Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-PwHLGxlS5qLt3I6FH8-W8TDxVA.roa
File: 1-PwHLGxlS5qLt3I6FH8-W8TDxVA.roa (raw, json)
Hash identifier: zW+Muyb5AexzMLoNYfbpdicwgu9QDze3sVPG+qSlyeY=
Subject key identifier: F8:FC:07:2C:6C:65:4B:9A:8B:B7:72:3A:14:7F:3E:5B:C4:C3:C5:50
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FE54DBAD3106ACF22E9315570AC2E570D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-PwHLGxlS5qLt3I6FH8-W8TDxVA.roa
Signing time: Tue 04 Jun 2024 22:10:27 +0000
ROA not before: Tue 04 Jun 2024 22:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 04 Jun 2024 23:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e5:4d:ba:d3:10:6a:cf:22:e9:31:55:70:ac:2e:57:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 4 22:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8fc072c6c654b9a8bb7723a147f3e5bc4c3c550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:ad:5f:47:83:75:13:24:54:71:db:bd:77:
dd:76:ec:9a:84:98:db:b9:de:e0:52:80:38:5f:d6:
05:89:eb:99:ac:9c:0b:25:d2:d3:96:3f:0c:f6:bb:
91:25:d9:81:6d:06:76:9c:b8:71:be:84:ed:ab:28:
9d:8c:b7:85:d6:ef:fa:31:6f:8a:94:69:6a:f5:1e:
2c:3a:86:d2:ca:14:b4:b7:5a:06:e3:b9:22:62:bf:
75:b7:4b:3c:e2:de:e9:be:3d:d6:80:a4:14:84:c2:
d5:c5:65:cf:b6:b4:23:f7:7a:f8:ff:8a:28:16:f7:
b2:19:51:65:4d:1d:f1:51:60:dd:77:27:a8:d7:66:
9b:c1:66:c9:3b:07:27:d9:d7:bc:86:10:24:2f:e7:
c7:07:35:e3:d6:52:6b:80:6d:0a:ab:9f:b6:8e:7a:
49:4b:51:3f:0c:57:7f:90:c0:0d:48:41:4d:f1:24:
52:25:c2:83:5e:1f:86:03:94:88:8b:5c:93:92:65:
ab:11:64:09:11:ab:8e:12:0b:c8:e1:e4:ea:43:da:
5d:93:7e:fd:43:fb:fa:44:a6:4a:15:dc:18:f7:11:
ab:9a:43:4c:4e:d6:79:29:9f:30:bd:80:6f:6f:ff:
33:13:5b:c0:89:f7:b3:fd:e8:41:ff:e4:17:29:f4:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FC:07:2C:6C:65:4B:9A:8B:B7:72:3A:14:7F:3E:5B:C4:C3:C5:50
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-PwHLGxlS5qLt3I6FH8-W8TDxVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:9e:6b:fb:fb:f5:24:fa:8e:2b:b2:6a:99:e4:79:97:2a:3b:
75:f3:dc:82:58:e7:22:59:a6:de:9f:df:71:4b:cc:43:90:00:
55:bd:ec:66:d5:de:8e:6d:f4:fa:d7:2a:a5:52:8d:58:e6:3d:
e6:af:30:d0:b4:55:3a:0b:65:d4:df:45:94:84:0d:d0:9e:6b:
31:70:92:5b:3e:52:2a:ff:e8:0d:6c:fc:a5:93:34:ff:1a:b9:
ba:ed:c2:f9:26:74:db:a2:e1:f4:84:f1:63:8c:41:d8:67:0a:
fe:5a:94:8f:21:36:e4:21:b9:13:b4:0c:a0:8a:93:ff:53:29:
9f:03:ef:27:d0:08:83:ec:74:22:ae:14:68:c3:96:09:a3:2d:
16:67:c0:50:49:85:44:bb:00:cf:6a:b5:ae:1e:61:13:1f:3f:
75:67:a7:e7:75:93:b9:11:79:3a:09:a8:38:41:f7:cd:26:41:
de:f2:88:86:1b:d0:0e:1d:03:79:dc:ce:2a:6d:b8:17:b8:e5:
d9:7f:ce:91:77:5a:e6:05:8b:6a:44:62:c2:46:a4:99:8d:71:
56:de:43:92:8a:a5:68:af:05:02:af:f6:c2:1b:a3:e1:e4:ec:
7d:a3:d3:0c:5d:fd:7e:ce:2b:f5:3f:37:5f:46:2f:51:c4:2f:
ad:7c:a4:23
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY/lTbrTEGrPIukxVXCsLlcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjA0MjIxMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGZjMDcyYzZjNjU0YjlhOGJiNzcyM2ExNDdmM2U1YmM0YzNjNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XutX0eDdRMkVHHbvXfdduyahJjb
ud7gUoA4X9YFieuZrJwLJdLTlj8M9ruRJdmBbQZ2nLhxvoTtqyidjLeF1u/6MW+K
lGlq9R4sOobSyhS0t1oG47kiYr91t0s84t7pvj3WgKQUhMLVxWXPtrQj93r4/4oo
FveyGVFlTR3xUWDddyeo12abwWbJOwcn2de8hhAkL+fHBzXj1lJrgG0Kq5+2jnpJ
S1E/DFd/kMANSEFN8SRSJcKDXh+GA5SIi1yTkmWrEWQJEauOEgvI4eTqQ9pdk379
Q/v6RKZKFdwY9xGrmkNMTtZ5KZ8wvYBvb/8zE1vAifez/ehB/+QXKfSJ9QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPj8ByxsZUuai7dyOhR/PlvEw8VQMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvMS1Qd0hMR3hsUzVxTHQzSTZGSDgtVzhURHhWQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGUvMDk4MzdjLTk4ZjMtNGM5Zi1hZWJmLTg4MTQ4OGZmZGJi
MC8xL1VtSUVGZEpKQ2w3RDlwSmJuM2tFRG80aTNiOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQBCnmv7+/Uk+o4rsmqZ
5HmXKjt189yCWOciWaben99xS8xDkABVvexm1d6ObfT61yqlUo1Y5j3mrzDQtFU6
C2XU30WUhA3QnmsxcJJbPlIq/+gNbPylkzT/Grm67cL5JnTbouH0hPFjjEHYZwr+
WpSPITbkIbkTtAygipP/UymfA+8n0AiD7HQirhRow5YJoy0WZ8BQSYVEuwDParWu
HmETHz91Z6fndZO5EXk6Cag4QffNJkHe8oiGG9AOHQN53M4qbbgXuOXZf86Rd1rm
BYtqRGLCRqSZjXFW3kOSiqVorwUCr/bCG6Ph5Ox9o9MMXf1+ziv1PzdfRi9RxC+t
fKQj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:51 2024 by rpki-client on console-fra.rpki-client.org