Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/p21sUp3x6Wp09A5bu3fW6GG14a0.roa
File: p21sUp3x6Wp09A5bu3fW6GG14a0.roa (raw, json)
Hash identifier: CZi7IKjxv9hypGLfJ66vwjOTtOTc/E9llXO8FSS0tO0=
Subject key identifier: A7:6D:6C:52:9D:F1:E9:6A:74:F4:0E:5B:BB:77:D6:E8:61:B5:E1:AD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FF0E31FEDF1D2E2C84129040FB7CB290D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/p21sUp3x6Wp09A5bu3fW6GG14a0.roa
Signing time: Fri 07 Jun 2024 04:09:27 +0000
ROA not before: Fri 07 Jun 2024 04:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Jun 2024 05:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f0:e3:1f:ed:f1:d2:e2:c8:41:29:04:0f:b7:cb:29:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 7 04:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a76d6c529df1e96a74f40e5bbb77d6e861b5e1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3e:2b:8f:98:25:e4:ed:e9:ab:43:fe:1b:97:
c0:e8:1b:6c:9e:b4:4f:ec:65:36:91:a7:19:5a:bc:
c8:a0:2f:aa:36:f0:20:86:f8:1a:1b:08:9b:9b:54:
da:d7:e2:ad:b0:f5:aa:f8:93:b4:e8:f6:ea:b4:5e:
f1:e0:04:2b:47:a3:63:33:c1:20:03:61:3e:76:08:
57:3e:8a:63:86:3d:bd:7b:ae:f0:45:f9:cc:a2:41:
f9:70:a8:9a:af:c4:9b:36:6b:70:61:de:e3:a6:47:
00:04:01:e8:3c:4b:b4:ba:5e:ab:8d:19:31:1e:6a:
d4:4f:57:8b:27:ef:5b:d9:e5:dc:72:b7:76:d8:3c:
7a:28:85:da:b3:90:3e:8b:d8:87:f5:16:a4:66:96:
0b:be:ba:bd:4a:fd:b5:59:3b:7f:22:5b:e5:ae:00:
e1:8f:e6:a0:30:80:a0:a7:63:d1:94:33:f4:77:2c:
22:ac:f8:52:72:d0:a7:0e:c9:a0:a2:ee:51:18:69:
d4:87:67:d6:a4:28:89:23:4e:85:32:e0:93:fd:cc:
a4:92:12:6f:6e:7b:44:db:83:5a:f7:b7:a6:b6:4f:
8a:39:56:b5:85:77:2d:ce:72:24:c4:6c:27:57:0c:
90:e0:c6:00:fa:cc:ee:8a:43:63:d8:73:2b:c6:00:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6D:6C:52:9D:F1:E9:6A:74:F4:0E:5B:BB:77:D6:E8:61:B5:E1:AD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/p21sUp3x6Wp09A5bu3fW6GG14a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:12:35:de:1b:a0:d0:a4:bb:93:d7:08:b6:ca:b3:40:6d:12:
06:28:22:37:c3:4e:94:58:19:7e:d2:19:11:03:d4:ee:f3:6e:
1e:6a:4e:7e:8b:d5:1d:a7:9e:c6:8d:57:00:03:89:45:e5:27:
66:f4:7b:7d:6e:10:27:1e:01:68:47:95:0a:a1:57:24:e0:5b:
5d:8a:be:73:6d:e1:e8:1f:f2:33:3f:7a:41:71:da:bb:12:e8:
82:01:9e:1f:a8:48:bd:03:83:e0:3c:60:fd:55:73:57:86:12:
cb:1f:42:73:e3:fd:98:d9:a1:0f:06:07:80:6e:8b:df:fe:dd:
1e:12:b2:84:c6:b6:f1:07:65:6b:f8:24:89:b0:48:40:12:4d:
b7:29:cd:84:c0:94:73:39:1f:fd:7f:cb:eb:d8:b1:99:61:df:
78:1a:16:9e:05:2c:21:be:0f:03:1e:a4:93:69:b8:eb:1a:c5:
b0:dc:bd:c9:00:18:d8:8f:43:c1:10:7b:af:36:cc:9e:e8:c2:
ad:9e:ec:d9:49:4c:4a:6b:5f:9a:79:01:0c:79:68:b9:8f:e7:
9b:70:22:1d:f5:fa:bd:3e:a0:e5:95:85:65:d7:4d:cc:7d:43:
22:0c:cd:01:ed:42:53:81:43:25:70:06:a9:a9:85:4e:74:9f:
d2:91:a0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:52 2025 by rpki-client