Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4225BSBYqrIXvn3M_I4ou9e0mg4.roa
File: 4225BSBYqrIXvn3M_I4ou9e0mg4.roa (raw, json)
Hash identifier: i9H2++RODI/gN2HRwnwYXEM8gqQexsipWXV6wYN43eU=
Subject key identifier: E3:6D:B9:05:20:58:AA:B2:17:BE:7D:CC:FC:8E:28:BB:D7:B4:9A:0E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01904048DA9E5BCBD30305E1BA625AE8453C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4225BSBYqrIXvn3M_I4ou9e0mg4.roa
Signing time: Sat 22 Jun 2024 14:10:34 +0000
ROA not before: Sat 22 Jun 2024 14:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 22 Jun 2024 15:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:48:da:9e:5b:cb:d3:03:05:e1:ba:62:5a:e8:45:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 22 14:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e36db9052058aab217be7dccfc8e28bbd7b49a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:06:c4:3d:01:02:d6:5e:3d:e0:8e:7b:f6:
28:2d:b6:e5:ed:da:4d:9c:63:59:dc:a8:22:de:95:
1a:fb:93:da:6b:28:f3:99:62:16:98:70:62:11:91:
2a:0b:d6:c5:79:bb:7b:31:71:89:1a:5a:76:82:8c:
74:22:17:ec:00:01:b9:d5:04:b8:e0:ca:ad:c1:29:
37:79:96:68:7b:57:e2:0c:05:f3:9c:7c:65:d4:4e:
43:c1:4b:6f:d8:b3:06:e6:f9:a0:28:8a:ea:10:f5:
1a:6f:74:ff:07:58:54:c8:a0:b9:72:d6:54:bc:36:
75:e2:2a:ba:e6:9b:47:35:a7:57:bc:75:68:b7:25:
05:44:92:a7:3f:96:e2:69:96:cf:8b:ef:fe:d6:e3:
b6:6b:05:df:fa:ef:32:c6:e0:6b:3a:43:05:e7:3a:
ed:73:df:cc:e5:ca:a2:ad:d3:43:d9:89:b2:7b:09:
ef:6c:5a:78:64:bd:39:b4:f4:68:e4:1e:0d:c3:59:
fe:64:8c:cd:06:83:58:da:75:cd:8a:42:06:14:98:
f3:6c:eb:5c:99:20:da:b7:17:95:4f:00:22:13:dc:
4d:10:7e:0d:5c:75:37:ce:d9:27:28:8a:79:b2:9d:
12:16:29:bf:2c:b3:27:a0:cf:e8:37:63:c7:8b:48:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6D:B9:05:20:58:AA:B2:17:BE:7D:CC:FC:8E:28:BB:D7:B4:9A:0E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4225BSBYqrIXvn3M_I4ou9e0mg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:c9:38:de:70:d3:dc:65:96:ef:81:86:fe:d2:d2:38:b6:7c:
30:27:a2:c9:6c:bd:fa:0a:b2:1a:b4:30:4c:1f:e4:7e:96:81:
22:eb:d5:0c:78:d5:37:1a:90:a1:a3:40:ef:5a:05:ed:df:a0:
4b:de:1c:c6:21:0d:28:fc:8b:e6:8c:77:d5:ca:9f:a9:f2:3e:
d4:57:60:0b:a0:10:c6:43:2b:12:e1:2a:2a:eb:f2:70:1f:bd:
10:09:5c:05:65:ab:ed:77:8a:a1:4b:00:50:d7:2e:2f:51:b3:
d2:1d:7a:e5:88:ae:b3:e0:22:89:5a:ec:6f:94:92:28:15:7e:
a7:36:bc:ac:24:1b:57:4e:ce:0b:2a:09:67:73:a7:67:6e:61:
03:fc:cd:c2:f1:96:4a:c2:c0:f7:8a:eb:d3:25:36:20:ce:25:
ef:5c:66:89:2c:95:05:7a:98:0a:9b:19:29:d0:bf:b8:68:5f:
d6:5d:83:bd:ef:4c:48:91:16:bf:ec:b3:2b:2f:fc:69:66:14:
a2:0e:5a:3d:56:44:bd:ba:93:cc:7e:1b:27:24:61:4e:70:82:
1f:3a:97:23:c8:db:9d:34:60:08:7a:9f:e7:72:83:25:9d:52:
5e:65:60:d5:cb:27:18:96:28:a0:9c:cb:8b:0c:50:23:2e:69:
9e:e9:d4:d5
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 22 15:49:20 2024 by rpki-client on console-fra.rpki-client.org