Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dxlOUTIMZQy8rYy5gWoBRi3wd9k.roa
File: dxlOUTIMZQy8rYy5gWoBRi3wd9k.roa (raw, json)
Hash identifier: gNgEhsPKXRYUQHYEqC5JJVNZcfaOjL1lpK+tkBrXEvY=
Subject key identifier: 77:19:4E:51:32:0C:65:0C:BC:AD:8C:B9:81:6A:01:46:2D:F0:77:D9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190098BC93E5A096BC41FBE7B362BD95B83
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dxlOUTIMZQy8rYy5gWoBRi3wd9k.roa
Signing time: Tue 11 Jun 2024 23:04:34 +0000
ROA not before: Tue 11 Jun 2024 23:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:98b:967a/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 11 Jun 2024 23:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:09:8b:c9:3e:5a:09:6b:c4:1f:be:7b:36:2b:d9:5b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 11 23:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77194e51320c650cbcad8cb9816a01462df077d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:9a:50:35:b9:75:c8:e3:91:c0:92:9f:e9:
4b:09:ca:4f:03:db:4e:4f:ac:38:17:7b:03:c0:11:
9f:97:c5:ad:85:c3:40:c4:18:b6:a0:c6:c9:5d:d2:
8c:f0:66:09:f0:46:97:c3:24:87:d8:88:22:a6:51:
2c:f3:61:47:de:44:7f:30:25:78:8a:3e:02:fa:e8:
2e:6f:8c:e0:33:d4:7e:3e:bd:77:f9:af:fc:df:d6:
d9:39:39:bb:33:e2:3c:b1:30:15:d6:b9:60:76:78:
f0:36:06:5e:56:6c:e3:3c:b3:9f:87:8a:a0:6c:99:
7d:25:92:81:82:6b:81:db:c1:a8:d4:23:e1:4c:3c:
6b:cf:de:26:f5:a2:08:5d:f2:96:80:92:05:26:e8:
14:23:bc:0f:00:43:1d:8c:d0:96:ba:8b:8e:47:e9:
ce:71:6f:a2:57:05:6e:0a:24:0b:be:f0:ad:cd:0d:
d6:8c:91:dc:af:c7:8c:13:c2:57:70:17:96:e7:1f:
25:43:6c:48:4c:e4:40:8f:00:87:82:53:1c:50:e7:
2e:fc:5f:9d:d4:bf:ea:37:ed:39:7d:ab:11:1b:de:
08:a6:0a:9c:d0:f4:d2:07:75:25:ab:d9:8a:1c:75:
f7:e1:62:b1:1b:b7:fc:ad:41:95:38:17:91:87:91:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:19:4E:51:32:0C:65:0C:BC:AD:8C:B9:81:6A:01:46:2D:F0:77:D9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dxlOUTIMZQy8rYy5gWoBRi3wd9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:7f:b0:b0:2a:54:8d:fc:40:5e:f7:85:65:97:da:ce:99:2a:
3a:c3:a6:58:37:b1:17:94:13:47:93:6e:9d:35:9a:02:b6:02:
8c:57:d2:4f:00:5f:1b:63:0a:95:29:62:67:0b:0d:09:ba:17:
50:89:12:e2:ac:cc:4a:68:96:ef:16:c9:de:ef:e9:e4:ea:81:
ca:79:7e:3d:d9:c3:37:e1:c7:3b:41:c7:66:ac:79:89:3f:70:
a1:03:a5:01:b4:76:6b:20:5e:3d:e2:a7:4c:61:17:a5:cd:c9:
7f:d4:07:ed:68:f6:62:c0:aa:88:f0:4f:f5:19:c5:ba:30:75:
8d:25:5c:75:d8:3b:78:eb:d7:1f:8d:ac:48:51:34:bb:a1:28:
5e:2b:8d:f5:f8:d8:78:7a:04:9d:e1:45:26:e0:0e:4c:db:e8:
02:5e:61:e0:6c:6a:09:0d:cc:bc:d5:b9:e0:4b:8f:90:24:d4:
6d:ac:2e:c1:f0:33:c1:dd:50:63:95:d0:ec:ea:57:6a:56:ba:
93:b2:e5:a6:97:56:ff:65:5f:41:66:95:f5:00:14:f7:a4:69:
af:18:d5:88:e3:97:00:a3:9c:d8:67:13:b4:d8:06:38:7d:82:
50:f6:0f:69:82:55:51:4e:20:89:06:8a:a5:2d:2c:b6:03:1b:
8d:c9:98:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:54 2025 by rpki-client