Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ldkexCLKbD9sKswD9SZ0rO8ia34.roa
File: ldkexCLKbD9sKswD9SZ0rO8ia34.roa (raw, json)
Hash identifier: N7PA8ko/HqwoQJNbLzpZobQ7elblYNOjs3XNk8DMJSA=
Subject key identifier: 95:D9:1E:C4:22:CA:6C:3F:6C:2A:CC:03:F5:26:74:AC:EF:22:6B:7E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01904FF2DC48240EB85037A5C3951F3F84BD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ldkexCLKbD9sKswD9SZ0rO8ia34.roa
Signing time: Tue 25 Jun 2024 15:10:34 +0000
ROA not before: Tue 25 Jun 2024 15:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Jun 2024 16:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:f2:dc:48:24:0e:b8:50:37:a5:c3:95:1f:3f:84:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 25 15:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95d91ec422ca6c3f6c2acc03f52674acef226b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:55:d4:ad:94:30:b9:b7:5c:6f:e5:41:56:
a4:6a:6c:e6:02:9a:b2:3f:bc:1b:82:21:42:c6:44:
06:5d:48:35:06:f0:02:0b:82:36:cf:88:19:98:c0:
1c:83:cf:ac:99:4c:bb:22:99:4f:77:10:09:90:26:
25:1f:75:66:a1:6f:b7:5f:8c:0c:74:bb:43:02:ac:
41:79:39:6b:17:6f:7e:7a:e4:1f:53:7f:84:2e:30:
92:8c:ce:f9:a4:99:1e:ab:4f:f0:c5:dd:70:e2:48:
40:63:a4:26:27:18:ba:3f:8d:d3:97:c4:a2:f1:7a:
6b:39:4a:d1:57:39:36:f0:08:12:2c:fc:9e:8b:2d:
c2:fd:f3:05:06:42:c5:f7:97:4c:fb:de:f0:98:0c:
84:11:86:c5:99:85:d4:58:d9:94:ff:14:8e:77:bc:
c0:de:f5:fd:61:64:73:6e:b2:5e:c6:31:b2:ea:e8:
29:a1:d8:d6:38:cb:ba:d6:24:fe:01:56:58:b3:fe:
94:ba:ee:d2:74:31:0f:ac:1c:f7:4c:3e:c6:a9:0a:
5a:9a:07:8f:92:30:60:11:46:74:35:c0:f9:82:9c:
f1:c0:93:c1:41:a3:d6:90:f4:1d:ff:9f:b8:9e:21:
23:f4:7a:4f:44:55:3a:00:aa:e3:6a:8d:01:34:ba:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D9:1E:C4:22:CA:6C:3F:6C:2A:CC:03:F5:26:74:AC:EF:22:6B:7E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ldkexCLKbD9sKswD9SZ0rO8ia34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:4a:a0:27:be:38:ce:73:45:3d:db:c9:b1:c8:0f:7e:e1:52:
b1:4a:06:ac:f3:bc:ae:45:38:b2:d0:6b:a0:ab:55:80:e4:35:
26:57:b1:93:50:d6:2b:c8:79:cf:c2:b9:16:26:2c:32:5e:54:
44:25:d9:0f:0c:10:42:26:d6:38:2d:c6:bd:64:b8:d5:71:18:
99:a0:50:ff:05:45:24:a6:29:22:42:61:96:db:a7:0c:05:3a:
f2:73:36:b2:6b:5a:bd:ff:de:49:d1:fe:a5:8b:8e:71:ef:e9:
66:d3:b2:a8:ea:9f:d6:8b:e3:52:41:97:fa:51:6e:8a:65:22:
55:f6:3b:3d:5d:06:89:82:ab:77:fc:f8:b2:02:61:81:95:f4:
6a:c3:09:7a:39:d1:8f:5e:12:56:6c:5d:ae:d6:46:46:58:ed:
7a:a1:cb:1f:59:13:55:7f:67:b0:21:33:4b:1e:58:e0:1c:9f:
46:65:73:2c:18:74:26:c4:00:b8:94:14:35:e9:5d:c7:fc:2f:
56:7f:e3:ee:a9:30:04:de:91:c9:9b:5c:4f:fb:71:c5:5c:ab:
a7:d5:b6:3a:46:ce:3e:0f:dc:be:be:a6:68:84:ba:70:b8:6a:
cd:d1:39:db:91:d6:32:c3:b5:56:f5:42:51:63:0e:d1:e2:28:
5c:b6:88:fb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZBP8txIJA64UDelw5UfP4S9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjI1MTUxMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWQ5MWVjNDIyY2E2YzNmNmMyYWNjMDNmNTI2NzRhY2VmMjI2YjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VhV1K2UMLm3XG/lQVakamzmApqy
P7wbgiFCxkQGXUg1BvACC4I2z4gZmMAcg8+smUy7IplPdxAJkCYlH3VmoW+3X4wM
dLtDAqxBeTlrF29+euQfU3+ELjCSjM75pJkeq0/wxd1w4khAY6QmJxi6P43Tl8Si
8XprOUrRVzk28AgSLPyeiy3C/fMFBkLF95dM+97wmAyEEYbFmYXUWNmU/xSOd7zA
3vX9YWRzbrJexjGy6ugpodjWOMu61iT+AVZYs/6Uuu7SdDEPrBz3TD7GqQpamgeP
kjBgEUZ0NcD5gpzxwJPBQaPWkPQd/5+4niEj9HpPRFU6AKrjao0BNLrxYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJXZHsQiymw/bCrMA/UmdKzvImt+MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvbGRrZXhDTEtiRDlzS3N3RDlTWjByTzhpYTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJBKoCe+OM5zRT3bybHI
D37hUrFKBqzzvK5FOLLQa6CrVYDkNSZXsZNQ1ivIec/CuRYmLDJeVEQl2Q8MEEIm
1jgtxr1kuNVxGJmgUP8FRSSmKSJCYZbbpwwFOvJzNrJrWr3/3knR/qWLjnHv6WbT
sqjqn9aL41JBl/pRboplIlX2Oz1dBomCq3f8+LICYYGV9GrDCXo50Y9eElZsXa7W
RkZY7Xqhyx9ZE1V/Z7AhM0seWOAcn0ZlcywYdCbEALiUFDXpXcf8L1Z/4+6pMATe
kcmbXE/7ccVcq6fVtjpGzj4P3L6+pmiEunC4as3ROduR1jLDtVb1QlFjDtHiKFy2
iPs=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:29 2025 by rpki-client