Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qPHTkmUcezB5T8lARsau9quczBU.roa
File: qPHTkmUcezB5T8lARsau9quczBU.roa (raw, json)
Hash identifier: T9wF/DxkigOv1dmti/irDSCqyODp2zhFkG+42alB+6w=
Subject key identifier: A8:F1:D3:92:65:1C:7B:30:79:4F:C9:40:46:C6:AE:F6:AB:9C:CC:15
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FE819AC67BE639D5B2CE7DC820C46DE03
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qPHTkmUcezB5T8lARsau9quczBU.roa
Signing time: Wed 05 Jun 2024 11:12:27 +0000
ROA not before: Wed 05 Jun 2024 11:12:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Jun 2024 12:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:19:ac:67:be:63:9d:5b:2c:e7:dc:82:0c:46:de:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 5 11:12:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8f1d392651c7b30794fc94046c6aef6ab9ccc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:9f:29:c5:72:62:13:26:42:2b:86:df:6a:
74:95:f0:c6:6f:37:f9:f2:1b:ab:e6:8d:2a:01:1f:
76:64:9c:a7:76:93:9c:f4:db:73:b1:68:53:5a:0a:
3a:5a:c9:4c:c9:78:3f:ae:f8:4c:59:84:64:b9:27:
63:ee:48:3b:0a:a1:79:41:66:02:49:0b:1e:ed:f4:
33:0b:3f:ef:f4:02:29:bc:d1:f8:f4:86:43:de:20:
f2:c5:52:4d:7b:61:22:f8:02:da:f3:2e:a6:ef:3a:
a3:22:a8:19:c5:78:ca:13:47:28:30:dd:4f:5f:d2:
ef:58:8d:ff:1a:e4:a6:08:40:0e:d1:a3:0c:c2:d8:
2a:26:a6:30:73:d4:a3:43:dc:88:f1:9c:ad:1b:5a:
a8:0d:42:4a:52:f0:11:7b:d7:0b:52:c7:a5:05:30:
a8:af:e1:87:28:f0:ab:45:84:18:b5:11:dc:b0:5d:
68:a5:f6:1a:7a:cf:46:c7:64:4f:62:22:86:30:61:
96:b5:bc:02:52:f5:40:52:89:43:ee:56:f2:88:94:
a6:a0:ef:0b:f9:8c:78:7d:b8:02:65:da:42:39:d5:
5c:52:88:35:57:e2:0a:38:71:c9:cf:fc:7e:04:f0:
b1:ba:cd:96:66:82:36:75:04:4f:39:04:7f:d1:4f:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F1:D3:92:65:1C:7B:30:79:4F:C9:40:46:C6:AE:F6:AB:9C:CC:15
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/qPHTkmUcezB5T8lARsau9quczBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:46:d5:05:50:12:1b:f6:b9:b2:d2:46:46:7c:fd:12:bd:3e:
5f:e2:cc:4c:e6:cb:d1:67:a7:b9:d0:b2:7f:a7:63:0f:f0:cd:
98:c4:e2:fc:62:22:47:e3:bd:42:e4:76:30:2c:30:b9:d4:74:
37:32:8a:9c:f6:6f:e6:ae:5f:7f:e1:a3:7e:9d:43:ef:34:0b:
1b:8a:85:63:0c:c1:b8:ce:74:c6:a3:bf:28:c0:d3:ba:15:0d:
04:04:48:c1:7f:3a:a3:4e:2b:be:6c:f9:be:e2:1e:1d:05:2a:
3c:4a:2a:db:cd:8f:e4:ef:1c:d3:8c:37:fc:5d:00:46:03:48:
01:40:5e:d3:f3:9d:2d:3e:77:3b:0f:ec:f5:0a:bf:fe:0b:86:
89:6c:98:45:30:10:98:5c:ac:c1:fd:9d:f4:82:53:20:1f:09:
85:f5:db:b0:89:75:a1:81:d7:cc:2b:e3:da:46:7b:f2:60:f7:
46:84:7c:b6:a6:ed:6b:32:0c:13:86:49:96:bf:72:73:50:48:
7b:c3:ce:b0:1a:16:7b:b9:a7:cf:03:75:ea:11:67:53:4e:d8:
34:56:53:91:3a:f9:4e:25:78:43:e1:66:9a:50:82:b3:17:2d:
61:ef:af:62:c0:1d:06:70:4e:e3:53:66:a2:e8:b0:9b:85:2c:
06:04:3e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:39 2025 by rpki-client