Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7u1RodCSAP6NWtY_ItXb1ljdRGo.roa
File: 7u1RodCSAP6NWtY_ItXb1ljdRGo.roa (raw, json)
Hash identifier: 5Wi4rMoS4InAuLhofCbCQrIyROtfR4R844p2WPvJ61s=
Subject key identifier: EE:ED:51:A1:D0:92:00:FE:8D:5A:D6:3F:22:D5:DB:D6:58:DD:44:6A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB75D1A13AE170A19B98C4B5108B3AF92
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7u1RodCSAP6NWtY_ItXb1ljdRGo.roa
Signing time: Mon 27 May 2024 00:04:42 +0000
ROA not before: Mon 27 May 2024 00:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:b75c:a473/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 27 May 2024 00:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b7:5d:1a:13:ae:17:0a:19:b9:8c:4b:51:08:b3:af:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 27 00:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeed51a1d09200fe8d5ad63f22d5dbd658dd446a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:fb:62:a2:6c:39:36:bc:4b:87:5b:02:a2:
fd:fa:e8:28:3a:ef:ee:57:33:0b:5f:46:09:a1:ef:
8c:70:be:ad:32:68:7d:59:f1:15:d6:ea:c8:59:2b:
17:14:32:8b:a3:22:54:99:2b:91:f8:0a:93:14:2a:
07:0b:71:cc:ff:b8:63:fb:d6:09:1b:02:dd:dc:e4:
f4:22:d2:64:48:65:46:b8:d2:ad:23:f0:8f:13:17:
f9:53:e6:6b:5c:c6:d9:5b:cb:81:e5:f6:65:d3:96:
14:ed:db:75:21:45:71:0b:1f:b1:55:1b:af:aa:bb:
40:3e:f5:32:c3:3d:96:f8:b8:a8:61:2b:4d:40:63:
85:a2:ec:2d:03:42:85:14:33:1c:60:c4:e9:5f:39:
c6:e5:82:37:a7:a9:ea:eb:e7:c6:eb:5e:38:bd:2b:
cd:d2:cd:02:73:81:c9:71:d0:fc:e7:bf:90:97:a0:
8c:86:6c:5f:d3:1e:04:75:0c:f9:e2:2b:20:38:95:
29:fd:14:5a:fa:22:3c:e6:58:c9:f4:88:5d:a3:4a:
86:13:c5:68:6b:00:bc:d8:73:8a:80:34:a0:96:5a:
0d:86:d6:44:ff:3c:83:85:91:53:7b:a4:c3:b8:9c:
b2:a1:6c:3f:8c:42:a8:41:24:ed:b1:f1:a6:4c:a9:
35:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:ED:51:A1:D0:92:00:FE:8D:5A:D6:3F:22:D5:DB:D6:58:DD:44:6A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7u1RodCSAP6NWtY_ItXb1ljdRGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:41:17:80:d9:d0:f0:c3:4c:6f:f4:4a:a4:3e:c5:eb:57:9c:
b8:2d:bd:41:cc:87:88:a3:b1:fc:12:4c:4c:49:25:5c:1c:38:
7b:2c:aa:a6:41:dd:94:70:e4:11:69:98:14:47:61:a0:5c:97:
09:63:1d:e7:08:7f:6d:52:02:76:cc:9f:81:d1:1b:8c:6d:b9:
e5:86:1f:52:b6:c5:57:1c:46:84:dd:b9:9a:47:2e:e4:5c:9e:
f3:e8:b3:6c:38:55:1e:ac:ec:33:91:50:8d:e1:49:af:bf:f4:
95:ad:e5:b2:4c:b9:b5:39:5e:96:a6:47:8d:99:df:71:25:7b:
23:39:9e:33:43:83:08:ff:21:22:dd:4c:87:10:92:50:e7:17:
97:9f:f1:75:87:19:b5:a8:c5:a5:c1:af:67:4b:c6:37:82:8d:
78:95:c5:76:d6:63:7a:b4:f8:c2:c6:61:a6:2e:ed:11:e2:a2:
10:c0:55:e3:b4:f6:a8:67:90:ff:84:d0:ac:91:63:f6:a7:ed:
af:8b:fc:3c:a9:fa:a5:9c:66:81:ae:34:26:b3:f2:c8:e4:84:
d1:fd:02:d1:43:4f:f3:5e:8a:2e:36:f8:d5:e4:33:2e:b5:5d:
58:b4:d6:11:11:e0:e5:fd:93:91:67:c3:e4:51:fb:48:fd:0e:
c6:48:e3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:51 2024 by rpki-client on console-fra.rpki-client.org