Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/v7X7wFkwFBWoRQOXBzQqWkPVxvI.roa
File: v7X7wFkwFBWoRQOXBzQqWkPVxvI.roa (raw, json)
Hash identifier: 1ZRr4I1T13/sfwxk/4qJGd7gO6jvNUmOIijVJSv7zok=
Subject key identifier: BF:B5:FB:C0:59:30:14:15:A8:45:03:97:07:34:2A:5A:43:D5:C6:F2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FD9B1EE810C8253DCFC3784D90AC464CC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/v7X7wFkwFBWoRQOXBzQqWkPVxvI.roa
Signing time: Sun 02 Jun 2024 16:04:27 +0000
ROA not before: Sun 02 Jun 2024 16:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:d9b1:a8c7/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 02 Jun 2024 16:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:b1:ee:81:0c:82:53:dc:fc:37:84:d9:0a:c4:64:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 2 16:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfb5fbc059301415a845039707342a5a43d5c6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:d1:bd:d2:87:77:92:70:aa:a8:d8:77:e4:
ef:7c:05:8c:42:bc:12:53:cd:b8:0a:f3:09:a6:7e:
22:a3:56:fd:e8:01:83:69:c1:bc:93:ed:01:26:4c:
aa:1d:20:f2:e3:34:94:0d:84:a8:e2:61:ca:8f:58:
b7:13:9f:3d:a1:37:3c:97:6e:1b:96:3d:2e:00:c6:
88:55:a7:a5:87:16:53:7c:1c:74:4c:35:b9:13:e3:
a6:f7:0a:9d:54:0d:cd:fb:a4:3a:c7:2d:c7:ab:97:
57:96:a6:6b:a2:d9:bf:c5:09:28:44:1b:95:eb:aa:
12:8b:c4:c9:72:5a:e2:38:c8:e2:4f:6d:15:16:fd:
88:99:8a:2e:4d:2b:ce:40:d8:ae:04:9f:eb:65:2f:
d3:f6:8a:f5:e7:36:17:65:c6:81:cc:d9:3e:e8:78:
27:fb:f3:a4:ea:cc:9a:db:09:1e:0d:88:a4:31:cf:
00:7f:dd:59:9b:6d:f0:0d:9c:b0:ff:71:56:c2:e2:
a4:36:2f:ff:7f:d2:f5:48:89:95:f8:c7:2c:da:95:
b9:00:cc:e7:f7:06:24:c8:2f:ae:9a:cb:0e:56:a5:
17:38:7d:8d:6a:bd:5e:7c:54:7e:a2:59:5c:06:eb:
e6:96:d1:ee:ba:2f:4e:91:fa:eb:ec:0f:ee:38:2e:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B5:FB:C0:59:30:14:15:A8:45:03:97:07:34:2A:5A:43:D5:C6:F2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/v7X7wFkwFBWoRQOXBzQqWkPVxvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:cd:8d:69:45:ad:7b:62:ac:5e:28:f8:1d:0a:a7:ee:ca:c9:
c6:a9:4f:b2:c6:18:5c:4d:89:49:16:f9:b3:7e:17:66:9e:c5:
1c:75:21:93:f1:9a:80:53:84:81:bb:50:98:08:4d:e8:9a:93:
96:2a:67:c3:60:f4:6d:b4:39:da:c4:65:5b:a4:c7:9c:59:c5:
1e:a8:74:33:8a:dc:86:ad:80:b1:b1:68:48:68:78:18:62:ef:
29:a0:83:0c:3e:c6:c8:c6:64:9c:81:61:e2:57:62:30:75:8c:
63:27:28:ea:e1:f0:7d:41:84:48:87:6d:8a:60:83:b6:ee:bb:
16:8a:a0:5b:c6:3c:e4:c7:1b:be:3d:93:b9:2b:d4:40:f0:53:
7f:21:d8:de:d7:7b:68:11:53:e9:e8:4d:74:ae:e8:1f:ce:06:
4e:e9:b3:a9:d0:3a:31:5f:f8:6a:99:9b:4f:4a:1c:99:53:29:
cc:dd:a2:1d:f5:dc:19:2b:23:ee:29:17:c2:66:6d:44:84:7c:
f6:d5:4e:a5:8b:6c:9c:60:1d:81:c6:ef:c5:33:16:ed:ea:bf:
eb:ec:83:32:0a:57:9f:71:ec:b1:93:09:5a:75:72:9e:f1:54:
51:b8:b0:79:1e:68:16:7f:a0:cd:44:40:67:41:7e:2d:e5:26:
ad:8d:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:03 2025 by rpki-client