Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wJdBgGaN-RHUxLiezA9DgeVcZxo.roa
File: wJdBgGaN-RHUxLiezA9DgeVcZxo.roa (raw, json)
Hash identifier: B6p9QFC4bjSfRHJMR8VbLu3qlMMhI8A4IxuNck/yt7w=
Subject key identifier: C0:97:41:80:66:8D:F9:11:D4:C4:B8:9E:CC:0F:43:81:E5:5C:67:1A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019099C26D7839D9AF90A6918D8A82A67F40
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wJdBgGaN-RHUxLiezA9DgeVcZxo.roa
Signing time: Tue 09 Jul 2024 23:09:34 +0000
ROA not before: Tue 09 Jul 2024 23:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jul 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:99:c2:6d:78:39:d9:af:90:a6:91:8d:8a:82:a6:7f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 9 23:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0974180668df911d4c4b89ecc0f4381e55c671a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:62:c4:25:3e:09:dc:9d:21:60:ca:ec:8d:
37:a3:2b:02:0f:79:06:58:1b:37:40:ed:e4:0c:23:
5b:a6:1d:b3:35:39:22:03:77:25:91:0e:eb:0c:c5:
36:5c:a6:33:76:15:05:e7:88:d5:e1:10:eb:d9:60:
d3:5d:6c:1b:1b:a0:48:c2:f0:17:dc:26:90:24:9c:
ed:a9:13:d0:bb:66:bc:71:be:66:9f:16:7f:cd:ab:
44:72:07:1c:99:ea:a7:c0:e3:b0:9f:27:99:8b:69:
f4:c5:9d:25:cd:54:62:12:09:23:84:43:ea:19:84:
4b:14:f6:82:87:93:24:03:a1:11:90:8f:d5:2e:1b:
b1:c3:b2:64:0f:45:b2:5c:a9:91:42:10:31:b3:0a:
69:5e:fb:7c:f6:f9:6d:8d:50:a0:c8:6a:82:68:5a:
5b:97:fe:60:87:19:f4:4e:85:95:be:c6:85:8c:be:
12:0b:5f:c5:cb:ce:38:d8:0d:4f:e4:b0:b0:ff:82:
aa:88:d1:69:f9:8c:07:97:09:26:24:81:3a:42:4e:
05:70:22:d9:19:ea:03:71:29:4e:0c:f0:f2:cc:c0:
18:6a:c8:26:44:7d:65:15:42:98:4f:81:98:8e:c0:
8b:17:5c:ac:6c:f0:16:d0:4f:06:6d:b5:14:f1:93:
58:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:97:41:80:66:8D:F9:11:D4:C4:B8:9E:CC:0F:43:81:E5:5C:67:1A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/wJdBgGaN-RHUxLiezA9DgeVcZxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:d5:5f:0e:7b:ea:dd:5b:a2:4f:39:3f:43:9b:d0:c5:21:b9:
3c:cb:ef:86:4d:72:b6:b2:d7:cc:9a:e1:3a:ce:db:b1:a5:5a:
7f:d4:f8:7c:fe:31:a8:48:4e:0c:fc:c4:32:2d:09:6f:13:fe:
01:2d:94:85:79:38:38:53:3d:e5:b4:5c:41:68:9c:cd:2f:aa:
78:c3:8f:38:0f:ba:9d:ac:44:84:d9:de:8d:cc:67:77:08:a5:
ce:c0:5e:5e:3c:08:3d:8d:11:7c:e6:50:9b:ba:ad:56:99:79:
40:6d:e1:61:f9:4e:77:29:3e:00:16:ad:8a:b9:cf:a3:de:46:
51:c0:21:22:95:d1:34:62:4a:13:88:56:0b:81:80:8e:f9:59:
5a:25:4a:2c:f8:a9:32:65:31:8f:b9:02:1b:21:f4:d3:ba:af:
b0:77:5b:c6:57:8c:8a:27:ca:59:85:ac:a9:42:2c:90:cf:b8:
23:25:04:69:66:16:60:c5:9b:6c:3e:8f:b1:7d:51:7d:a1:58:
33:62:61:72:f5:27:6a:c0:98:2c:1b:06:e8:d3:b4:0f:74:04:
9f:e9:3b:6d:59:a1:89:89:a3:ed:a7:d2:17:d5:41:08:7d:e1:
41:9a:02:c6:54:5c:48:5f:c6:f7:c1:f0:b3:a9:0a:cb:60:ec:
79:6e:f0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:59 2025 by rpki-client