Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pAleELCsEH7xq2BtTTUP3VrF91U.roa
File: pAleELCsEH7xq2BtTTUP3VrF91U.roa (raw, json)
Hash identifier: zGlVTdM/Hz2QRcbcKWO1PbpcNO2YsGesL+q0UVF5+O8=
Subject key identifier: A4:09:5E:10:B0:AC:10:7E:F1:AB:60:6D:4D:35:0F:DD:5A:C5:F7:55
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019041935B49A86A05786514F8749E9B4414
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pAleELCsEH7xq2BtTTUP3VrF91U.roa
Signing time: Sat 22 Jun 2024 20:11:34 +0000
ROA not before: Sat 22 Jun 2024 20:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 22 Jun 2024 21:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:93:5b:49:a8:6a:05:78:65:14:f8:74:9e:9b:44:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 22 20:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4095e10b0ac107ef1ab606d4d350fdd5ac5f755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:90:06:43:3e:46:f0:0d:b1:b8:e9:c1:20:6a:
55:81:5a:92:f7:ac:49:e5:ba:b4:bd:50:2f:5a:cc:
6c:0e:9d:ad:bd:fe:fc:ef:63:4b:da:cd:66:2a:91:
33:7a:02:b9:2d:d2:64:52:7e:ba:4d:71:87:d3:08:
3f:f5:4b:7c:d5:1c:4b:18:df:fa:f2:6d:53:bf:88:
2a:de:30:95:4f:9f:40:9e:d3:26:68:dd:43:01:7e:
be:59:2b:4d:d0:e8:e2:b7:43:be:db:0b:e5:cc:b2:
82:60:70:b2:3d:f4:bb:b0:c5:df:75:15:ff:72:39:
a5:65:df:6a:77:37:a8:d9:d3:81:7b:d7:a9:b3:3e:
73:68:7a:8e:9c:d0:05:a6:e1:47:6f:79:9c:89:40:
57:77:ba:25:c2:92:e1:cd:8f:b1:c0:91:70:5d:b6:
ed:32:98:98:2f:99:34:41:27:af:81:69:f0:5d:bb:
2b:2b:57:2d:38:66:34:b3:62:2f:05:22:4e:75:8c:
a2:44:f3:77:a0:7f:0a:e8:3e:4c:32:b0:98:b2:83:
bc:b1:85:22:07:e0:db:aa:b9:9d:30:e0:49:cf:94:
aa:25:29:4a:2f:d5:95:49:19:55:6f:dc:4c:36:0a:
b7:a5:b0:3d:a2:64:43:b6:13:a5:83:d2:43:07:ec:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:09:5E:10:B0:AC:10:7E:F1:AB:60:6D:4D:35:0F:DD:5A:C5:F7:55
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pAleELCsEH7xq2BtTTUP3VrF91U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:1b:ed:e8:f1:e5:30:cc:b9:c4:03:0b:3e:34:da:a2:43:20:
41:5b:74:44:78:4e:7b:ca:a9:19:7a:41:5d:17:ef:8d:43:38:
f5:5d:04:09:65:fa:80:52:d3:29:ab:43:ee:b7:79:ec:24:12:
bf:17:9a:e2:92:3d:a1:e2:63:d2:5f:24:0d:d5:e6:d3:ef:7e:
5a:84:46:da:b4:ce:a6:19:5a:9b:2b:a9:5d:f7:52:b4:33:84:
26:d2:98:a4:63:a1:47:9d:98:26:96:64:72:ea:77:20:4a:4d:
ce:76:95:d1:8b:3c:9a:ec:1b:bc:0c:c7:09:52:ba:e1:09:f2:
43:91:95:b2:7c:5a:0f:e4:25:29:05:98:8f:77:76:15:d6:05:
9a:72:37:cd:b3:c4:d4:96:a1:9d:a4:6c:4e:7c:ad:b2:69:ab:
91:84:5f:06:7c:3f:06:bf:41:2a:69:f1:79:83:d7:04:ae:c0:
26:c1:b4:3a:64:be:c2:48:e5:b8:c4:d2:9f:27:02:9f:99:81:
48:a6:bd:a8:01:b6:2f:2d:80:ee:a6:c9:d2:75:bd:0c:55:3a:
25:8b:1c:50:e8:aa:73:8f:10:d1:92:b2:45:f1:d6:6d:cc:f7:
0d:3f:8a:ef:b1:08:b7:01:0c:2b:c0:47:09:da:4a:28:9f:15:
2f:ba:43:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:41 2025 by rpki-client