Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5Ok-y3sj-6GV6_nRQgnf60cPk0A.roa
File: 5Ok-y3sj-6GV6_nRQgnf60cPk0A.roa (raw, json)
Hash identifier: JkXrpHEHeYznZM/DbjdPaPwJ6oSZDRafSzw6iJGeA0Q=
Subject key identifier: E4:E9:3E:CB:7B:23:FB:A1:95:EB:F9:D1:42:09:DF:EB:47:0F:93:40
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB3BDA9CBB7880EE667CD9FD55514D8C7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5Ok-y3sj-6GV6_nRQgnf60cPk0A.roa
Signing time: Sun 26 May 2024 07:11:42 +0000
ROA not before: Sun 26 May 2024 07:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 26 May 2024 08:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b3:bd:a9:cb:b7:88:0e:e6:67:cd:9f:d5:55:14:d8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 26 07:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4e93ecb7b23fba195ebf9d14209dfeb470f9340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:07:42:fc:c2:52:8a:e3:90:15:2c:55:f6:86:
44:98:05:bd:6e:c5:bc:cd:cc:e0:bf:3b:b2:54:a8:
fb:00:74:5f:7f:53:ad:73:50:55:a0:61:c9:68:24:
04:8b:24:1b:6f:ee:a3:02:4b:23:c0:ef:a2:19:a9:
2c:2f:7b:a2:19:42:05:0e:43:e7:62:ee:6c:17:1e:
99:0c:81:eb:9c:9c:90:06:f4:ab:3b:94:97:50:34:
75:d3:56:37:ec:70:ad:6f:de:ad:b8:e5:83:4a:ac:
88:6a:f0:ba:cd:92:42:2f:11:7c:b5:d8:14:9d:aa:
6d:0f:a3:ce:28:bc:55:52:79:fd:7e:a6:af:b3:4e:
0a:4a:0f:ca:99:11:67:7a:11:05:ca:30:49:06:d6:
9f:b8:c4:ee:ff:a1:48:d1:7a:63:54:d5:7a:8e:f5:
56:14:fd:f7:37:f3:46:0e:2d:d1:0e:33:e9:4d:4a:
fd:bd:3c:4c:80:d1:ec:52:f4:82:bd:fb:bd:f9:e5:
61:a5:3e:26:03:a9:ed:ff:ed:d1:5e:26:44:93:8e:
bd:b0:ad:d2:10:2f:be:53:e7:2c:2d:92:bf:e6:54:
06:3b:d8:34:98:af:85:22:02:c3:95:ee:11:71:39:
82:20:70:19:5d:00:2c:9c:97:b1:30:52:da:32:5e:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E9:3E:CB:7B:23:FB:A1:95:EB:F9:D1:42:09:DF:EB:47:0F:93:40
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5Ok-y3sj-6GV6_nRQgnf60cPk0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:39:1c:ec:97:52:82:0a:94:c8:63:16:0b:44:43:99:c3:21:
d3:08:a7:56:f4:5e:cf:50:6f:0d:31:95:62:fa:55:b3:4e:11:
95:fa:ce:c8:1a:b0:8b:b6:37:f1:a8:5b:33:82:5a:54:23:7e:
d3:dd:87:01:4a:0b:9c:1e:c5:3c:05:ac:62:4d:61:32:a4:52:
19:c8:5d:0f:83:19:90:d7:26:3f:a6:7d:55:ff:35:be:07:f1:
95:30:dd:45:fe:64:1b:65:c7:10:e1:8b:09:21:21:bc:0c:43:
47:56:cb:bd:5d:fe:3d:0f:bc:a9:12:e5:19:82:fa:81:cc:48:
ca:7e:3f:ba:8a:ab:e4:36:14:88:79:0f:e5:7c:92:bf:bd:48:
33:28:f3:b0:c4:27:37:13:72:3f:ae:1f:3f:f2:0c:8b:c1:9c:
33:f1:fa:33:6d:0a:ea:e1:31:21:75:85:a1:ab:03:ad:2e:db:
12:f0:d6:39:93:25:10:21:b0:c2:cf:90:55:72:75:d3:25:ad:
a9:36:d4:4a:7b:3f:e3:8a:13:12:20:cd:34:fa:b9:91:7d:ab:
dd:6d:41:b9:f5:61:43:f8:85:2d:ce:f1:8b:6d:5d:04:3f:87:
1f:2a:2b:92:d3:4d:a4:1b:d0:05:5e:6a:47:74:50:ba:08:0f:
49:8d:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:51 2024 by rpki-client on console-fra.rpki-client.org