Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/87ddZ7BD05kV6YkIUMtwB8LAaOg.roa
File: 87ddZ7BD05kV6YkIUMtwB8LAaOg.roa (raw, json)
Hash identifier: g75a+NWMx7Z6+MwRpR+uB48ZM8pnevO2wB2h3N+XCRk=
Subject key identifier: F3:B7:5D:67:B0:43:D3:99:15:E9:89:08:50:CB:70:07:C2:C0:68:E8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01906EA2C1C9CE53E322C0483EA170E61837
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/87ddZ7BD05kV6YkIUMtwB8LAaOg.roa
Signing time: Mon 01 Jul 2024 14:11:18 +0000
ROA not before: Mon 01 Jul 2024 14:11:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jul 2024 15:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:a2:c1:c9:ce:53:e3:22:c0:48:3e:a1:70:e6:18:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 1 14:11:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3b75d67b043d39915e9890850cb7007c2c068e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:cd:2b:42:9b:24:39:52:7f:0e:de:16:40:
f8:ff:67:1b:27:57:f2:f2:ca:63:86:67:00:94:bd:
e7:72:61:c5:7e:46:25:8c:c0:da:3a:ee:77:70:05:
d8:11:02:a9:29:0b:23:b4:23:59:53:2c:90:ee:dd:
f3:7a:51:76:71:bf:cb:41:41:f3:b7:24:a1:ae:4b:
9e:5a:cb:90:ac:6e:ae:89:46:ef:cd:a6:3c:60:c8:
e0:b5:1d:08:97:fa:d1:04:63:88:a6:9c:44:2b:2b:
33:9f:83:15:f9:40:0a:10:82:b1:ed:1c:4d:1e:6c:
49:6b:b2:19:2c:50:23:2a:28:a0:ec:d3:cf:c4:a7:
a5:28:c0:bb:dc:e8:e5:f7:1e:d4:05:bf:65:8f:fd:
8f:93:ea:9c:e0:16:25:ef:a4:9d:f5:69:5f:fd:98:
29:b6:b1:4d:7e:41:78:47:d2:ab:b2:58:ec:6b:3e:
99:63:18:a8:2f:f3:4b:25:b4:4a:2d:ba:b2:0f:67:
ab:a7:5b:03:2f:37:1d:87:ce:ae:2e:9a:08:13:5e:
87:a9:82:f7:0b:02:45:53:95:12:f3:2c:3a:e6:8e:
66:10:c5:37:dd:4b:dd:e2:4a:0a:2a:01:2c:21:3a:
34:a3:ad:5c:0c:0d:32:2b:e4:f5:3c:66:5a:fd:f8:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B7:5D:67:B0:43:D3:99:15:E9:89:08:50:CB:70:07:C2:C0:68:E8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/87ddZ7BD05kV6YkIUMtwB8LAaOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:50:16:ec:61:32:f0:25:0f:50:21:57:48:dd:81:57:69:66:
81:04:9c:47:a2:79:7c:b0:f1:17:89:27:e9:34:28:29:57:e5:
64:67:2a:db:53:61:96:82:8e:2a:0b:38:4c:ba:30:aa:84:ea:
35:85:24:e7:48:5c:37:41:16:f4:05:3b:9d:b8:2c:93:fa:cc:
f7:b4:7d:74:28:4f:ba:3f:0f:2e:9f:b0:92:31:c4:fa:be:92:
ab:48:d0:2b:51:d1:b8:85:33:3a:de:8b:12:03:aa:d2:2a:1b:
d0:a8:a8:e8:ce:e8:c8:47:c2:89:36:32:74:5e:48:62:bd:37:
37:77:5f:7b:c4:53:85:0c:3e:91:5d:53:bc:60:c5:11:08:29:
8d:49:e9:2c:68:53:d0:ab:ec:ad:d5:57:eb:0b:1f:2e:db:05:
12:37:3c:34:c9:f2:f9:cc:e0:b8:8c:b8:cf:1d:1c:df:83:3f:
79:e4:aa:9d:06:60:ab:b1:0a:1a:a8:a3:a2:3c:22:7e:4c:58:
10:3e:ed:c1:ed:3c:cc:77:b5:24:df:6d:5c:e5:00:a5:d2:92:
36:92:d7:86:38:15:1b:86:76:8c:50:88:d4:ba:45:cd:0f:ff:
2d:0d:7f:a8:4d:37:0a:32:ba:0f:68:ea:90:af:ea:0b:13:12:
61:89:d4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:35:14 2024 by rpki-client on console-fra.rpki-client.org