Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/moF1HRpOZmTheCF65OqKdC0w3U0.roa
File: moF1HRpOZmTheCF65OqKdC0w3U0.roa (raw, json)
Hash identifier: 4ftHPRW6g6/7Sqsv97xX58+GYK/xCO42ZcSURC0wOhA=
Subject key identifier: 9A:81:75:1D:1A:4E:66:64:E1:78:21:7A:E4:EA:8A:74:2D:30:DD:4D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FE5F3717FDA3055399422FAA8E77B73C8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/moF1HRpOZmTheCF65OqKdC0w3U0.roa
Signing time: Wed 05 Jun 2024 01:11:27 +0000
ROA not before: Wed 05 Jun 2024 01:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Jun 2024 02:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e5:f3:71:7f:da:30:55:39:94:22:fa:a8:e7:7b:73:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 5 01:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a81751d1a4e6664e178217ae4ea8a742d30dd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:ca:7e:6d:fe:ea:13:a2:9d:42:54:01:dc:
eb:78:2f:4f:cd:c6:99:ef:d2:22:ba:cf:9f:b8:d4:
9c:c9:24:b2:3c:c7:9f:28:6d:2f:08:19:df:da:5a:
03:80:76:77:f4:82:31:8e:0c:e7:c1:3b:9c:39:e9:
a5:ca:d4:f5:9c:a2:87:d4:f1:d8:4e:ec:bc:f5:65:
f4:a5:06:0d:c3:73:c3:e4:1f:ec:6c:b2:c9:22:e6:
78:aa:f2:1b:83:8b:13:6c:46:46:5d:e4:ab:38:fd:
5e:eb:dd:cc:78:38:7a:6c:bf:1e:4c:33:a8:16:b1:
47:1c:17:3f:14:87:5e:4d:e0:36:f8:30:fe:60:63:
75:e9:3b:5a:9f:2d:9d:c3:7a:9a:3a:f6:75:1b:dc:
c6:3f:9e:92:30:11:9e:a7:ef:38:88:60:9c:3f:83:
59:9f:90:c0:62:96:03:16:ad:b6:bd:23:6e:56:ca:
ea:6d:df:b4:82:c5:1c:75:78:e3:39:30:65:48:af:
ef:f1:b7:f2:f0:43:5e:0e:1e:ba:be:52:b1:32:0c:
0a:79:69:66:fb:cc:9f:61:53:06:85:8e:71:e7:d4:
9a:31:69:30:2b:61:a7:bc:a3:e8:e3:d4:20:37:a2:
7a:c7:ad:9b:28:22:61:c9:e7:ab:b6:0d:b2:83:35:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:81:75:1D:1A:4E:66:64:E1:78:21:7A:E4:EA:8A:74:2D:30:DD:4D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/moF1HRpOZmTheCF65OqKdC0w3U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:71:00:86:74:8c:cf:86:54:e0:8a:2a:33:c4:0d:f3:53:71:
51:4f:c0:e2:8d:6e:fb:b3:66:9c:15:8c:4c:89:e5:77:60:b1:
bd:4c:6a:60:56:30:02:9a:b4:89:91:b5:6d:9a:b5:bc:fb:8a:
5c:a1:40:b1:7e:eb:d4:b1:a7:6a:ee:b8:9c:73:b0:e9:ff:bf:
55:b0:ab:ee:5c:60:bc:1f:51:12:6c:4c:c3:8c:eb:5f:60:8f:
78:10:35:14:99:aa:28:8e:4e:8c:6b:65:b2:8c:2e:72:7c:fb:
ec:92:cc:93:9d:40:3e:e5:83:e5:dc:3a:09:fc:c8:6b:93:04:
3f:ec:f3:7c:1a:42:b3:78:76:4a:3c:6e:98:b8:2c:64:eb:f3:
e3:19:16:06:d5:cb:d2:33:f4:1a:74:1c:6f:7b:2e:2a:07:3b:
14:10:c2:ea:70:87:38:80:55:36:86:a5:a3:b5:32:8a:a6:fd:
4d:0d:a3:78:ce:e6:c9:35:77:18:bc:8f:5a:aa:c6:d8:f5:01:
08:c4:01:ed:4a:76:a3:c9:e1:95:b7:a3:0d:9b:b9:2a:17:3f:
a9:75:49:0d:2b:1d:96:4d:52:f2:3b:6f:69:94:c5:a6:ce:15:
e4:5f:4b:27:54:61:10:dc:57:3c:c6:62:a7:fb:0e:75:9d:84:
ab:52:81:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:43 2025 by rpki-client