Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Gk0jX9vjnAsd83dbqjzU-Hj3BaY.roa
File: Gk0jX9vjnAsd83dbqjzU-Hj3BaY.roa (raw, json)
Hash identifier: 5W8VcMc1hpbUnMj4XctIf4ipb7jplqGyg9gywsrLRqw=
Subject key identifier: 1A:4D:23:5F:DB:E3:9C:0B:1D:F3:77:5B:AA:3C:D4:F8:78:F7:05:A6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FEEBDCE9C3E3CC7ABAA60856E10DD17EB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Gk0jX9vjnAsd83dbqjzU-Hj3BaY.roa
Signing time: Thu 06 Jun 2024 18:09:27 +0000
ROA not before: Thu 06 Jun 2024 18:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 19:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ee:bd:ce:9c:3e:3c:c7:ab:aa:60:85:6e:10:dd:17:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 6 18:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a4d235fdbe39c0b1df3775baa3cd4f878f705a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:f2:b4:73:1c:b5:31:17:4e:76:41:bf:2e:
a4:c9:25:91:52:2a:15:8d:e3:ab:a2:0c:ba:08:61:
2f:14:e4:1d:6b:84:5c:4f:bb:17:08:ea:ad:22:85:
59:b4:1f:f5:59:d5:4a:11:cd:89:3d:3b:55:1c:5c:
90:d4:a2:8c:c1:cd:83:91:22:92:16:05:a8:ba:fc:
09:23:e8:67:8b:3f:61:aa:72:e9:9f:76:02:ff:b3:
1f:f4:dc:38:9b:d8:9f:a5:5a:c1:a1:b6:1f:61:3a:
0e:ea:54:1c:73:50:76:f5:54:03:ec:c6:da:24:d5:
5a:4d:04:16:f1:06:6e:ca:25:8a:af:9f:0a:cf:25:
28:6c:fb:7a:12:0c:21:07:04:b5:8b:5c:50:2b:bc:
98:8f:68:8f:e4:ac:9f:5b:23:ba:b8:31:7f:d7:08:
97:6e:2a:d5:d1:67:b5:90:b8:4f:d8:b7:0b:b7:bb:
ba:eb:33:94:1d:a9:2a:5f:b2:b6:15:25:55:78:71:
83:78:15:6f:e8:83:ed:d7:0c:3d:23:32:ce:52:e2:
48:2d:a7:c1:79:7d:b8:5a:60:99:d2:b6:c3:88:4b:
cf:5c:90:25:fa:76:0c:2d:81:79:44:00:2c:ec:c2:
4e:82:d2:7d:3b:5a:a9:57:ba:ad:a5:a6:8c:5b:18:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4D:23:5F:DB:E3:9C:0B:1D:F3:77:5B:AA:3C:D4:F8:78:F7:05:A6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Gk0jX9vjnAsd83dbqjzU-Hj3BaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:28:c4:88:85:2b:61:ac:49:35:54:a7:c5:37:1a:3b:68:b7:
89:f3:1b:ed:81:c8:71:1e:20:24:55:99:2f:93:6b:58:06:54:
3c:34:8a:64:2f:33:85:a3:d9:9a:87:07:aa:21:9f:e7:7a:ca:
40:f7:b8:68:17:a8:8b:3e:3a:62:38:61:ed:a4:86:65:74:7a:
b9:e8:b1:1f:2a:75:5b:9d:d1:47:cc:a0:9d:b5:4e:4f:6b:ac:
2c:0d:3e:03:84:aa:6a:9d:c3:58:da:69:ce:1b:19:4c:a0:19:
42:db:af:55:a8:ba:dd:8c:e0:d0:4b:6f:17:4e:e9:a6:9f:2b:
80:6c:e1:12:ff:10:c6:03:63:b5:ae:a6:44:20:85:35:72:10:
8b:cb:0d:c7:f9:2f:a4:e4:80:be:2a:d4:39:f2:e9:b7:cf:f9:
19:c5:d1:83:92:3d:31:8c:a5:52:98:2e:fe:fe:cb:3b:5a:21:
9c:5f:5a:d0:c7:7b:75:96:d8:8c:97:4c:94:15:30:6b:82:d0:
07:f3:bc:aa:ad:5a:ab:10:53:f3:62:47:84:51:e8:be:74:d9:
e1:66:58:7b:46:f1:cb:81:6f:6d:33:0a:cf:bc:05:18:07:7a:
e3:74:46:ad:b1:9b:13:c0:5e:f8:1d:4b:5b:34:39:fd:20:f6:
88:99:0e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:15:25 2024 by rpki-client on console-fra.rpki-client.org