Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oJFS83AM5ErXLOlZVM_QPcvaZ-g.roa
File: oJFS83AM5ErXLOlZVM_QPcvaZ-g.roa (raw, json)
Hash identifier: 9HshMlwuq6w2FwVANwDFrbXkqCJiei+vMVh+NJqot+A=
Subject key identifier: A0:91:52:F3:70:0C:E4:4A:D7:2C:E9:59:54:CF:D0:3D:CB:DA:67:E8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019000FBEA7508C2BDA0E153F5A30D346213
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oJFS83AM5ErXLOlZVM_QPcvaZ-g.roa
Signing time: Mon 10 Jun 2024 07:10:27 +0000
ROA not before: Mon 10 Jun 2024 07:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Jun 2024 08:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:00:fb:ea:75:08:c2:bd:a0:e1:53:f5:a3:0d:34:62:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 10 07:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a09152f3700ce44ad72ce95954cfd03dcbda67e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:00:77:b7:ae:3a:9d:07:64:23:b0:c3:67:
ec:67:9b:b5:27:b5:f0:36:d5:7c:30:29:4f:db:78:
56:3c:7b:23:2b:83:a2:eb:cd:6f:a4:84:bc:cd:05:
7f:47:83:93:73:bd:15:a8:99:5b:4b:15:12:46:bc:
fc:da:42:9f:8a:a6:25:2f:6f:43:0f:99:45:3c:89:
cc:82:bd:48:67:bc:0d:2b:70:30:be:35:70:31:14:
d7:31:36:35:34:95:a9:d5:25:c7:41:05:dd:8c:98:
f4:21:f8:4a:14:35:c6:ff:e2:40:65:1a:26:ef:dc:
3e:7d:2a:42:e8:fb:c8:d2:45:4a:5d:4c:c2:d1:fd:
dc:d8:06:27:0b:96:37:17:3b:a9:6b:80:40:a9:fc:
e5:62:ab:e7:f7:b4:f3:13:0b:98:49:b2:05:8b:26:
5f:c7:3b:ff:70:cd:59:ea:16:57:66:0f:3c:85:8b:
b7:84:72:89:00:21:71:84:14:ba:78:86:41:a6:69:
ba:35:cb:88:31:55:c7:98:cd:8b:14:7e:1b:a7:ec:
a1:f3:c8:e7:3d:12:0d:ad:82:c4:ea:d3:5b:0a:8e:
15:7b:e5:41:fd:ad:2d:e4:98:5d:b9:d7:ee:a4:d6:
b5:02:32:85:21:7d:55:f4:23:ec:c4:8d:19:e5:fc:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:91:52:F3:70:0C:E4:4A:D7:2C:E9:59:54:CF:D0:3D:CB:DA:67:E8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oJFS83AM5ErXLOlZVM_QPcvaZ-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:83:e2:41:7e:f7:89:a2:d6:84:d8:98:92:82:a8:93:04:4f:
81:03:86:a9:12:70:71:8a:a0:c5:6e:64:4c:35:4b:e9:b1:de:
11:a3:c8:d8:5c:42:dd:84:dd:88:92:3e:c3:70:62:5a:50:80:
1f:c2:8e:13:3e:d0:8a:6a:8a:59:fd:5b:2b:0f:35:82:c8:54:
4f:02:91:ea:79:58:4f:3b:5c:e9:82:57:4b:07:34:bd:7c:bb:
3f:13:c0:b4:51:b5:05:ac:d6:8f:d0:60:93:aa:2c:1e:83:9d:
2a:3d:33:56:39:53:7c:c6:0e:75:c2:a5:fc:ad:cc:49:73:ad:
1d:71:40:64:84:aa:f7:11:a4:70:47:2f:fc:1e:d8:b7:f4:6f:
15:76:9b:5b:12:6f:7e:dc:76:b3:bc:32:ef:27:73:cb:5f:94:
30:70:5d:73:36:50:0d:b1:95:77:d5:e9:11:71:94:db:2b:61:
20:9a:10:ae:18:ee:2b:4e:b1:08:50:3d:5b:b2:fb:74:ae:5a:
12:b0:2a:98:b7:e7:b2:bd:7f:75:22:8d:a1:96:b9:b7:57:31:
44:51:3f:a1:bb:60:47:56:f5:bb:f1:de:d5:e0:1f:c1:f6:05:
20:81:36:3c:71:02:cd:12:dc:6a:cf:c4:6a:90:33:5d:f1:08:
6f:07:12:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:42 2025 by rpki-client