Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mjoHdIOA2y27OOChktWCU38CJrw.roa
File: mjoHdIOA2y27OOChktWCU38CJrw.roa (raw, json)
Hash identifier: 6D5TEa6QjyCOeT1LhMyPKyJrVYrDrFTAo6pV1i3VDGo=
Subject key identifier: 9A:3A:07:74:83:80:DB:2D:BB:38:E0:A1:92:D5:82:53:7F:02:26:BC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01904BDF287E7944A7A323EBC7D43069DD0F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mjoHdIOA2y27OOChktWCU38CJrw.roa
Signing time: Mon 24 Jun 2024 20:10:34 +0000
ROA not before: Mon 24 Jun 2024 20:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Jun 2024 21:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4b:df:28:7e:79:44:a7:a3:23:eb:c7:d4:30:69:dd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 24 20:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a3a07748380db2dbb38e0a192d582537f0226bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:5a:cc:a3:a7:eb:05:2b:c2:28:a8:b6:6f:
2b:71:2f:b8:cd:61:ad:99:cb:66:dc:66:94:69:71:
32:0b:de:81:04:f7:6d:6f:b0:89:5a:d8:2e:e2:d2:
07:de:f9:97:f9:92:da:ed:a2:f1:f0:41:2c:b6:e0:
ea:d6:87:a6:08:36:fa:be:95:7f:3e:b9:c8:9a:b6:
3f:82:2b:f9:a3:8c:85:27:bc:a2:75:d8:f3:43:ab:
b0:3c:67:71:d7:ab:d0:b3:f6:8c:85:5d:14:2c:f7:
ae:2e:d2:fc:2c:29:b9:08:8f:76:70:a8:f7:b9:24:
32:6d:bc:f6:a3:cd:29:5d:a1:59:d3:76:d7:be:52:
12:a0:57:fb:da:b1:93:33:57:9f:bb:17:31:44:86:
fa:e5:a8:a3:41:51:56:33:98:f7:5b:11:45:e7:14:
35:2a:82:b3:40:19:02:51:10:46:03:34:a2:4b:48:
f2:38:2b:e9:55:38:73:c5:58:47:32:ae:a2:08:4d:
b4:8e:55:81:7d:fb:96:cd:6f:fe:d5:dd:a6:0b:fb:
51:d5:b6:ba:25:d4:69:5f:a8:f1:1b:88:81:35:78:
0e:f2:c2:88:32:36:96:14:3c:7a:76:36:10:70:08:
ee:cb:47:44:0b:8a:35:a9:c5:66:b7:de:a2:54:4b:
83:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3A:07:74:83:80:DB:2D:BB:38:E0:A1:92:D5:82:53:7F:02:26:BC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mjoHdIOA2y27OOChktWCU38CJrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:56:30:67:e6:dc:29:74:87:d1:9a:20:95:49:f7:0d:81:57:
30:07:e5:cb:7e:d0:88:d3:14:85:25:09:7f:47:1e:20:b5:1d:
88:ad:00:8f:4c:4f:e6:2b:6e:e7:5d:1a:89:44:ed:57:6c:0f:
4c:d6:1c:aa:6d:bd:63:38:dc:5c:37:86:e9:13:41:f3:b0:95:
07:ec:22:6f:57:bb:c9:a9:57:5c:3c:b9:fe:4e:11:58:b5:9a:
d7:36:32:45:a0:ba:1b:4e:e8:8e:2e:21:f0:48:b5:40:4c:1b:
31:90:3e:12:0a:56:43:85:5e:c2:15:d6:d9:c5:70:92:6e:3f:
5f:e0:c1:9b:2f:4c:0f:cd:cd:96:bf:f2:24:3c:50:9b:19:9f:
9a:b0:a1:5d:cd:53:dd:0e:47:e6:e9:8c:23:54:f2:f8:7b:da:
81:69:6f:2f:cd:23:03:ec:3a:8f:81:e1:e4:f1:54:8f:3a:21:
5e:1d:a9:ea:01:3d:92:2a:d9:3b:48:79:49:6e:48:4e:57:e1:
e9:c0:f0:c0:7a:3a:8c:0b:bd:87:16:4e:ef:6e:b4:ac:51:d5:
5f:7b:a3:ce:9e:b4:04:4b:e7:64:3c:d0:16:b1:13:25:19:92:
da:82:f1:5d:ae:fc:14:3c:c6:90:3c:30:0e:43:11:0c:fd:69:
0c:9e:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:06 2025 by rpki-client