Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eAFA5c-84IBDWyVWAhVuBnj8V8o.roa
File: eAFA5c-84IBDWyVWAhVuBnj8V8o.roa (raw, json)
Hash identifier: s2ig6K2Ifg/eNVqRwm22f97jRX0Y8YWyF+jrkdADAro=
Subject key identifier: 78:01:40:E5:CF:BC:E0:80:43:5B:25:56:02:15:6E:06:78:FC:57:CA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019019AA11DE0F7DB5F3C7E4489615B74D1E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eAFA5c-84IBDWyVWAhVuBnj8V8o.roa
Signing time: Sat 15 Jun 2024 02:11:34 +0000
ROA not before: Sat 15 Jun 2024 02:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Jun 2024 03:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:19:aa:11:de:0f:7d:b5:f3:c7:e4:48:96:15:b7:4d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 15 02:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=780140e5cfbce080435b255602156e0678fc57ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:e5:45:e6:1d:60:42:82:9e:cd:6d:2e:b8:
76:bd:7f:0d:3c:bf:72:fe:0d:a0:77:b4:c0:43:5c:
9f:c9:6c:28:4c:72:2f:61:88:b0:25:99:40:03:41:
a6:76:e0:3b:e1:9a:1c:ed:a0:01:49:9d:6d:b6:52:
50:71:5d:7b:0e:e7:a7:39:7f:1c:fc:04:04:dc:ea:
e0:82:67:2b:fe:6a:ed:67:b5:bf:f0:09:a1:02:e5:
f1:96:eb:41:8c:e8:f6:1d:f5:95:4f:72:37:2f:f8:
81:53:f5:b1:33:09:40:ab:77:82:b7:01:d2:87:b4:
d6:5e:65:0b:a9:75:02:10:e3:6c:9c:4a:51:d5:bb:
16:e1:da:ea:9f:e6:ab:44:55:25:5f:58:76:6f:64:
98:e9:4c:dd:3a:19:85:71:31:66:ce:fb:01:70:2b:
ce:ab:1c:b6:f8:7f:0a:1c:18:a5:bc:9c:2e:f7:7a:
1f:7b:fd:af:d0:de:eb:8b:9f:5a:6a:fa:9e:c6:de:
ae:83:77:b4:81:3f:b5:02:91:e3:13:eb:9e:d2:78:
5e:59:59:36:ac:cb:40:b8:69:b1:ec:17:c3:81:28:
cb:da:56:f7:1c:ac:4a:63:44:80:cf:7b:17:66:b8:
8f:75:5a:a7:6f:9b:df:a7:c8:9e:26:ea:e6:f3:be:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:40:E5:CF:BC:E0:80:43:5B:25:56:02:15:6E:06:78:FC:57:CA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eAFA5c-84IBDWyVWAhVuBnj8V8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:05:46:86:30:80:ad:41:df:da:63:3c:4a:27:40:72:9a:46:
84:97:95:61:d5:f4:4a:68:ad:cb:7c:4b:84:0f:04:b3:ea:48:
bc:74:aa:26:e5:7f:09:e6:b3:db:8f:a6:85:61:63:a3:2f:57:
6f:61:29:f3:23:67:51:a0:52:ee:94:90:fc:68:63:df:42:5a:
7c:14:17:a3:c0:a0:d0:fb:7a:24:2d:ce:16:0a:5e:82:6a:c2:
57:cb:c9:07:ed:d5:e3:bc:d7:dc:50:eb:73:e5:11:11:3d:3c:
8d:55:ea:a6:80:d8:89:c7:67:62:ad:f1:b5:36:50:8b:42:35:
d3:4a:62:df:6c:31:74:02:11:68:5a:b5:f8:dc:1b:bc:23:c8:
04:6f:44:65:4f:e6:38:8f:de:c7:5d:89:b2:b6:07:c6:93:fc:
c0:58:f7:82:82:ec:20:9c:a4:2d:98:40:18:a5:04:57:d3:dd:
0e:ed:26:85:6e:27:12:66:2c:06:d0:2e:73:a6:30:65:23:69:
19:7b:01:6c:50:bd:1e:36:fc:c8:f0:70:da:94:fb:39:91:48:
68:69:21:13:ec:cf:ff:33:97:69:65:a0:c5:f6:77:0b:66:76:
67:2f:43:2d:76:44:aa:1b:37:1b:a5:be:47:70:20:50:85:c5:
9e:a6:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:03 2025 by rpki-client