Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/D4Xssr67rxR6elQ1CEVppSQu62o.roa
File: D4Xssr67rxR6elQ1CEVppSQu62o.roa (raw, json)
Hash identifier: fIUUj/QmXX4quIKWQ07qbeOQEXzmMByH7gMnDOquliw=
Subject key identifier: 0F:85:EC:B2:BE:BB:AF:14:7A:7A:54:35:08:45:69:A5:24:2E:EB:6A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019023F6CA14F82BD990ECEF12B8E6CC521D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/D4Xssr67rxR6elQ1CEVppSQu62o.roa
Signing time: Mon 17 Jun 2024 02:11:34 +0000
ROA not before: Mon 17 Jun 2024 02:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Jun 2024 03:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:23:f6:ca:14:f8:2b:d9:90:ec:ef:12:b8:e6:cc:52:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 17 02:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f85ecb2bebbaf147a7a5435084569a5242eeb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:d3:b3:78:76:56:20:6c:00:c0:e3:cb:e6:
8e:94:dd:9d:77:58:08:a2:16:97:bb:4c:b3:30:a0:
75:28:30:90:96:e5:a9:c3:0f:cc:85:ab:3b:7e:d3:
13:d6:11:f1:7f:8b:84:95:98:b0:d5:c1:b0:9c:0d:
f3:75:3e:37:46:ec:37:6a:41:42:65:97:bd:59:6b:
21:97:68:df:4a:08:3a:18:bc:d0:0e:5a:ad:65:75:
c2:8a:11:ce:6f:93:7f:17:ef:75:5a:09:e8:98:a8:
bd:4b:32:a1:8a:4f:ad:25:1b:4e:62:92:93:99:4b:
68:f7:9b:b0:01:13:27:aa:7c:a6:9f:a2:d9:ea:92:
16:14:06:2d:1a:24:e2:d5:f2:dd:36:f6:db:f2:11:
91:1a:ad:6d:71:84:19:3c:65:6c:b7:1f:d7:10:40:
1b:9a:51:92:1e:54:fb:2f:b9:9d:14:e6:4a:24:3d:
b4:8e:9d:3a:36:dd:c0:1a:62:db:de:66:e9:31:9e:
bb:80:6e:b6:50:00:ca:26:8d:c5:03:83:34:4c:5e:
de:e6:05:12:28:85:b0:6e:7f:6f:e5:14:9f:84:36:
70:4b:53:e4:eb:ad:ea:0b:da:c6:78:6e:c0:8e:5b:
19:74:f8:05:fb:ed:ef:6c:eb:33:fb:9d:da:da:2a:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:EC:B2:BE:BB:AF:14:7A:7A:54:35:08:45:69:A5:24:2E:EB:6A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/D4Xssr67rxR6elQ1CEVppSQu62o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:d3:15:d8:6b:3a:00:e8:78:5d:a9:35:34:16:34:1d:c2:92:
fb:dc:6b:6b:7d:de:c7:ac:c6:2e:a3:6b:ab:6c:bf:91:42:cc:
87:bf:98:91:c5:d7:a4:05:18:75:d7:fa:ec:d5:f1:67:c7:db:
78:64:f4:9d:a5:d5:b8:47:30:5e:cc:b3:a8:fa:76:3b:0d:9a:
05:d5:ea:b3:30:2f:38:4c:d3:6e:f6:cd:54:fa:21:55:15:6c:
49:59:37:d4:69:5a:e6:61:2b:89:98:6b:d3:65:ca:fb:83:0d:
67:71:da:24:ac:bc:f2:99:1d:14:12:9f:af:fb:92:e1:49:f5:
6e:81:ae:ff:11:82:ae:ef:8b:9c:ea:28:60:16:19:04:65:08:
73:b3:06:25:fa:dc:77:71:69:9e:f0:5b:9d:1b:b4:39:b1:3d:
87:d8:b1:f1:1a:fc:95:ca:53:8e:98:ae:b0:ea:8b:31:fe:1a:
de:d4:4c:7c:e7:24:01:41:a7:2d:37:ca:99:6f:52:29:69:c3:
1f:dd:ea:89:43:ff:05:30:13:c1:19:05:f1:b9:af:48:1e:c2:
a3:fd:ad:44:36:04:62:31:d9:79:9a:85:78:1f:65:65:d7:2c:
84:8e:2c:62:41:84:66:9c:e4:ac:b0:01:49:95:0d:f4:7d:60:
46:a2:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 03:40:33 2024 by rpki-client on console-fra.rpki-client.org