Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IPlio6yn6PVKigm9jmjygL-NL7U.roa
File: IPlio6yn6PVKigm9jmjygL-NL7U.roa (raw, json)
Hash identifier: p20NcazX3OnXlfNZc5jF0TdCdLpxfyK6VcUJQf+QrW4=
Subject key identifier: 20:F9:62:A3:AC:A7:E8:F5:4A:8A:09:BD:8E:68:F2:80:BF:8D:2F:B5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190027C8989375F58BA7E16AD22F6911866
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IPlio6yn6PVKigm9jmjygL-NL7U.roa
Signing time: Mon 10 Jun 2024 14:10:34 +0000
ROA not before: Mon 10 Jun 2024 14:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Jun 2024 15:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:7c:89:89:37:5f:58:ba:7e:16:ad:22:f6:91:18:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 10 14:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20f962a3aca7e8f54a8a09bd8e68f280bf8d2fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:b8:c2:58:51:38:35:94:6c:fe:b3:05:fb:
00:f7:18:a4:18:cf:ec:2a:24:63:f3:5e:09:8d:36:
86:98:e2:4b:42:d0:2a:c2:f9:78:c7:54:b9:d9:ca:
01:cb:f1:ff:67:ed:1f:37:3d:34:3d:f9:c8:1e:99:
46:3b:3c:7c:c5:87:4a:62:a6:60:9d:cc:ef:67:33:
ef:ff:91:e7:2e:ca:f3:b5:77:d5:71:ce:f4:f6:89:
b5:32:54:a8:ba:af:f8:ab:78:89:c9:49:9a:99:09:
34:14:21:5b:b0:4c:2d:a1:5b:ab:b0:45:99:0b:d6:
30:84:cd:b0:ed:60:60:8f:1b:b4:ab:39:41:ab:35:
c1:18:cf:f9:84:19:e5:50:48:fc:09:13:de:75:55:
d8:84:8c:56:41:a5:e5:d8:ed:48:6e:2f:5b:e6:fc:
87:c3:7a:02:68:b4:c2:40:8e:b0:8f:b4:75:03:3c:
4e:0b:43:7b:2e:1c:b2:5c:f6:bc:00:d3:53:b3:c6:
e7:5d:d5:e6:c7:37:20:37:fe:77:ba:a3:b4:25:3a:
13:38:78:2b:6a:fc:d6:69:d2:c2:82:57:d9:46:26:
33:78:62:35:d7:e4:e0:65:c4:21:e0:68:79:ad:76:
c0:76:1e:f8:59:00:45:3a:7c:b5:a3:10:f2:47:fa:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F9:62:A3:AC:A7:E8:F5:4A:8A:09:BD:8E:68:F2:80:BF:8D:2F:B5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IPlio6yn6PVKigm9jmjygL-NL7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:f1:94:41:3f:91:a7:43:6c:7f:71:6a:6d:c3:a1:42:c2:76:
9d:b8:02:8a:10:fc:17:26:54:95:5f:fb:e7:80:d1:b0:16:e7:
d7:9f:df:03:93:11:1c:f7:a2:bd:c4:5e:98:6d:d8:f6:4e:cf:
55:e7:9a:35:e6:3f:c2:16:93:83:a7:09:6f:65:06:73:a8:2d:
d4:bd:b2:a6:c9:d9:e4:e3:74:c5:06:f7:20:2e:94:1b:7d:0b:
8f:4c:7c:6d:cd:22:a9:12:bf:94:90:af:08:04:26:14:c8:fc:
76:7b:53:62:bb:b6:af:44:2b:f4:46:60:0f:0c:a0:2a:a3:2a:
43:10:30:f2:55:87:bd:60:43:7f:55:05:72:06:b4:79:16:3b:
d2:78:07:fb:fc:d2:26:74:a7:b1:54:8f:2a:c8:29:e2:e9:d9:
93:57:f1:65:31:a1:24:1a:69:12:bc:2d:70:d0:3c:10:a5:93:
eb:23:2a:d0:d7:9c:f3:32:09:4e:f7:e7:2c:e9:94:ed:1d:f7:
20:2b:e3:a4:0c:9a:ca:86:f2:81:f4:95:2e:be:5f:5c:ab:cf:
44:4d:5a:dc:61:c3:6f:a5:c8:04:89:3c:5b:4b:48:03:78:3c:
65:95:ef:23:d2:c2:a7:3d:bb:79:d5:f6:5a:15:4c:78:66:30:
c4:31:61:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 18:29:35 2024 by rpki-client on console-fra.rpki-client.org