Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xjtiHpbJReiwZU0Ekm_fKCecLPg.roa
File: xjtiHpbJReiwZU0Ekm_fKCecLPg.roa (raw, json)
Hash identifier: HPy/Pb2KW/mUvw+MwkTlRvsHG3EvqTQK6+TYtYHTkOg=
Subject key identifier: C6:3B:62:1E:96:C9:45:E8:B0:65:4D:04:92:6F:DF:28:27:9C:2C:F8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01909DA107B1F5FCE1D9B10F68DB1EC553B6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xjtiHpbJReiwZU0Ekm_fKCecLPg.roa
Signing time: Wed 10 Jul 2024 17:11:34 +0000
ROA not before: Wed 10 Jul 2024 17:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jul 2024 18:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9d:a1:07:b1:f5:fc:e1:d9:b1:0f:68:db:1e:c5:53:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 10 17:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c63b621e96c945e8b0654d04926fdf28279c2cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:9a:a4:32:2f:ab:0d:fc:ef:a7:7d:60:84:
02:8b:80:af:ad:61:42:63:d1:ac:8e:88:be:fe:02:
b2:a5:75:f5:2b:07:18:e0:9b:c2:6c:bc:3b:eb:3d:
8c:bb:cb:84:f7:07:1a:b2:75:21:c9:3d:3a:8c:8c:
f5:13:7c:8a:c6:2f:bc:49:51:e0:7d:b6:33:7f:8a:
c3:f2:98:92:11:ba:15:f4:3b:27:35:5d:d8:49:20:
8a:71:19:92:cf:27:39:cd:da:1b:d5:96:c2:9c:f7:
a1:f3:ab:98:b2:e7:d1:24:80:76:92:68:e4:b4:08:
87:8f:05:91:3a:77:42:c1:22:65:ad:78:59:30:a5:
9e:84:f4:98:4a:97:89:7e:70:57:a4:21:ca:62:c9:
82:8f:94:b1:15:61:8f:24:24:e9:84:f8:8b:8d:7e:
be:aa:f6:c2:17:d0:16:1b:24:4d:8f:a0:45:dd:02:
b3:ae:f3:f4:cf:dd:5e:e1:68:0c:49:c8:3c:4c:b9:
9c:33:3d:bc:75:45:48:c8:ec:91:91:17:c4:fc:71:
57:ee:ce:d5:df:ac:f7:92:1e:55:7a:fa:ec:17:d5:
3b:fe:58:36:65:fe:49:b5:55:44:5e:4b:53:fe:1d:
d7:30:a0:04:88:fd:31:04:31:38:0e:b2:8b:17:d7:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3B:62:1E:96:C9:45:E8:B0:65:4D:04:92:6F:DF:28:27:9C:2C:F8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xjtiHpbJReiwZU0Ekm_fKCecLPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:19:fb:03:33:63:bc:0b:ac:fb:e9:03:e0:b5:ea:73:37:eb:
d2:19:cc:8f:50:72:70:2c:36:a5:2c:56:3a:5a:9d:2b:9d:83:
f6:c8:78:b1:c2:25:bb:78:f1:9f:f7:cc:73:39:b2:26:59:e9:
2c:39:49:5a:1b:28:e4:40:3c:c2:62:a6:fa:c8:af:85:c4:c0:
c8:99:02:d5:43:c2:b6:df:73:eb:00:50:e1:52:6e:1f:42:5f:
5c:68:38:1e:1e:c0:81:95:eb:a7:b9:13:7b:46:af:22:df:bc:
52:ea:10:39:63:5a:c2:bb:d8:5e:3f:2f:74:ff:57:41:55:64:
61:ec:3c:db:cf:c0:0c:84:8d:b3:36:56:97:e9:ea:1f:2b:bc:
d5:b4:f8:17:6d:c8:f2:f5:84:00:7e:4b:8d:17:3a:08:17:dd:
1d:d2:23:02:1c:ec:2a:d8:e5:89:1d:46:2a:8c:5c:a4:c8:80:
df:cc:8b:cc:e7:7f:8a:59:9d:2e:b6:24:b5:4f:c0:5a:eb:81:
2b:64:5e:0d:2b:18:74:92:86:14:70:a6:f4:38:74:53:f2:5f:
7f:a8:de:ab:f2:15:a5:93:1d:24:99:ae:69:87:93:db:77:30:
b5:d0:09:01:a6:e9:cb:b4:c8:47:84:dd:2f:ae:46:7e:28:a7:
de:60:1e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:17 2025 by rpki-client