Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8miN2YJKm0mRdd623vuMPRqLP1Q.roa
File: 8miN2YJKm0mRdd623vuMPRqLP1Q.roa (raw, json)
Hash identifier: 6LorraapNKaCf44hM37Z2k1FmcETOb/BXJarFlJzDvQ=
Subject key identifier: F2:68:8D:D9:82:4A:9B:49:91:75:DE:B6:DE:FB:8C:3D:1A:8B:3F:54
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FF9AE681EB7D6772782467C8DDFD7DD0A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8miN2YJKm0mRdd623vuMPRqLP1Q.roa
Signing time: Sat 08 Jun 2024 21:08:27 +0000
ROA not before: Sat 08 Jun 2024 21:08:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Jun 2024 22:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f9:ae:68:1e:b7:d6:77:27:82:46:7c:8d:df:d7:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 8 21:08:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2688dd9824a9b499175deb6defb8c3d1a8b3f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1a:81:dc:83:91:81:72:49:74:e0:5b:7c:8e:
d1:4b:ec:10:a8:78:96:17:e5:b0:5e:2f:22:4a:c3:
85:06:15:54:fd:74:50:74:80:8a:78:b6:44:51:50:
c6:83:03:68:95:e7:22:29:01:13:af:7a:2c:f2:90:
16:ce:a7:38:c7:4f:cd:06:0a:e1:ad:c2:89:a8:20:
47:31:54:32:a9:1c:68:e8:c1:1c:80:ec:2d:bd:1c:
e2:19:9d:dc:ea:9a:c5:7e:3e:1d:9b:e3:2e:c6:f8:
69:db:02:6e:43:a2:e0:9b:cf:62:6b:cd:64:77:75:
4d:8f:c2:22:84:ae:f6:4c:fd:ce:20:ea:32:f4:e1:
2f:3e:15:d4:9d:49:cd:84:98:93:2c:4f:58:dd:33:
d1:5d:54:e6:17:17:af:fa:7f:cc:de:10:77:d9:80:
c0:ba:35:16:07:6a:a2:39:22:5b:c9:18:0f:43:7d:
30:e6:9b:17:6a:62:07:cc:73:6a:2b:d6:64:cf:4f:
03:b2:27:35:ba:94:96:bf:89:24:a9:8b:c8:0a:b8:
9b:d8:d5:80:eb:67:d1:66:c8:5d:e3:13:6e:b7:42:
ae:6c:e6:2f:ab:ed:c2:45:ec:34:1c:17:74:1a:c2:
55:a8:ce:bf:f5:cc:0b:e7:90:07:c1:0f:b9:5b:45:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:68:8D:D9:82:4A:9B:49:91:75:DE:B6:DE:FB:8C:3D:1A:8B:3F:54
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8miN2YJKm0mRdd623vuMPRqLP1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:16:7b:5b:85:35:7a:31:13:05:0e:e9:6f:5d:7b:07:a0:66:
72:76:0a:bc:13:f3:f4:a5:b4:6c:61:49:60:7d:dc:11:d7:f8:
48:bf:60:90:73:2d:65:fe:4e:6e:ba:1d:97:0e:32:5f:8b:15:
13:e4:6f:c3:41:68:e9:1d:44:78:21:d7:b7:42:da:21:f7:a0:
f7:24:89:93:fc:5d:78:08:bf:68:2f:46:d2:fa:96:ac:21:45:
27:80:f9:c7:d9:e3:b2:45:05:24:bc:f1:a7:56:6c:86:4c:2b:
ac:5b:5b:dc:23:a9:d1:b5:b3:b1:6f:86:9c:1f:ab:ec:b2:40:
a9:5d:ba:3b:54:18:f5:3a:65:71:df:a0:3e:ff:36:45:e2:3e:
62:30:86:dc:b0:1e:ea:15:47:cb:f1:87:b9:cb:db:d0:e8:f7:
c0:94:5b:ca:52:f1:40:f7:42:4f:73:ed:dc:36:7b:4d:c8:f1:
6f:9b:fe:cb:43:36:a1:d0:2f:7a:3d:86:47:0d:e1:96:a4:cd:
23:b6:ab:f7:15:e9:7e:54:ba:fe:2c:46:3d:5d:23:29:0e:82:
fd:f3:ec:12:52:6f:3d:7b:78:1f:32:ac:0b:78:9f:5f:64:61:
30:7a:78:1b:1c:30:6c:c8:ab:7f:de:29:a9:e2:a1:de:19:49:
19:62:a8:90
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 8 22:38:25 2024 by rpki-client on console-fra.rpki-client.org