Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nuaQNSmYFHhWQ_UMzeyDsDIGXjA.roa
File: nuaQNSmYFHhWQ_UMzeyDsDIGXjA.roa (raw, json)
Hash identifier: yrFQ4LhQewITWMQRl3mELSiGD2GwJRNIR0O2FpGTCo8=
Subject key identifier: 9E:E6:90:35:29:98:14:78:56:43:F5:0C:CD:EC:83:B0:32:06:5E:30
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190B9F4EB39398DDA2F289CA3EE49F3C9F0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nuaQNSmYFHhWQ_UMzeyDsDIGXjA.roa
Signing time: Tue 16 Jul 2024 05:12:34 +0000
ROA not before: Tue 16 Jul 2024 05:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 16 Jul 2024 06:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b9:f4:eb:39:39:8d:da:2f:28:9c:a3:ee:49:f3:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 16 05:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ee69035299814785643f50ccdec83b032065e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:37:fd:da:0d:f4:1f:a3:b5:f4:98:62:4a:
d4:de:1b:cb:a6:d5:a5:19:0d:a0:c0:46:4d:f7:c8:
fa:e8:3c:2a:97:07:34:2d:43:b4:3f:21:94:87:07:
fd:35:b1:58:30:c2:2a:d6:99:04:ee:2f:eb:76:0d:
8e:0b:54:bd:08:21:88:d8:79:5d:98:b9:e7:10:39:
d3:ad:45:3c:dc:49:30:a8:7a:b9:9e:75:45:12:a9:
07:b3:35:15:2d:06:53:2a:90:3d:32:92:ca:7e:5f:
dd:00:02:68:72:3f:4d:14:c2:3f:1b:f5:99:7e:85:
63:53:20:fb:a5:5d:fb:ad:04:8b:5e:97:c9:46:a3:
b7:37:fe:16:69:54:49:ce:ec:7f:6b:97:72:d2:50:
da:b6:99:1d:96:e1:81:52:df:6f:09:b4:83:4f:64:
ed:74:ad:ab:8e:5e:ca:5a:e2:d1:ad:de:c0:8a:ce:
2f:52:4f:b4:5d:2a:bc:2c:b7:22:89:13:1d:17:e9:
02:74:71:d3:e3:18:75:65:e5:23:f1:67:44:db:3c:
69:19:ec:a4:2e:4b:7d:96:f1:cd:ce:40:b1:ef:f4:
c0:51:84:c0:4c:91:73:88:fc:a0:6a:f2:b4:58:cb:
6b:eb:97:b9:d2:84:84:a8:26:b8:04:21:97:5a:e0:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E6:90:35:29:98:14:78:56:43:F5:0C:CD:EC:83:B0:32:06:5E:30
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nuaQNSmYFHhWQ_UMzeyDsDIGXjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:d2:53:cc:31:cf:1e:f6:a4:ec:7f:4e:7f:e1:c5:4d:82:42:
e0:3f:2e:8c:8a:d1:3f:64:bc:1a:0c:a0:55:ae:37:ed:cc:5a:
b6:a4:1f:3a:be:7b:82:04:28:64:58:b3:3d:ec:67:8b:de:9a:
f1:be:6c:38:8d:12:7f:29:cd:4e:40:ec:fa:3d:41:9e:53:77:
80:9a:d9:31:a5:63:88:4e:c8:b4:bf:b9:d7:8f:41:92:58:5b:
de:30:61:28:59:ab:64:65:bb:33:b2:ae:de:26:ca:38:37:f2:
fb:4f:5f:50:9e:4e:c0:d9:79:4d:2c:8f:a1:ba:71:60:ae:cb:
03:b7:05:b9:33:4a:a4:d3:0c:26:1c:4b:6e:b4:36:09:02:0e:
09:7d:af:97:9f:4a:c6:80:b4:68:11:5f:15:4a:7e:67:d0:a5:
b4:c0:2e:aa:a2:4e:c9:1d:47:34:79:ce:58:48:a3:6d:69:5a:
31:28:01:9a:05:7e:d0:49:1f:95:f6:b9:ca:77:c9:d5:45:db:
dd:89:69:b3:e8:82:39:06:1a:8c:80:04:17:e4:96:be:25:67:
39:a8:d8:1c:3e:db:b0:9d:1d:72:a2:42:ba:99:45:11:f2:49:
b7:4f:7d:f3:6d:32:4c:60:58:40:62:30:cd:4a:04:f3:1a:27:
c2:73:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:10 2025 by rpki-client