Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EOQDSO0z52BsodJt6t2x8saAZ3U.roa
File: EOQDSO0z52BsodJt6t2x8saAZ3U.roa (raw, json)
Hash identifier: sd40hJNIJl+SWFSSmuYM5UGnBEBaGg8vWItcdcxvZmo=
Subject key identifier: 10:E4:03:48:ED:33:E7:60:6C:A1:D2:6D:EA:DD:B1:F2:C6:80:67:75
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FC21D2AE701999068747A61B41BB9161F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EOQDSO0z52BsodJt6t2x8saAZ3U.roa
Signing time: Wed 29 May 2024 02:10:42 +0000
ROA not before: Wed 29 May 2024 02:10:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 May 2024 03:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c2:1d:2a:e7:01:99:90:68:74:7a:61:b4:1b:b9:16:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 29 02:10:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10e40348ed33e7606ca1d26deaddb1f2c6806775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:dd:16:f0:bf:af:97:2f:3e:b6:85:16:54:
fd:71:5a:1a:8d:05:3a:19:08:31:c9:cd:4c:e3:58:
06:60:0e:4f:9f:d9:34:28:d9:fe:62:fc:09:2a:9b:
18:d5:e7:a7:70:20:6c:33:42:7c:bf:56:77:c2:14:
55:44:81:62:27:ca:58:83:57:78:49:a8:eb:ff:a3:
d9:38:b9:ca:09:85:15:75:20:c8:9a:90:17:dd:ca:
7c:76:a3:28:70:1a:e2:e8:bc:9b:ad:62:71:c8:5f:
4b:2e:9d:f6:4b:71:fe:60:46:ea:cd:f7:81:f5:aa:
d3:65:c4:99:c1:9f:b5:f9:7d:2e:e2:46:55:ec:80:
8c:75:75:d3:b9:28:01:f6:47:9e:46:2e:7e:d8:34:
76:9f:a5:a6:65:7e:54:95:06:ec:55:02:78:f5:b3:
e9:ea:8a:d0:0b:93:14:d2:f3:12:11:58:28:e9:10:
3f:01:48:c5:1a:a6:c0:91:55:7a:08:ac:48:dc:60:
10:ec:89:d0:74:6f:6d:87:f2:37:e1:82:c6:e0:f3:
8c:8c:a7:56:27:36:02:b5:4f:88:6e:85:81:69:08:
43:43:57:1c:0b:67:86:0e:61:78:66:5e:23:69:cf:
15:76:49:cb:61:aa:14:1f:81:c4:31:c8:d8:7b:4b:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:03:48:ED:33:E7:60:6C:A1:D2:6D:EA:DD:B1:F2:C6:80:67:75
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EOQDSO0z52BsodJt6t2x8saAZ3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:ca:a0:77:e8:be:04:3b:d1:d5:95:78:4a:5b:d8:39:81:65:
bb:18:29:83:31:f0:68:62:b5:93:47:4d:8d:8b:04:61:d6:26:
46:44:08:1b:08:8d:cc:24:fe:b6:49:7d:da:85:d9:af:a3:73:
53:bb:fe:aa:64:cf:80:3b:70:77:db:86:79:69:f4:89:bd:b9:
17:fa:12:5f:c4:e2:eb:26:d5:c8:01:95:ba:0b:4f:26:43:27:
16:59:91:f3:78:75:d7:87:93:2d:13:52:d2:77:3c:45:1f:0a:
14:24:35:e8:60:0a:53:7f:11:65:8b:0e:19:c6:a1:7c:4b:85:
dc:40:7b:d3:91:76:2a:78:68:97:76:f4:c4:1b:03:33:e2:a2:
bf:fd:98:6d:23:c9:4f:19:29:fa:02:9e:df:d8:63:9c:86:8d:
43:7c:32:63:32:01:b4:6e:f4:38:e0:b2:f7:3b:4b:83:23:44:
4e:f9:8c:87:c9:ea:64:90:07:38:a8:36:bf:a5:12:cd:33:55:
2a:9b:33:7f:42:a6:4b:c6:27:a5:81:44:b6:f0:6c:9f:24:32:
ff:15:bf:aa:44:e2:81:af:b6:d9:0a:5b:2f:d6:6d:2c:ad:a8:
1a:54:6b:04:08:8c:8d:92:a6:a2:9b:8a:f7:dc:d8:c0:23:ad:
cf:87:78:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/CHSrnAZmQaHR6YbQbuRYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNTI5MDIxMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGU0MDM0OGVkMzNlNzYwNmNhMWQyNmRlYWRkYjFmMmM2ODA2Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4TdFvC/r5cvPraFFlT9cVoajQU6
GQgxyc1M41gGYA5Pn9k0KNn+YvwJKpsY1eencCBsM0J8v1Z3whRVRIFiJ8pYg1d4
Sajr/6PZOLnKCYUVdSDImpAX3cp8dqMocBri6LybrWJxyF9LLp32S3H+YEbqzfeB
9arTZcSZwZ+1+X0u4kZV7ICMdXXTuSgB9keeRi5+2DR2n6WmZX5UlQbsVQJ49bPp
6orQC5MU0vMSEVgo6RA/AUjFGqbAkVV6CKxI3GAQ7InQdG9th/I34YLG4POMjKdW
JzYCtU+IboWBaQhDQ1ccC2eGDmF4Zl4jac8VdknLYaoUH4HEMcjYe0t+xQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBDkA0jtM+dgbKHSberdsfLGgGd1MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRU9RRFNPMHo1MkJzb2RKdDZ0Mng4c2FBWjNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFrKoHfovgQ70dWVeEpb
2DmBZbsYKYMx8GhitZNHTY2LBGHWJkZECBsIjcwk/rZJfdqF2a+jc1O7/qpkz4A7
cHfbhnlp9Im9uRf6El/E4usm1cgBlboLTyZDJxZZkfN4ddeHky0TUtJ3PEUfChQk
NehgClN/EWWLDhnGoXxLhdxAe9ORdip4aJd29MQbAzPior/9mG0jyU8ZKfoCnt/Y
Y5yGjUN8MmMyAbRu9Djgsvc7S4MjRE75jIfJ6mSQBzioNr+lEs0zVSqbM39CpkvG
J6WBRLbwbJ8kMv8Vv6pE4oGvttkKWy/WbSytqBpUawQIjI2SpqKbivfc2MAjrc+H
eNA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:51 2024 by rpki-client on console-fra.rpki-client.org