Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sAAqo0ewFxm8RRv4CaSCI781638.roa
File: sAAqo0ewFxm8RRv4CaSCI781638.roa (raw, json)
Hash identifier: 6smx9RRZ2qs1b8VsaBU7ahpMe7RtrTNh5lcheioYuM8=
Subject key identifier: B0:00:2A:A3:47:B0:17:19:BC:45:1B:F8:09:A4:82:23:BF:35:EB:7F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A110D981C0758B2D13EB288E23296F22
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sAAqo0ewFxm8RRv4CaSCI781638.roa
Signing time: Thu 11 Jul 2024 09:12:34 +0000
ROA not before: Thu 11 Jul 2024 09:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jul 2024 10:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:10:d9:81:c0:75:8b:2d:13:eb:28:8e:23:29:6f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 11 09:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0002aa347b01719bc451bf809a48223bf35eb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:29:ab:59:70:09:c1:dd:3b:98:9e:bf:17:
5f:20:fc:d5:4e:4b:e4:36:6d:78:e7:e3:5b:00:3b:
d9:db:7c:52:6c:32:cd:86:c0:1a:ed:f0:75:86:72:
27:bd:bf:06:5b:8b:0a:3a:bf:24:11:79:b9:7a:5e:
cd:68:43:a6:62:1a:ed:0f:26:f0:aa:ff:63:0e:93:
31:be:2a:9d:e9:f8:a8:2d:09:62:1e:e4:62:25:b2:
84:9d:1d:67:f0:3b:df:fd:24:08:43:82:06:66:b0:
c9:58:02:47:1a:20:b4:8a:07:b6:96:a5:c5:c5:fd:
a4:a0:f6:f3:0f:12:8b:29:d9:7b:bc:f4:26:47:a7:
78:61:8b:2d:e8:cd:f1:ab:93:68:92:5a:52:49:8f:
a4:1a:c0:a7:7a:52:f3:71:ea:15:d0:a5:ea:fe:c6:
d6:d0:34:ec:fe:cd:72:42:77:d1:67:09:3d:f3:68:
6f:ba:56:0f:a5:0b:05:2a:64:b2:7c:96:64:1a:e2:
a3:20:b0:be:06:53:0a:58:df:48:30:0a:14:d7:13:
a8:ff:d2:2c:cd:7f:cc:e0:ff:05:f3:0b:12:4d:a4:
1c:a9:c7:63:8a:1e:58:ba:0d:b7:02:d3:95:fa:65:
5f:c5:f2:55:55:dc:56:16:de:39:9a:19:d4:b2:8e:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:2A:A3:47:B0:17:19:BC:45:1B:F8:09:A4:82:23:BF:35:EB:7F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sAAqo0ewFxm8RRv4CaSCI781638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:61:79:07:63:6e:e7:d6:7c:f2:b1:a5:39:13:5d:86:60:9b:
8b:26:27:d9:c6:ae:f5:50:c6:cc:e8:b8:09:5c:df:b0:b5:bd:
f8:f4:66:82:4e:19:0e:d3:6e:91:b1:79:5d:ab:15:0e:e5:ff:
07:8a:e9:d4:98:5a:5d:69:0c:88:2f:47:4a:8a:d0:c8:7f:37:
ad:98:74:20:01:00:1a:ae:fa:9d:39:92:07:67:14:be:c1:d1:
47:32:b8:43:b0:b2:0f:f6:b7:58:81:32:c8:bb:99:7b:ab:50:
71:65:0e:5a:26:da:af:74:e1:bf:a5:33:08:42:46:18:fe:25:
77:d0:97:7e:f3:3e:f7:28:18:9f:58:0e:76:af:85:90:f3:4a:
1b:df:32:0b:72:98:78:7b:f7:09:bd:14:71:4b:91:8c:fb:bd:
f9:5a:3f:c4:92:3e:2b:95:12:9b:9b:cb:a4:8f:d6:93:26:c7:
7f:7e:ef:b3:b0:a6:b8:f6:ba:e1:6c:db:ef:11:b5:ec:07:18:
ee:e2:2c:28:8d:7f:e1:73:a2:be:f9:10:fd:83:f4:37:a8:c1:
28:e2:8c:8d:71:ca:67:f7:a0:32:b7:4a:f1:46:e7:12:c9:d5:
7e:22:c3:ae:9f:d4:d1:a4:d3:51:4d:03:f7:47:7c:0e:68:e5:
30:0a:c9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:03 2025 by rpki-client