Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vVHVZ-6AFO1mxJkFghzBS121dGM.roa
File: vVHVZ-6AFO1mxJkFghzBS121dGM.roa (raw, json)
Hash identifier: FmDsvUzt0ofKLyy5voa8BWqyDsUU1rsUCcVidmvqHn8=
Subject key identifier: BD:51:D5:67:EE:80:14:ED:66:C4:99:05:82:1C:C1:4B:5D:B5:74:63
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019063E1C469364C7EB64087436A1C9139EE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vVHVZ-6AFO1mxJkFghzBS121dGM.roa
Signing time: Sat 29 Jun 2024 12:04:18 +0000
ROA not before: Sat 29 Jun 2024 12:04:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:63e1:b2d5/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 29 Jun 2024 12:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:63:e1:c4:69:36:4c:7e:b6:40:87:43:6a:1c:91:39:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 29 12:04:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd51d567ee8014ed66c49905821cc14b5db57463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:12:3a:56:7e:34:79:0c:bb:a7:00:95:98:
36:97:80:3b:98:20:d6:b8:b7:07:9c:1c:71:e0:a4:
ba:0b:94:89:b0:f5:7f:7c:6e:d2:db:85:dd:5e:1b:
d5:72:d3:a6:0a:84:67:cc:2f:2b:ef:d3:fa:11:2f:
00:cc:5b:3e:72:2a:06:20:41:3c:33:7c:b5:34:6a:
d7:4a:43:dd:03:6f:c8:90:13:0e:49:70:95:a8:17:
14:06:ae:eb:78:1a:65:73:a6:df:7c:bc:97:cc:df:
76:d0:c3:fa:36:29:91:db:3f:1b:ef:66:32:39:78:
6c:0d:1a:6d:6b:7a:4d:f1:39:92:0f:7f:29:16:76:
e9:6e:1b:b6:86:ef:96:20:3b:67:0f:11:4d:21:03:
03:12:75:c0:5c:80:69:ad:b0:2b:7a:c2:4e:5e:52:
b2:b2:b2:29:90:9f:c7:97:c1:cd:ce:ea:15:ee:9a:
1b:d3:fc:9b:07:4a:6a:3c:2b:f9:57:ce:b2:e2:00:
e6:17:f0:d9:b3:b2:41:c1:30:87:24:20:55:f9:c7:
37:63:5a:48:62:9c:40:f4:e3:24:10:73:7a:75:cb:
e1:ee:3b:e1:26:aa:e0:51:ba:5c:9a:ac:3b:37:1d:
8b:a1:79:bf:f9:4b:5d:90:ba:f7:aa:6e:be:9a:6d:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:51:D5:67:EE:80:14:ED:66:C4:99:05:82:1C:C1:4B:5D:B5:74:63
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vVHVZ-6AFO1mxJkFghzBS121dGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:30:58:eb:2c:15:af:9c:e3:14:db:ac:98:72:94:bc:25:e7:
dc:23:18:43:74:b8:e2:38:f3:e3:60:54:90:a5:96:72:17:be:
0d:59:22:d4:a7:9d:a0:f8:20:4c:9a:a3:25:e2:3e:f3:93:e6:
4f:12:10:45:82:58:9c:67:5f:87:ae:39:b1:2c:d7:82:3c:02:
46:ef:46:1f:a0:b7:69:02:d9:e6:fd:6d:ab:4b:ab:5d:80:e9:
fc:9f:5b:eb:e8:16:07:ca:15:eb:c6:12:22:4d:ac:ae:d9:bb:
c3:76:94:92:e3:52:f4:6a:44:d2:e4:94:dd:21:8c:9e:00:71:
92:4a:9f:40:cb:73:82:d2:91:75:43:9a:d2:be:be:88:f2:5a:
4c:b0:2d:e1:67:1f:5b:7d:e4:6e:05:e2:f7:3c:b8:20:4b:06:
c0:89:5c:88:51:42:5f:86:84:45:5d:0f:4c:76:54:ab:c7:ce:
22:77:91:2b:a2:9a:c6:8a:9c:ac:95:20:14:8f:44:b8:1c:76:
b1:8e:89:33:44:92:d8:d2:49:43:35:dd:1c:62:6b:dd:9b:a5:
cb:e3:a1:ec:87:a1:bd:b8:38:f6:99:11:9c:65:0a:94:0c:eb:
aa:03:98:95:d5:20:64:1c:2a:30:51:2c:e8:fb:2a:ae:aa:e5:
4d:07:35:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:05 2025 by rpki-client