Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/flLyJdSC-S5L4-k0cJCAOTPfha4.roa
File: flLyJdSC-S5L4-k0cJCAOTPfha4.roa (raw, json)
Hash identifier: /TXPGK/3nTXy1gGpHFsDfImrf5API8iYq2IN1W0fP44=
Subject key identifier: 7E:52:F2:25:D4:82:F9:2E:4B:E3:E9:34:70:90:80:39:33:DF:85:AE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01907ADCF1C0F41E39925888EF503C2D4063
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/flLyJdSC-S5L4-k0cJCAOTPfha4.roa
Signing time: Wed 03 Jul 2024 23:10:18 +0000
ROA not before: Wed 03 Jul 2024 23:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 04 Jul 2024 00:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7a:dc:f1:c0:f4:1e:39:92:58:88:ef:50:3c:2d:40:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 3 23:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e52f225d482f92e4be3e9347090803933df85ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:ad:d6:99:f4:9c:3c:d6:c1:52:64:f2:d4:
db:ba:0f:a0:73:5c:6c:8c:11:0f:65:bb:40:eb:c2:
f9:b6:cb:60:d8:3d:a4:fe:bd:dc:cb:4c:70:9d:1a:
b9:53:69:0e:bc:6a:11:4c:33:21:8b:36:65:40:42:
cc:95:69:11:29:f8:02:d9:00:60:57:a4:2f:81:56:
4c:3d:9f:44:d9:2e:4e:a9:a1:ea:6a:3e:94:5a:68:
fa:e7:8c:00:00:73:07:64:45:e1:77:01:e6:e4:f6:
e3:93:92:3d:fd:1c:0c:5f:f0:f3:9b:71:93:c9:f6:
3a:cd:82:fa:1e:b9:0c:a6:a1:0a:56:02:3e:f2:9f:
c9:a4:d9:05:6c:37:56:d8:df:ca:78:10:71:a6:a9:
68:66:cf:0c:c3:a5:b5:9b:69:eb:fd:3e:d2:32:0d:
b0:f1:bf:06:7a:f3:8d:f9:f3:fb:f5:47:a3:d6:61:
a6:a4:3d:43:7e:ab:7c:67:fe:6d:6c:49:c4:d7:b3:
84:73:f2:ef:f3:81:27:7e:8f:99:5e:33:e7:76:8e:
8c:1b:e1:21:10:1d:7d:68:c4:f8:31:d6:f3:99:64:
7c:ca:9a:f4:54:14:71:18:e5:c6:e6:d7:a5:b4:df:
ef:c0:99:8b:a0:30:ea:cf:dc:a7:21:01:da:d3:4c:
d7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:52:F2:25:D4:82:F9:2E:4B:E3:E9:34:70:90:80:39:33:DF:85:AE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/flLyJdSC-S5L4-k0cJCAOTPfha4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:74:e2:32:a2:5f:ca:14:92:dd:51:43:ad:d0:72:65:91:04:
54:84:cd:fa:04:0a:0b:c6:a9:97:a4:3a:aa:dd:bd:95:0f:7b:
1b:8c:ac:7e:ab:af:fc:6e:2b:96:62:43:35:16:c4:23:e8:a8:
5e:57:8f:94:9e:f5:3f:27:17:88:87:ea:8d:b8:27:ea:6f:5a:
d3:7e:54:ba:55:31:a9:d7:bf:29:05:f2:b3:fb:a1:36:75:24:
d0:86:ae:14:dc:9a:01:47:e5:a6:2b:63:ca:02:e8:6d:44:e2:
6c:cf:bb:e4:52:5f:a0:18:c3:8f:98:a9:45:9a:27:54:23:97:
7c:1e:81:ed:e3:13:87:62:11:01:a9:06:ab:d5:6b:98:d9:0c:
94:22:70:a3:f6:c7:19:1c:3d:b3:c8:8c:bc:f2:6b:8c:69:4c:
ec:f0:4c:4f:63:2e:ea:b8:47:bd:2c:df:df:3d:ab:2b:78:0a:
1e:73:cc:ed:d1:6f:b9:5b:06:a3:98:51:3d:ba:d6:48:c9:3c:
c9:56:1f:94:70:c2:4c:c7:87:14:5b:93:04:13:00:c2:2f:b8:
d0:ee:6a:0e:b2:98:c6:5e:05:73:9c:f1:d3:f5:70:51:17:c2:
36:cb:cc:27:49:d7:ff:90:77:41:00:d3:fc:fb:e2:04:82:78:
17:cf:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:17 2025 by rpki-client