Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/H4psfP8ovON1dhcYxlMB5eO1JsI.roa
File: H4psfP8ovON1dhcYxlMB5eO1JsI.roa (raw, json)
Hash identifier: hny717CrC8oHTOIcLilK4wzUGPoJN9hBLp6PQhO1Bo4=
Subject key identifier: 1F:8A:6C:7C:FF:28:BC:E3:75:76:17:18:C6:53:01:E5:E3:B5:26:C2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019045375C3730D2C1363BCB463C78F5452D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/H4psfP8ovON1dhcYxlMB5eO1JsI.roa
Signing time: Sun 23 Jun 2024 13:09:34 +0000
ROA not before: Sun 23 Jun 2024 13:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 23 Jun 2024 14:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:37:5c:37:30:d2:c1:36:3b:cb:46:3c:78:f5:45:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 23 13:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f8a6c7cff28bce375761718c65301e5e3b526c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:ed:c2:50:2f:15:76:ea:ab:75:53:9a:a6:
c9:e9:3c:11:d5:6d:21:40:af:61:b8:ac:aa:a0:78:
58:b1:4d:e2:f3:a2:4e:2f:0e:e3:89:89:e5:4c:98:
eb:c4:69:69:9e:4d:b4:01:95:f7:2f:25:08:f1:73:
24:ff:b6:32:49:53:5f:eb:ff:78:76:72:5a:34:5b:
f4:9e:fa:0b:b6:81:e3:9b:24:02:b9:e3:c4:b0:ae:
7e:e4:52:59:3d:ab:90:51:f4:76:a6:4e:83:b1:d4:
3a:5f:51:a0:75:a1:a6:e4:98:4a:f0:15:ec:37:26:
57:e6:89:2b:da:f4:9f:b4:4f:39:58:40:7b:36:1c:
95:02:b4:c6:93:88:83:23:8e:f1:3e:9e:97:9d:8e:
90:40:5e:99:45:c7:97:db:f4:16:e6:14:b9:b8:b8:
7e:e0:05:b7:39:7e:c7:62:61:2b:e2:a5:19:ca:52:
81:c8:f9:2f:26:08:da:30:f1:e1:0a:09:a9:d6:6d:
ce:50:4e:5a:b9:e8:00:27:b3:de:c6:31:76:1e:28:
3b:b5:6f:bc:09:ec:be:e0:46:ef:7d:df:a9:c0:9e:
22:cc:1e:83:bb:04:3e:4c:4f:8d:16:bf:48:5e:ec:
fc:60:40:84:0f:2b:57:8b:19:f7:e0:6a:04:f8:50:
cc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8A:6C:7C:FF:28:BC:E3:75:76:17:18:C6:53:01:E5:E3:B5:26:C2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/H4psfP8ovON1dhcYxlMB5eO1JsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:5e:2a:7f:82:c3:38:79:aa:5a:f7:5c:09:30:5e:e2:b9:6e:
b6:4e:07:93:b4:fc:af:d3:b1:1a:d0:53:5a:e0:5b:f2:a0:46:
18:d4:ed:5b:b2:2a:1a:50:43:6d:c0:83:34:16:b7:5a:45:a3:
5f:78:26:01:81:39:36:32:23:cf:b4:c5:52:cc:af:25:31:69:
48:c4:9e:cb:37:b8:61:35:86:ba:9c:90:49:6b:19:a0:f9:15:
b6:94:b7:12:4f:43:b8:57:46:ed:11:53:67:ad:46:45:bb:b8:
94:04:c0:12:2e:3d:f6:97:d9:76:de:a9:e4:53:82:43:3d:db:
38:27:a3:4c:db:ef:f3:8a:39:3b:bc:21:45:07:d9:58:28:b7:
88:1e:de:11:9a:39:e4:e3:2c:de:61:3e:ff:4f:5f:ff:eb:a6:
5b:ac:32:e3:b1:0c:4e:fe:59:67:73:e2:58:83:9b:7d:cc:5a:
37:38:a4:43:7a:51:dc:cf:c8:fe:7d:72:4a:7b:5e:7b:b4:0a:
31:84:d3:04:32:e3:da:8a:28:a9:ff:ba:88:92:d6:f3:7e:23:
e1:16:c9:6e:2a:aa:c0:3a:b1:db:df:d8:3c:9d:a2:fc:a3:67:
4e:dc:a6:d7:f1:f8:9f:75:5a:b4:96:a9:85:8e:f4:4d:be:99:
3a:58:b8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:13:49 2024 by rpki-client on console-fra.rpki-client.org