Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4G9xG_bDJGw6zXIKnEti7eO9Zyw.roa
File: 4G9xG_bDJGw6zXIKnEti7eO9Zyw.roa (raw, json)
Hash identifier: ka248IJxfsrjHnTwO0ipZVsBUVPAgjM8kwKwLRLIEU4=
Subject key identifier: E0:6F:71:1B:F6:C3:24:6C:3A:CD:72:0A:9C:4B:62:ED:E3:BD:67:2C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190600992AFEF4026220CC012526A82F4A7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4G9xG_bDJGw6zXIKnEti7eO9Zyw.roa
Signing time: Fri 28 Jun 2024 18:09:18 +0000
ROA not before: Fri 28 Jun 2024 18:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 28 Jun 2024 19:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:60:09:92:af:ef:40:26:22:0c:c0:12:52:6a:82:f4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 28 18:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e06f711bf6c3246c3acd720a9c4b62ede3bd672c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:8b:ca:c1:ba:b7:37:50:83:71:34:b2:b2:
02:1e:c4:48:9b:58:6c:da:91:62:58:2c:13:8e:02:
42:6c:9c:23:d8:99:81:f8:99:71:36:05:78:7e:ff:
e2:40:38:5b:94:0f:c4:9a:52:77:9e:fa:76:9c:b2:
b0:08:b7:51:11:10:fd:e8:e3:f2:e6:cc:d1:30:58:
0a:24:ea:5f:6f:42:e6:e7:b8:f6:55:06:47:b1:d3:
20:1a:02:fa:6f:18:fe:d5:8e:52:a9:9a:af:3a:05:
f8:55:e8:90:27:40:01:5f:06:8a:2b:9c:14:23:8c:
75:54:70:09:65:05:ef:33:ac:d7:9b:31:d1:3b:5a:
5b:64:f8:02:90:53:c8:69:eb:dd:f1:5d:2a:f6:cd:
12:f7:00:8e:30:8f:16:98:c2:e5:a6:e6:b2:38:c6:
db:49:5f:b9:2f:7e:49:a6:03:89:d4:42:84:c4:ef:
10:56:6c:cc:89:5b:b0:3b:54:f1:a2:5b:a8:36:64:
db:41:e9:a2:c6:08:41:46:4d:30:0b:dd:95:87:95:
57:ab:09:f9:f9:ca:9c:8b:0f:b5:98:3e:55:de:84:
ee:3b:6f:5f:61:18:c3:1b:99:0a:69:04:db:0c:9b:
3c:33:4d:e0:f4:e3:43:53:da:23:17:e9:33:51:c4:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6F:71:1B:F6:C3:24:6C:3A:CD:72:0A:9C:4B:62:ED:E3:BD:67:2C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4G9xG_bDJGw6zXIKnEti7eO9Zyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:3d:c3:e6:a7:b8:fe:8b:9f:da:93:61:35:6d:11:ce:50:6e:
25:50:db:b3:d8:62:5d:7a:7e:d2:54:c2:f0:77:f6:fd:48:e0:
06:85:dc:2b:87:fa:5e:50:c2:66:aa:3a:c1:ab:cf:f3:23:06:
b5:eb:b0:8d:c0:21:bd:79:ce:0c:03:e0:aa:a9:48:6b:c3:f3:
9d:14:e5:4e:69:24:31:85:a6:02:c8:c5:41:7b:07:fe:6a:72:
a5:7c:1a:41:b4:1f:4d:91:fb:17:36:56:c3:0e:1a:99:a6:2e:
62:4e:34:0c:94:62:2d:f7:82:ab:18:91:b7:27:5a:2a:5d:3d:
0e:6b:f5:be:3c:d3:22:79:b6:68:43:a3:7c:29:bb:47:4a:55:
38:06:31:a6:b3:9d:2a:71:c7:fd:c6:90:28:d5:0e:60:4c:18:
4e:b3:da:80:42:f0:6a:57:da:53:4a:44:3e:7b:80:10:75:cd:
76:bf:58:8c:0b:26:2b:02:d8:63:0d:0b:38:c7:ad:e0:30:c0:
8b:66:7f:2f:eb:f2:0d:48:f2:50:ee:75:f5:30:56:f0:dc:e0:
b2:6b:8a:8d:a7:93:e5:bb:c5:90:b5:11:2b:cd:0d:05:b7:b7:
23:ee:1f:f8:08:50:aa:1d:50:0c:21:4d:bf:f7:42:b4:0d:52:
32:f2:49:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 23:14:49 2024 by rpki-client on console-fra.rpki-client.org