Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5htemqRTJ4VeLz99wx8dICALMEM.roa
File: 5htemqRTJ4VeLz99wx8dICALMEM.roa (raw, json)
Hash identifier: 91ab+ihr63JnT/932JWSQHE2FkKgdIVt5hriC4W01qM=
Subject key identifier: E6:1B:5E:9A:A4:53:27:85:5E:2F:3F:7D:C3:1F:1D:20:20:0B:30:43
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01901414EE8376141F92DE21759ADC793A87
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5htemqRTJ4VeLz99wx8dICALMEM.roa
Signing time: Fri 14 Jun 2024 00:10:34 +0000
ROA not before: Fri 14 Jun 2024 00:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Jun 2024 01:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:14:14:ee:83:76:14:1f:92:de:21:75:9a:dc:79:3a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 14 00:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e61b5e9aa45327855e2f3f7dc31f1d20200b3043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:bb:bb:9d:b9:5a:fd:ba:13:7a:bd:f6:07:
34:cb:43:0e:f5:86:fb:19:23:37:28:38:54:63:18:
5a:90:9f:ea:dd:6e:a1:81:04:e3:fc:42:c6:ee:aa:
18:c0:f6:3e:22:37:35:3b:e9:9a:af:e7:86:80:92:
eb:d1:b5:70:a1:a6:d2:9e:cc:bf:e1:ef:e6:84:ff:
59:40:2f:87:1c:0c:1b:e5:3a:ab:ed:c9:15:1a:f4:
f0:2d:89:70:a5:fb:4c:51:7d:e2:8b:13:15:2d:fa:
f6:ae:33:3c:05:f6:f8:f7:21:9b:73:ae:74:db:33:
6c:e8:85:79:e2:89:14:82:d6:d9:db:64:89:f1:1c:
22:b9:7f:3a:18:03:97:33:5e:71:42:a4:69:10:73:
a7:0a:b7:94:07:b1:dd:20:80:13:9e:b4:eb:08:43:
d6:f7:9a:b9:d0:85:21:41:87:e2:5e:5e:ba:96:a4:
84:ef:1a:f9:aa:da:c3:ca:74:93:73:aa:09:10:f7:
4d:1b:4c:0a:c6:f1:1a:14:60:2d:45:11:a7:34:49:
25:a4:4c:64:55:49:3e:e9:35:d6:1d:97:5e:1a:1b:
d5:8a:4d:e6:b7:46:5e:80:86:c5:c1:55:a2:9c:67:
c0:d9:b9:9b:3f:16:58:a4:5f:48:bc:92:cc:3f:09:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1B:5E:9A:A4:53:27:85:5E:2F:3F:7D:C3:1F:1D:20:20:0B:30:43
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5htemqRTJ4VeLz99wx8dICALMEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:b3:9b:c9:7b:7e:b0:b9:2c:fa:6d:ea:5e:30:42:d4:31:6c:
63:b8:a0:56:6e:c0:10:7b:86:2e:45:6d:34:ed:f2:d6:f2:ad:
4e:54:af:be:d4:77:f6:35:f8:8b:b6:7d:f7:63:c2:a5:69:57:
72:97:b1:7a:9f:30:dc:e7:f7:77:e0:4c:1d:33:ea:c1:93:72:
17:a8:57:d6:d0:a3:eb:ae:26:37:8c:dd:f8:1d:4b:15:bb:46:
ca:19:a5:aa:4c:72:1a:df:51:06:48:74:63:34:24:ba:22:fb:
93:93:78:c1:cc:34:a6:06:45:3c:d4:d7:5e:1d:1e:12:6e:f2:
8b:1b:c0:47:29:ca:db:b9:ee:8b:1c:90:74:37:6c:9d:52:05:
4f:62:64:3c:e9:bd:ac:fc:02:af:e5:b3:6a:86:74:de:97:9a:
5f:d6:3b:78:1d:45:f9:75:7c:c0:04:3b:93:3f:3d:b5:46:3b:
62:02:37:4d:cf:be:e3:c0:62:1c:d8:69:c1:07:77:85:2d:fd:
c1:fd:f9:c6:0f:c0:eb:f2:82:d1:21:97:fd:61:cf:81:59:c9:
1f:8f:eb:80:4a:ca:e0:0c:76:79:e3:5b:be:01:0d:b9:81:3d:
8e:1e:b6:76:37:93:b4:27:29:38:2a:81:fe:0e:1a:55:ed:0c:
03:bd:ff:d4
-----BEGIN CERTIFICATE-----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Generated at Fri Jun 14 03:31:50 2024 by rpki-client on console-fra.rpki-client.org