Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/J_e19iDc4rOsu6e-jyxY7b2JxwU.roa
File: J_e19iDc4rOsu6e-jyxY7b2JxwU.roa (raw, json)
Hash identifier: KjScAFfqqk68mPnvhTJpaG5OetSOwD4c+M1bCILUYvw=
Subject key identifier: 27:F7:B5:F6:20:DC:E2:B3:AC:BB:A7:BE:8F:2C:58:ED:BD:89:C7:05
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FD26CA9F22D938C53AF4E0535AD01AA5E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/J_e19iDc4rOsu6e-jyxY7b2JxwU.roa
Signing time: Sat 01 Jun 2024 06:11:27 +0000
ROA not before: Sat 01 Jun 2024 06:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jun 2024 07:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d2:6c:a9:f2:2d:93:8c:53:af:4e:05:35:ad:01:aa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 1 06:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27f7b5f620dce2b3acbba7be8f2c58edbd89c705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:06:46:2a:30:6d:2c:a5:df:ab:b0:ea:6c:
c6:4d:cb:d3:a4:32:f3:43:73:b2:65:e5:68:94:ad:
cc:77:95:b4:20:2f:85:a1:65:35:a3:32:df:67:fd:
bc:26:ff:14:ac:ad:19:7c:36:ea:59:37:fb:42:7d:
41:ca:4b:46:77:95:0a:c6:1c:23:0b:ad:cb:8f:70:
5b:3f:84:e5:4a:23:5f:44:bc:3d:14:7c:e4:e5:64:
a2:7d:93:91:12:73:19:0a:f2:68:98:db:83:9c:0c:
12:25:b9:08:40:ce:30:5f:66:96:e4:e0:02:82:8c:
4f:98:78:0a:61:89:91:a8:e6:23:2f:c1:86:12:0e:
96:2e:ca:a7:e4:62:1e:73:7f:15:b8:0d:ad:79:da:
55:57:26:49:80:04:b6:f1:73:23:92:be:29:92:bf:
7e:8b:62:81:66:7a:e6:ac:4c:00:b5:9d:bf:31:d7:
29:d7:16:71:6c:74:3b:c4:ad:4d:3e:88:7d:0e:9c:
c8:be:50:76:aa:b8:96:55:f7:15:5d:84:a5:29:a9:
7f:77:e4:60:08:65:37:ee:3c:0a:97:b4:a6:dd:7b:
38:24:bf:18:0c:e4:fa:bf:5f:9e:39:af:11:a5:5a:
15:74:2c:bb:96:5d:62:e7:da:c4:d6:58:13:a7:fa:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F7:B5:F6:20:DC:E2:B3:AC:BB:A7:BE:8F:2C:58:ED:BD:89:C7:05
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/J_e19iDc4rOsu6e-jyxY7b2JxwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:ab:62:94:31:af:79:95:bf:2e:20:6c:bb:4c:db:cd:ea:e3:
ed:fc:8b:5c:49:6c:91:fd:6b:57:ab:93:18:1c:b8:d4:78:4d:
24:7c:71:27:9d:2e:52:8b:f8:ea:38:fd:b4:f2:52:ea:9d:10:
1b:fb:f6:f0:2b:ec:ac:2e:ea:64:b4:73:0a:77:33:99:0d:d9:
d7:e8:37:8d:6a:9e:f3:b0:04:75:0d:4c:fd:c4:dd:7e:ba:dd:
7f:56:0c:2c:a6:11:30:db:ae:a0:7c:08:5b:2a:a1:a3:38:cd:
99:74:58:93:b3:22:90:c8:a5:9d:d2:97:ac:e7:8a:11:d5:66:
0c:15:14:c3:a7:bc:7e:98:d8:e0:56:0d:69:13:ff:93:fe:f6:
46:91:81:1e:bb:3c:98:8f:dc:b4:ea:28:4c:c9:11:b2:91:50:
8f:ae:c9:ce:13:7f:67:85:e8:35:5f:40:e0:09:a1:3c:e0:7f:
b0:68:2c:5c:b5:0a:17:c6:24:37:1a:1b:fe:1b:67:a0:b5:9f:
37:11:fb:4f:46:ca:cc:a7:98:54:85:76:64:16:96:93:a8:ab:
30:58:ce:5f:88:4f:32:ec:91:3f:39:45:ff:7b:d5:a0:b5:e1:
f9:19:22:3b:d2:8c:60:1c:be:de:5f:cf:31:11:42:6f:a9:80:
d4:4a:63:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:51 2024 by rpki-client on console-fra.rpki-client.org