Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/niDgSwF15RH7yQmp3DmSQUNAX5I.roa
File: niDgSwF15RH7yQmp3DmSQUNAX5I.roa (raw, json)
Hash identifier: 9vd1C7LxbfMMJHhN9HRLr1267IfBO4Dg6fTKr92vGiI=
Subject key identifier: 9E:20:E0:4B:01:75:E5:11:FB:C9:09:A9:DC:39:92:41:43:40:5F:92
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FF5601C800703BD0A5EF7CDF57352B6A6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/niDgSwF15RH7yQmp3DmSQUNAX5I.roa
Signing time: Sat 08 Jun 2024 01:04:27 +0000
ROA not before: Sat 08 Jun 2024 01:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:f560:4e2/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 08 Jun 2024 01:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f5:60:1c:80:07:03:bd:0a:5e:f7:cd:f5:73:52:b6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 8 01:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e20e04b0175e511fbc909a9dc39924143405f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:4d:2f:9f:fc:b2:c8:f3:d1:a0:fc:91:d7:
b9:fc:2f:c3:7e:30:92:b3:a0:b8:a5:8a:2e:38:9e:
ad:3e:bf:41:e0:20:8f:06:57:58:7e:70:d5:74:10:
35:2a:95:9a:a5:e2:35:a9:1b:c3:93:c2:7c:db:d8:
f0:f8:bb:4d:a1:d6:3b:fc:1d:65:16:1f:fc:57:7e:
9b:ed:e8:06:d4:d2:06:ed:21:29:81:c8:b8:f7:c1:
f3:89:32:8a:ae:89:22:2d:50:2a:01:3f:f3:59:cc:
14:1d:92:56:06:f4:b1:6b:bd:0b:32:9c:25:2f:80:
ed:59:b1:0f:66:b0:12:41:13:95:11:e0:32:04:94:
90:a4:2a:d7:a7:05:2c:a0:59:67:46:64:5d:e0:80:
49:bf:18:b9:b3:f2:b1:a5:5b:cf:90:72:94:3e:0f:
0a:bd:9f:e7:d8:85:a4:9d:57:47:62:a6:c0:29:bb:
a8:b0:2b:34:2d:f0:aa:d1:a7:7f:e9:45:ee:7d:b2:
aa:46:b5:72:43:ed:63:55:59:19:0d:7e:72:ca:88:
24:c7:49:33:31:14:1e:39:5b:be:c5:d5:c8:2d:b6:
84:08:f3:76:b5:e2:b5:a8:91:83:8d:c6:aa:26:2b:
17:e7:1e:72:19:56:03:e8:71:99:da:5b:1c:83:50:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:20:E0:4B:01:75:E5:11:FB:C9:09:A9:DC:39:92:41:43:40:5F:92
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/niDgSwF15RH7yQmp3DmSQUNAX5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:20:66:f6:ad:b3:45:c1:7a:96:60:d0:2b:eb:f1:24:7a:2d:
41:88:47:7b:07:e9:90:46:9f:70:46:05:7b:c3:4b:49:5a:58:
30:09:46:8b:b0:49:0f:59:93:ca:27:f6:73:cd:3a:6b:7b:bc:
1b:ae:59:64:f7:b6:88:ba:7d:6f:ff:48:0c:0a:dc:63:5d:86:
52:e5:55:23:40:7b:18:dc:de:44:db:d6:6b:e9:9f:0a:18:db:
78:42:bd:c4:f6:8c:ba:3a:5e:13:4f:40:16:2d:1b:96:b8:87:
32:da:7f:f1:35:ad:ea:17:ae:a0:7a:5e:9e:d1:c1:21:22:f6:
1b:f3:e6:02:30:a3:1e:e3:16:56:7a:74:f9:1a:7b:ef:b3:f7:
9f:2e:8b:65:57:21:e9:92:1a:37:74:8a:66:75:9a:9f:ad:65:
22:35:6a:01:c4:cf:02:82:5c:0e:80:cd:8c:e6:b5:7e:18:59:
8a:6c:e1:81:34:97:c8:9f:34:f1:23:a1:e2:e7:63:c0:91:71:
f9:6a:af:15:17:48:93:ff:99:3f:68:e7:01:29:01:56:24:9e:
a7:dc:ce:f4:ba:f6:e9:81:95:c0:ef:d2:ca:da:50:9b:4e:93:
e4:64:e0:07:d1:fb:64:23:3a:88:cd:d0:c5:1f:c8:da:6a:2f:
c4:b7:e5:9c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/1YByABwO9Cl73zfVzUramMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjA4MDEwNDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTIwZTA0YjAxNzVlNTExZmJjOTA5YTlkYzM5OTI0MTQzNDA1ZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7pNL5/8ssjz0aD8kde5/C/DfjCS
s6C4pYouOJ6tPr9B4CCPBldYfnDVdBA1KpWapeI1qRvDk8J829jw+LtNodY7/B1l
Fh/8V36b7egG1NIG7SEpgci498HziTKKrokiLVAqAT/zWcwUHZJWBvSxa70LMpwl
L4DtWbEPZrASQROVEeAyBJSQpCrXpwUsoFlnRmRd4IBJvxi5s/KxpVvPkHKUPg8K
vZ/n2IWknVdHYqbAKbuosCs0LfCq0ad/6UXufbKqRrVyQ+1jVVkZDX5yyogkx0kz
MRQeOVu+xdXILbaECPN2teK1qJGDjcaqJisX5x5yGVYD6HGZ2lscg1A7DwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ4g4EsBdeUR+8kJqdw5kkFDQF+SMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvbmlEZ1N3RjE1Ukg3eVFtcDNEbVNRVU5BWDVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC0gZvats0XBepZg0Cvr
8SR6LUGIR3sH6ZBGn3BGBXvDS0laWDAJRouwSQ9Zk8on9nPNOmt7vBuuWWT3toi6
fW//SAwK3GNdhlLlVSNAexjc3kTb1mvpnwoY23hCvcT2jLo6XhNPQBYtG5a4hzLa
f/E1reoXrqB6Xp7RwSEi9hvz5gIwox7jFlZ6dPkae++z958ui2VXIemSGjd0imZ1
mp+tZSI1agHEzwKCXA6AzYzmtX4YWYps4YE0l8ifNPEjoeLnY8CRcflqrxUXSJP/
mT9o5wEpAVYknqfczvS69umBlcDv0sraUJtOk+Rk4AfR+2QjOojN0MUfyNpqL8S3
5Zw=
-----END CERTIFICATE-----
Generated at Sat Jun 8 04:16:21 2024 by rpki-client on console-fra.rpki-client.org