a7:4b:8f:5d:4f:
2f:66:77:c5:69:9e:d2:12:95:6a:d0:10:66:2a:d7:
10:be:ce:23:78:8f:28:0b:e5:28:d9:ef:82:36:ed:
72:97:e9:d3:9a:58:97:6f:1a:33:c1:5a:60:ff:c2:
50:7e:aa:6b:f5:25:4f:1a:b7:c8:92:06:52:8f:10:
1b:04:82:bf:8a:26:ad:c2:45:7e:50:32:3c:0e:b2:
36:5a:e0:ea:ea:24:bd:ad:4e:ff:c1:61:50:95:e8:
05:23:e7:6f:32:80:50:74:95:4e:33:e6:00:c5:7f:
e3:50:62:3a:55:72:93:b6:27:db:74:1f:eb:68:6b:
05:b6:51:2c:56:65:06:05:66:7c:81:61:68:23:3a:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EC:43:8C:85:69:E3:07:63:C3:EA:02:D2:24:F8:5A:8F:40:94:AD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/auxDjIVp4wdjw-oC0iT4Wo9AlK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:68:c0:76:59:e8:e8:a4:03:f1:f5:14:81:b7:6f:fd:99:f9:
c8:18:58:76:42:b6:8e:0c:d1:77:af:fa:f0:06:2e:54:0c:83:
6c:1c:aa:0d:db:f8:80:ce:66:22:b7:d0:81:5d:79:8b:4d:1d:
57:70:d8:0b:03:c6:47:00:d5:9a:70:04:cc:a7:a6:ba:80:0f:
16:9a:1a:09:2d:a8:b0:fd:ee:e0:5f:47:e1:e2:78:1d:54:cc:
d4:b3:bd:ed:79:3d:2f:3e:71:10:5e:18:0c:43:48:dc:cc:ab:
03:5a:88:dd:dd:24:58:69:43:d2:d4:e4:2b:1c:cd:80:46:bb:
d8:c6:95:4c:91:d2:70:2f:86:7d:30:2f:84:4f:30:fb:61:80:
c2:67:5b:45:7b:08:fc:5d:39:64:0f:9c:1a:b3:5f:a7:a6:5e:
ae:79:ac:8f:cd:07:ff:88:cb:e1:6c:e6:d3:6d:f3:49:20:77:
ce:02:40:bf:62:87:75:c2:f5:fa:64:f6:7e:1b:ef:26:1d:6c:
68:7f:2f:72:af:6a:50:1d:8e:ac:98:4d:13:0f:5e:9a:64:28:
5e:02:31:2e:d9:de:01:08:28:c4:e9:7c:9e:67:93:e9:5a:27:
71:fa:ff:e3:14:1a:16:ca:65:60:8c:95:80:96:20:b6:82:fc:
e0:db:b0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:50 2025 by rpki-client