Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/04Df_CjGV16Q1x9Ib4aQYo_W1sE.roa
File: 04Df_CjGV16Q1x9Ib4aQYo_W1sE.roa (raw, json)
Hash identifier: fXM7TxGTQIGquKjBV50fxI1taLaqL2c8zfnXsJ07MAU=
Subject key identifier: D3:80:DF:FC:28:C6:57:5E:90:D7:1F:48:6F:86:90:62:8F:D6:D6:C1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190144D037AC34B2CDD9C069103C729E92B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/04Df_CjGV16Q1x9Ib4aQYo_W1sE.roa
Signing time: Fri 14 Jun 2024 01:11:49 +0000
ROA not before: Fri 14 Jun 2024 01:11:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Jun 2024 02:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:14:4d:03:7a:c3:4b:2c:dd:9c:06:91:03:c7:29:e9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 14 01:11:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d380dffc28c6575e90d71f486f8690628fd6d6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:58:ec:79:c6:dd:34:2c:e7:c8:df:25:1a:
6e:5b:a2:25:03:58:f4:7e:9a:5e:f0:de:91:ec:71:
39:d7:7a:f6:0c:7c:c7:f9:75:63:02:28:70:99:04:
73:1a:0e:a6:94:ba:26:0e:7b:df:d4:7c:a0:0f:d2:
fe:e3:64:94:f1:5b:c0:1b:10:5c:44:a8:02:8b:a7:
07:af:5e:0a:49:5b:b5:cb:f3:bd:c4:ef:aa:66:be:
22:e4:d3:ed:c8:40:0f:14:dc:75:e6:f6:f8:52:29:
fc:b1:98:b2:77:3f:d1:b4:03:11:fc:2d:29:38:d9:
00:68:ae:cf:33:77:a2:27:de:e7:e2:d4:93:c0:12:
76:c4:76:49:4c:2e:5e:2b:8b:40:08:29:3d:3f:80:
33:da:c6:ca:33:82:f3:ae:55:d6:d8:e7:de:c7:3e:
59:17:a8:09:02:6b:2b:51:97:b6:66:6f:29:6b:61:
07:8c:25:3a:c7:2b:b4:9c:72:bd:41:ea:2f:ee:f9:
2a:1d:57:e8:12:f8:09:3e:e3:19:49:d3:e2:2c:73:
bd:ef:1d:1f:cc:46:98:4c:15:f5:c5:7e:27:3e:3a:
ff:a4:5c:b4:a3:bc:12:24:f2:d0:a5:1d:19:a1:5e:
60:1c:dc:19:bc:d5:2b:cf:19:ce:62:b4:5f:b6:5d:
dc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:80:DF:FC:28:C6:57:5E:90:D7:1F:48:6F:86:90:62:8F:D6:D6:C1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/04Df_CjGV16Q1x9Ib4aQYo_W1sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:83:bc:9e:70:10:44:2e:08:e0:f0:ae:09:69:dc:72:f5:0c:
15:d0:28:dd:09:a9:1e:05:3a:b8:a7:89:2b:7c:49:37:64:51:
5c:c6:91:6b:15:17:a0:4d:a9:8b:ec:7a:01:5c:19:52:ff:11:
61:50:e9:a4:a4:6c:5c:63:22:fb:3b:d7:99:03:d4:df:4e:19:
6b:a7:b9:55:c6:b9:a1:4c:59:ea:a5:c5:14:6c:33:02:28:8b:
bd:a3:a9:14:bb:7a:2d:94:1b:b6:a1:d3:85:78:2b:de:1e:f6:
db:ce:67:f8:bb:96:99:3c:fe:54:fb:1b:7a:43:49:ea:bd:5b:
b7:4d:e1:84:b2:49:4b:65:c6:fb:04:d7:14:e5:83:de:e7:f0:
ca:0a:1e:d0:cd:c7:a4:73:75:6f:bf:2b:5f:fb:b7:fc:11:d1:
92:b3:82:df:8a:c4:ac:d2:d2:d0:e1:5b:1a:8c:fb:31:7e:3e:
68:10:10:59:2f:e0:98:c4:32:8d:ba:d8:dd:03:bb:46:7c:13:
dd:02:2b:a0:6d:aa:2e:d3:f1:24:2c:91:e1:5e:33:b5:67:54:
71:e8:44:92:a1:50:de:c9:a5:da:4c:65:9b:d2:b9:8d:e1:0b:
33:19:a5:76:9f:d3:4f:90:d1:c8:14:c1:bc:17:03:1e:13:05:
2e:9b:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 05:35:55 2024 by rpki-client on console-fra.rpki-client.org