Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/isORDzRvPPmi0V_5-yPuIuYwAcg.roa
File: isORDzRvPPmi0V_5-yPuIuYwAcg.roa (raw, json)
Hash identifier: +yGXzXoV/YpgzWo3sY/zElNS7if4RPJ8IlVjyJJYMNA=
Subject key identifier: 8A:C3:91:0F:34:6F:3C:F9:A2:D1:5F:F9:FB:23:EE:22:E6:30:01:C8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01908B9D4726FDBA64AF2C7C12D80EDB1705
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/isORDzRvPPmi0V_5-yPuIuYwAcg.roa
Signing time: Sun 07 Jul 2024 05:14:18 +0000
ROA not before: Sun 07 Jul 2024 05:14:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 06:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8b:9d:47:26:fd:ba:64:af:2c:7c:12:d8:0e:db:17:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 7 05:14:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ac3910f346f3cf9a2d15ff9fb23ee22e63001c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:c2:e8:7f:38:c9:9a:b1:2b:b5:5f:eb:fb:
f0:a8:6d:d9:4f:89:1b:44:4e:99:de:da:8d:3a:ca:
d7:76:25:0d:47:ee:11:08:52:05:17:17:df:51:8e:
4d:b4:c1:f2:6c:a8:e8:6c:74:0d:23:dc:1b:25:5d:
f8:cc:8b:c6:98:9b:82:86:1c:61:17:2c:5e:73:45:
91:9c:6a:5e:46:ed:ba:11:f8:65:64:c0:fd:1e:10:
df:bb:e7:6e:f1:da:98:7c:87:1c:54:d0:05:5a:7b:
b2:97:22:3d:32:91:61:85:d8:a5:5f:19:77:9e:89:
67:d9:d9:7f:b0:fb:23:ad:ac:f8:dd:e9:14:6e:9e:
3a:96:a8:cc:70:9d:6a:41:a9:0f:fa:e1:4f:e6:1a:
de:a9:a1:f7:5f:1b:3c:20:27:33:18:aa:59:3c:d6:
9d:f6:20:80:01:11:a5:07:1a:5b:a0:09:23:08:05:
d0:40:ae:a8:28:17:8a:6b:ac:fb:d7:3f:9a:02:0b:
1e:d8:3e:5e:08:e9:fc:54:f6:89:27:8d:42:7b:13:
34:92:c2:48:b5:3e:40:a5:72:43:e4:19:89:f0:42:
35:8e:d0:d3:f8:c7:48:96:10:f4:11:25:9d:35:92:
9d:47:66:95:8d:e2:f5:89:c5:5e:a8:ed:5b:c9:89:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C3:91:0F:34:6F:3C:F9:A2:D1:5F:F9:FB:23:EE:22:E6:30:01:C8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/isORDzRvPPmi0V_5-yPuIuYwAcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:ba:d1:70:0b:19:f9:d1:55:f3:a2:4e:39:00:d5:5e:1c:6f:
d5:e0:5c:b6:7a:d4:1c:15:8d:5f:87:55:d0:43:ae:8d:fe:33:
7d:d7:3b:07:06:bb:aa:e7:78:66:a0:f0:03:32:05:02:7a:7b:
bd:1d:76:ea:d6:bc:e0:69:74:a6:24:e5:38:5f:f4:1a:ff:d9:
31:af:5b:dd:2b:56:9d:91:9c:a5:a0:98:1d:9b:95:c9:9c:03:
78:47:86:4c:f4:59:11:43:88:b1:4c:e2:a7:0d:de:71:57:98:
e4:11:6e:a7:23:37:b3:04:c7:6b:48:9a:eb:38:ef:55:5c:53:
7f:ba:8c:f8:f6:8a:58:ae:43:6c:74:8d:76:93:e9:6a:fe:70:
45:81:cb:ae:13:f7:55:83:d5:60:20:41:97:45:a0:72:b2:76:
31:3f:63:30:94:82:5f:e7:6d:8a:77:ac:02:92:34:84:6a:3b:
51:80:35:84:ef:66:5d:96:8f:d7:7a:6e:74:54:04:dd:2f:ce:
54:6c:62:77:a5:47:66:e5:02:5a:3b:aa:b5:76:5a:64:61:6b:
d7:31:59:41:89:f3:9f:ac:74:b3:b6:ed:ad:5f:32:fd:6f:f8:
7e:7f:fa:36:93:72:65:de:f7:01:77:f1:11:02:3e:85:4d:f9:
7e:87:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:43 2025 by rpki-client