Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CCZ_5qI49XzNQysG1NFJ0O9nvAE.roa
File: CCZ_5qI49XzNQysG1NFJ0O9nvAE.roa (raw, json)
Hash identifier: v0iQuU1X4TLm7BtCSvRIYjjQd7LNwryztwNwx2fIKt4=
Subject key identifier: 08:26:7F:E6:A2:38:F5:7C:CD:43:2B:06:D4:D1:49:D0:EF:67:BC:01
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01901F736463AB18A08631CFC808582BADD4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CCZ_5qI49XzNQysG1NFJ0O9nvAE.roa
Signing time: Sun 16 Jun 2024 05:09:34 +0000
ROA not before: Sun 16 Jun 2024 05:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Jun 2024 06:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:73:64:63:ab:18:a0:86:31:cf:c8:08:58:2b:ad:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 16 05:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08267fe6a238f57ccd432b06d4d149d0ef67bc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:af:32:46:8d:24:19:72:90:e2:91:b5:55:
5d:b1:48:cc:31:96:d6:8b:77:ab:c3:45:22:8b:8f:
57:a2:4b:a3:11:34:5d:fd:8b:f2:60:9c:ce:08:06:
65:8c:87:44:43:3f:54:8f:6b:16:2b:7e:d9:91:8b:
11:35:96:21:20:c9:a3:6a:83:44:6a:70:26:f4:fb:
c9:5d:cf:15:30:b1:b8:c4:ba:ab:be:d0:7b:64:eb:
79:de:1f:c0:13:39:6d:a8:3f:59:15:fd:aa:b5:58:
fd:bd:86:fa:63:fa:ac:d9:74:5d:bc:f2:e5:7c:ed:
58:0a:58:c8:cb:17:45:19:99:80:2e:74:02:11:d9:
ae:83:74:ef:d6:d1:09:c5:43:6d:f5:25:db:76:88:
67:d5:12:b7:74:df:4b:8e:7c:de:89:1f:b5:85:61:
b6:c6:fc:57:00:66:c8:56:ff:84:44:c0:34:b8:e0:
db:ba:b2:ff:34:60:f1:a6:65:60:38:2b:37:f2:c8:
2b:ee:80:7e:bf:eb:2d:19:5a:39:8d:4b:45:56:e8:
1d:e6:2f:ad:8b:bd:e8:36:92:1b:e6:e3:40:83:ac:
94:7a:1f:93:54:72:22:79:22:3f:06:30:10:bc:3f:
22:7d:d7:1c:7a:8a:df:3a:1c:04:1e:c0:7d:fa:3d:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:7F:E6:A2:38:F5:7C:CD:43:2B:06:D4:D1:49:D0:EF:67:BC:01
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CCZ_5qI49XzNQysG1NFJ0O9nvAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:50:9b:e3:16:3d:6f:29:05:7d:22:4f:ff:76:66:16:6f:a4:
40:da:a2:3b:03:30:92:41:3a:4d:31:8f:e9:12:3f:aa:f5:31:
9e:0d:0f:4d:e7:39:28:32:22:a3:10:c8:3a:35:7a:21:2b:ce:
fe:fe:35:6b:ee:f4:bb:aa:bc:06:a9:eb:21:4d:96:0f:8a:05:
4b:56:b1:93:1b:95:95:e0:75:c7:d4:ec:39:99:3a:68:d6:e3:
ec:bf:e8:1e:bd:5d:0b:e5:0a:b4:86:3e:76:da:05:f0:4b:14:
15:35:fe:45:1d:ec:9e:2e:7d:e6:e1:cf:30:35:a2:67:22:0c:
e9:4a:28:b6:0c:fe:ff:b3:f6:58:6e:0e:3c:73:77:79:f5:a0:
1d:4e:b2:5c:1d:aa:02:82:49:ee:82:23:0b:c1:c3:08:4d:44:
8e:1b:d4:f1:57:42:b3:75:1f:ac:57:cb:d7:dd:11:20:72:18:
34:2f:89:13:d5:c9:09:3b:ac:19:aa:25:f3:09:bf:99:75:ab:
2b:cf:cb:8a:b3:e7:6a:83:90:dc:ea:d5:3e:99:55:80:f3:a5:
5b:cf:3c:5e:07:a2:cf:df:40:61:8b:33:51:cf:e4:54:f0:ab:
4e:ed:81:5b:82:2d:62:42:ce:20:09:3d:83:2b:77:ac:b2:4c:
3e:d3:45:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:46:39 2024 by rpki-client on console-fra.rpki-client.org