Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hpAN1hWI7nwVuqxv0w5saNgf0yk.roa
File: hpAN1hWI7nwVuqxv0w5saNgf0yk.roa (raw, json)
Hash identifier: hEixeqO4OfjkNKRgaiGeeER0db1yN3SoKOtMZxXNI2Q=
Subject key identifier: 86:90:0D:D6:15:88:EE:7C:15:BA:AC:6F:D3:0E:6C:68:D8:1F:D3:29
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01903CDADBB93E26BC5687F73C88C8C53286
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hpAN1hWI7nwVuqxv0w5saNgf0yk.roa
Signing time: Fri 21 Jun 2024 22:11:34 +0000
ROA not before: Fri 21 Jun 2024 22:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Jun 2024 23:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3c:da:db:b9:3e:26:bc:56:87:f7:3c:88:c8:c5:32:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 21 22:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86900dd61588ee7c15baac6fd30e6c68d81fd329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:8c:1d:90:93:c3:6c:31:78:7b:37:92:8a:
86:43:f1:18:22:62:6b:ca:fa:45:ca:a5:26:36:0d:
cb:84:02:58:d4:20:2e:78:b2:9d:ca:fa:e6:67:be:
7d:7b:7c:3a:73:01:a1:aa:6c:13:03:af:33:b3:d2:
9a:46:ff:b7:bf:fe:fc:9b:44:36:e5:87:a2:8d:bf:
0d:c7:37:14:a5:9c:83:bb:a5:e8:a4:6b:22:1f:f1:
56:ed:42:29:e5:a6:da:b6:12:96:31:81:2c:e6:78:
1f:0c:41:37:06:4c:70:21:6c:08:81:0a:1f:35:1e:
51:5c:ba:88:95:55:1b:a5:d6:49:84:6e:57:4a:9b:
4c:c7:6e:e9:e2:03:5e:c0:0e:63:c5:78:81:5d:ee:
01:91:36:97:89:a9:fb:74:41:1e:82:88:b5:d6:94:
17:f3:01:df:3a:2a:25:fa:81:36:62:7f:85:c2:8b:
a2:24:1b:ec:80:0d:81:e4:b2:5f:c6:07:98:59:1f:
64:6b:8c:e6:d4:2b:2e:6b:83:4f:19:0f:5b:fa:73:
ca:6b:e0:2a:31:00:1d:9a:00:68:ce:b8:01:64:06:
df:bb:be:20:55:16:7c:3a:67:c0:46:14:38:5a:23:
a2:91:e9:8b:b2:61:d8:3d:b2:ed:1e:2d:ca:28:e1:
72:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:90:0D:D6:15:88:EE:7C:15:BA:AC:6F:D3:0E:6C:68:D8:1F:D3:29
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hpAN1hWI7nwVuqxv0w5saNgf0yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:cb:22:45:08:d6:96:90:9b:b9:16:29:48:68:1c:b6:40:e6:
81:73:42:40:ce:0e:67:1c:22:68:f5:76:28:64:9e:fd:8c:45:
12:5a:f3:b3:81:4f:d7:cf:73:f3:ab:c7:f9:98:7a:a8:33:63:
b8:77:40:07:5b:3d:8c:ea:0f:2c:02:61:31:83:b1:41:ad:e5:
88:3b:62:cb:7a:f7:ca:98:9d:e2:39:af:42:7e:dd:d7:47:e8:
f2:04:67:78:0f:77:df:4e:be:8b:6c:a8:c4:ad:9e:82:7e:8f:
34:1a:af:13:e9:ae:19:4c:f0:16:9c:c1:e2:40:4c:6f:10:0c:
c7:71:0d:8d:d9:68:4f:7e:42:5a:a8:fa:63:6b:46:b4:31:86:
6a:b6:40:30:53:d1:57:e8:b2:36:99:f5:3d:a0:e6:0e:62:32:
7e:03:77:77:80:3c:d3:8a:ab:08:58:37:90:fb:51:9c:4a:52:
69:95:e0:f9:fe:49:c7:4a:b6:cb:51:44:f9:0b:e0:e1:25:7e:
d4:29:33:12:82:5e:b5:9d:de:1e:7c:ef:58:a2:b4:e9:20:ed:
bd:f5:1b:7e:a0:d3:9d:d7:3f:f3:65:02:4f:05:1a:3d:ca:62:
19:bb:30:99:1a:16:69:0d:6b:01:dc:2c:ee:05:ef:72:9d:d9:
ed:f6:55:64
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZA82tu5Pia8Vof3PIjIxTKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjIxMjIxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjkwMGRkNjE1ODhlZTdjMTViYWFjNmZkMzBlNmM2OGQ4MWZkMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFeMHZCTw2wxeHs3koqGQ/EYImJr
yvpFyqUmNg3LhAJY1CAueLKdyvrmZ759e3w6cwGhqmwTA68zs9KaRv+3v/78m0Q2
5Yeijb8NxzcUpZyDu6XopGsiH/FW7UIp5abathKWMYEs5ngfDEE3BkxwIWwIgQof
NR5RXLqIlVUbpdZJhG5XSptMx27p4gNewA5jxXiBXe4BkTaXian7dEEegoi11pQX
8wHfOiol+oE2Yn+FwouiJBvsgA2B5LJfxgeYWR9ka4zm1Csua4NPGQ9b+nPKa+Aq
MQAdmgBozrgBZAbfu74gVRZ8OmfARhQ4WiOikemLsmHYPbLtHi3KKOFydQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIaQDdYViO58Fbqsb9MObGjYH9MpMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvaHBBTjFoV0k3bndWdXF4djB3NXNhTmdmMHlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFnLIkUI1paQm7kWKUho
HLZA5oFzQkDODmccImj1dihknv2MRRJa87OBT9fPc/Orx/mYeqgzY7h3QAdbPYzq
DywCYTGDsUGt5Yg7Yst698qYneI5r0J+3ddH6PIEZ3gPd99OvotsqMStnoJ+jzQa
rxPprhlM8BacweJATG8QDMdxDY3ZaE9+Qlqo+mNrRrQxhmq2QDBT0VfosjaZ9T2g
5g5iMn4Dd3eAPNOKqwhYN5D7UZxKUmmV4Pn+ScdKtstRRPkL4OElftQpMxKCXrWd
3h5871iitOkg7b31G36g053XP/NlAk8FGj3KYhm7MJkaFmkNawHcLO4F73Kd2e32
VWQ=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:54 2025 by rpki-client