Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5pZwdye6NwHc4UjZDW_9GSx4RUE.roa
File: 5pZwdye6NwHc4UjZDW_9GSx4RUE.roa (raw, json)
Hash identifier: OtbdKk/JrF9UNNzephQNPkoFsjoVd5YZlI7ktskzBa0=
Subject key identifier: E6:96:70:77:27:BA:37:01:DC:E1:48:D9:0D:6F:FD:19:2C:78:45:41
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FC5FADA73887CA4B04D9F5169B93525BC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5pZwdye6NwHc4UjZDW_9GSx4RUE.roa
Signing time: Wed 29 May 2024 20:11:42 +0000
ROA not before: Wed 29 May 2024 20:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 May 2024 21:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c5:fa:da:73:88:7c:a4:b0:4d:9f:51:69:b9:35:25:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 29 20:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e696707727ba3701dce148d90d6ffd192c784541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5b:5b:8b:23:7c:cb:39:f1:31:68:c5:7a:c5:
c4:fe:fa:a9:b0:51:08:5b:2f:af:42:5d:4c:8a:0d:
c3:2a:61:4c:ed:30:13:6d:99:0f:53:ae:fb:1b:8f:
ff:59:63:a7:0e:c9:5a:d9:bd:e7:a9:72:5c:2d:a9:
cf:e0:dc:00:52:d3:41:49:c5:07:fb:06:62:97:7b:
90:9d:d7:96:65:5c:fc:4d:ae:09:35:65:fe:d4:37:
8f:0a:fa:b5:55:7b:29:b1:f4:3d:00:0c:19:f1:d4:
9d:dc:bc:9f:b5:f7:bc:c2:0f:88:67:3c:6c:7e:17:
5a:c1:a7:c8:2a:1f:27:b3:42:99:92:dc:5f:d6:b0:
e6:41:20:72:07:92:ad:6e:d5:d0:91:d6:6b:a4:bc:
32:23:d8:05:8c:64:54:ac:36:66:9a:20:48:0c:f4:
ab:fd:1f:d1:af:dc:ff:fe:24:1c:42:df:5b:0a:90:
57:51:4f:91:b8:c9:7c:9b:c1:6a:30:59:af:30:2a:
33:bc:c5:26:60:0e:c5:38:e0:44:7a:c6:24:cf:68:
c0:63:f9:e8:9f:0c:40:41:28:ad:80:97:15:6a:84:
f5:42:37:b3:78:1c:a6:e8:1d:a1:e2:f7:3a:be:41:
5b:45:63:02:26:72:ff:5f:e4:54:83:33:75:e4:a3:
c0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:96:70:77:27:BA:37:01:DC:E1:48:D9:0D:6F:FD:19:2C:78:45:41
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5pZwdye6NwHc4UjZDW_9GSx4RUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:eb:02:8b:0f:c0:e0:a4:ea:b2:ff:f5:d3:bf:b8:54:eb:35:
52:df:ed:b8:b4:3f:39:eb:14:2c:ee:6b:c9:6c:d9:43:06:94:
69:95:8c:94:58:85:5e:7f:8a:71:87:fb:22:97:65:6c:61:1a:
1d:cd:96:07:8d:cc:02:d3:0b:55:22:df:f0:22:07:40:95:e5:
e4:35:61:f9:97:75:69:9d:62:45:19:e5:6c:6b:73:ff:8c:33:
8c:9c:ce:a1:ee:59:df:c0:3f:25:5a:30:fb:e9:0d:21:91:02:
d9:7a:66:49:84:34:0b:cb:28:14:b1:6b:16:28:b8:a4:55:68:
29:5d:66:62:a5:d8:b5:80:e6:af:7e:c2:53:78:d2:8e:f4:ba:
b9:7d:db:64:f4:3e:8c:c9:21:bd:83:af:b3:10:d7:ce:ae:6b:
3c:b5:ea:e3:b5:d0:66:f1:6b:04:88:53:7c:c5:34:f0:d7:20:
80:de:19:f2:52:16:73:36:0d:21:0c:91:2f:a8:aa:fb:72:c5:
b7:af:71:74:00:8e:83:b7:e2:b9:82:3b:75:d8:ad:60:58:33:
1f:9c:8f:9a:62:ca:a4:91:4c:e5:4b:58:85:f9:81:e7:2b:57:
91:be:f8:15:b6:60:b2:1d:92:6a:3e:52:07:99:34:8f:c8:11:
50:25:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:51 2024 by rpki-client on console-fra.rpki-client.org