Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HFHpkHmxifhz-j2PeiU-CLOti6k.roa
File: HFHpkHmxifhz-j2PeiU-CLOti6k.roa (raw, json)
Hash identifier: qLw/Q0ddGo7/PLxKnnO8bJHJojU+uW/LqRLwgGCIBg0=
Subject key identifier: 1C:51:E9:90:79:B1:89:F8:73:FA:3D:8F:7A:25:3E:08:B3:AD:8B:A9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019046F0A59AE2B8F0FF81516EFBE37C7069
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HFHpkHmxifhz-j2PeiU-CLOti6k.roa
Signing time: Sun 23 Jun 2024 21:11:34 +0000
ROA not before: Sun 23 Jun 2024 21:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 23 Jun 2024 22:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:46:f0:a5:9a:e2:b8:f0:ff:81:51:6e:fb:e3:7c:70:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 23 21:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c51e99079b189f873fa3d8f7a253e08b3ad8ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:31:0c:5d:2f:ee:ae:8d:ff:54:7e:d5:27:ea:
be:c0:e2:b8:e4:2c:19:21:cd:4a:32:d5:30:79:7e:
32:11:8d:04:7a:20:65:5d:1c:52:b1:ff:ed:10:c6:
1d:04:9d:1a:e5:fe:58:66:55:62:d2:e0:57:3f:58:
e8:c6:d5:80:c0:d5:2d:89:8e:fb:46:cc:5a:8b:a1:
9f:35:0e:0c:20:3e:a3:24:54:29:4d:13:c8:8e:b9:
f8:30:d0:ae:53:da:6f:90:ef:f2:6c:16:d0:a8:d3:
b4:d9:25:e1:df:4e:2e:0f:ec:fa:1b:5d:a8:9b:d7:
f6:fb:1f:d7:92:76:bb:47:9d:6c:9d:59:b6:0d:52:
86:5f:17:08:8f:63:8b:b7:3c:ac:b8:29:b6:1d:8c:
74:80:8d:f9:51:22:6a:d7:4c:7d:35:70:57:22:f6:
1e:d2:9f:5b:ba:c3:47:e1:c8:3e:78:3f:2a:89:46:
ac:b0:81:b5:81:b2:b5:0b:f2:1e:cc:a6:37:a9:79:
c9:eb:a0:d0:b0:67:2a:a5:14:bc:c0:94:8e:0c:cf:
2c:cf:c2:da:c7:4b:c9:d9:23:20:9f:10:ab:1f:53:
c7:dd:fd:cb:94:a3:6d:5e:ec:ad:34:bd:70:31:a5:
1d:ac:76:3b:b2:ba:b7:95:63:30:4d:dc:2b:8a:68:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:51:E9:90:79:B1:89:F8:73:FA:3D:8F:7A:25:3E:08:B3:AD:8B:A9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HFHpkHmxifhz-j2PeiU-CLOti6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:24:a4:af:92:5f:53:1d:65:0c:97:8f:f0:9a:1b:aa:8a:d6:
b0:78:68:f8:e2:79:60:dd:46:79:63:32:8d:45:59:ea:66:44:
47:a9:7d:d0:da:75:f4:8d:a8:b2:5d:07:4f:77:96:04:87:64:
ec:c9:fb:52:ab:56:c7:91:e2:54:f7:f0:5d:b7:4a:3f:2c:56:
2d:8f:d5:83:28:fc:3c:92:44:26:a4:d6:f1:e1:c4:db:c0:f6:
9d:1c:94:e2:aa:1b:e1:74:42:69:7c:9e:9f:e9:f4:52:82:06:
3b:e1:4b:dc:0e:d6:cb:81:1e:f9:d8:cf:32:cd:d0:11:ad:2a:
99:77:e3:c4:61:4a:70:f2:8a:49:58:ae:11:1c:5d:b0:4c:65:
01:b3:e0:57:6f:0f:93:9e:32:e2:71:f7:18:8e:47:e0:e5:52:
34:92:cd:8c:f2:23:f4:01:e7:af:9b:83:30:5b:f7:f5:13:e6:
95:f2:1e:78:75:f7:a8:c3:18:65:be:06:f2:2b:40:1e:e3:91:
ea:df:98:6b:2a:31:dc:74:a7:09:c4:4a:8e:84:26:cf:23:55:
d0:1c:4e:9b:c2:eb:8f:e2:4f:19:66:8d:93:b5:7c:ab:69:72:
68:67:e0:2a:8c:a7:6d:91:4c:04:43:34:c5:dd:95:0d:f2:7d:
5e:2e:35:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 23:18:22 2024 by rpki-client on console-fra.rpki-client.org