Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KXryBrgpQVvpyg-3gvmKw2ZFVwo.roa
File: KXryBrgpQVvpyg-3gvmKw2ZFVwo.roa (raw, json)
Hash identifier: neRbtg8/+zJoD8S0qJdi9wKx0GiRJlstYOJjwQzTHPA=
Subject key identifier: 29:7A:F2:06:B8:29:41:5B:E9:CA:0F:B7:82:F9:8A:C3:66:45:57:0A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FFCE836D38C940C4065A209CC0E9AF45A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KXryBrgpQVvpyg-3gvmKw2ZFVwo.roa
Signing time: Sun 09 Jun 2024 12:10:27 +0000
ROA not before: Sun 09 Jun 2024 12:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Jun 2024 13:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fc:e8:36:d3:8c:94:0c:40:65:a2:09:cc:0e:9a:f4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 9 12:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=297af206b829415be9ca0fb782f98ac36645570a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:85:aa:05:d9:d7:ca:85:74:06:60:5b:cd:
72:a6:7a:5a:ac:39:7e:bd:85:f0:ee:1a:05:16:d8:
08:00:35:af:03:82:58:c9:23:15:68:5b:29:d4:7a:
97:82:3b:5d:bf:38:7f:85:7b:b8:55:7f:82:15:4e:
e6:2d:78:09:a8:3b:7a:87:b8:1a:a8:29:d5:d5:fa:
44:71:f3:b4:f7:2f:45:cb:0e:99:c0:7e:9c:b0:7d:
50:59:5b:77:c3:22:c1:2f:7f:cf:b8:7c:89:59:b6:
f7:87:0d:c3:16:f9:14:37:67:b8:c4:c9:57:18:9a:
37:58:f8:03:60:c7:de:af:85:a4:11:23:89:2c:e0:
e5:1a:53:62:3e:0a:dc:4c:fe:ca:ff:27:56:f3:6c:
70:b8:62:fa:e4:8e:34:a7:1c:7e:3d:b7:14:83:2b:
9b:58:21:34:50:c6:21:61:4e:1d:6d:c3:ba:81:bf:
ce:e4:8e:0c:7b:62:fa:04:fe:6c:cd:38:78:b8:ad:
4b:cf:62:e7:52:f7:c1:5b:43:e7:98:3d:d3:c5:13:
82:14:dd:13:32:aa:1f:a8:96:84:42:14:b7:34:45:
31:f6:21:4d:9c:90:04:27:73:47:b9:75:d3:a9:02:
e3:91:f2:c9:9b:3d:d4:44:2c:aa:a2:06:2c:a6:39:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7A:F2:06:B8:29:41:5B:E9:CA:0F:B7:82:F9:8A:C3:66:45:57:0A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KXryBrgpQVvpyg-3gvmKw2ZFVwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:53:01:02:af:97:24:44:53:15:ff:ad:ea:69:8f:ac:0f:3a:
9a:c3:74:8f:2b:2e:28:7f:d1:e1:23:d4:7e:51:bb:68:9c:27:
06:3f:6b:3c:bf:5b:5c:6c:85:3b:9d:c2:ee:bb:81:f4:80:7b:
f3:91:ee:c2:2c:86:5d:4b:c4:07:74:84:21:99:ee:1a:b0:73:
73:06:d8:82:f3:0a:bc:e9:48:b3:3f:30:41:b3:2d:1c:a2:61:
fc:46:88:0f:9a:bf:fc:23:74:46:95:3a:6b:a0:e3:1a:be:05:
04:b4:1c:61:22:f0:b7:78:92:ce:d9:b6:bb:7c:ef:cb:34:26:
06:87:08:8f:18:18:5c:7e:a5:ad:0c:f6:6a:d2:42:8f:79:cf:
45:39:a8:14:d1:ea:cc:7b:57:7b:48:db:34:15:93:8e:9c:a5:
bc:dd:24:87:38:ea:ad:6b:b2:39:17:e6:19:e0:49:e0:6d:48:
21:29:70:31:af:f3:3e:f0:f1:6a:b2:c3:5c:c6:36:cf:4e:0c:
d3:97:2a:23:90:87:af:ef:e9:be:53:66:1e:e8:f3:8b:fc:fc:
7d:e6:ec:b9:2d:50:cf:18:97:1e:37:98:35:8b:c7:99:0a:9a:
63:36:30:3e:92:56:9a:f8:78:14:7a:ba:97:4f:47:07:a5:3c:
c4:5b:25:03
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/86DbTjJQMQGWiCcwOmvRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjA5MTIxMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTdhZjIwNmI4Mjk0MTViZTljYTBmYjc4MmY5OGFjMzY2NDU1NzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeyFqgXZ18qFdAZgW81ypnparDl+
vYXw7hoFFtgIADWvA4JYySMVaFsp1HqXgjtdvzh/hXu4VX+CFU7mLXgJqDt6h7ga
qCnV1fpEcfO09y9Fyw6ZwH6csH1QWVt3wyLBL3/PuHyJWbb3hw3DFvkUN2e4xMlX
GJo3WPgDYMfer4WkESOJLODlGlNiPgrcTP7K/ydW82xwuGL65I40pxx+PbcUgyub
WCE0UMYhYU4dbcO6gb/O5I4Me2L6BP5szTh4uK1Lz2LnUvfBW0PnmD3TxROCFN0T
MqofqJaEQhS3NEUx9iFNnJAEJ3NHuXXTqQLjkfLJmz3URCyqogYspjnvIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCl68ga4KUFb6coPt4L5isNmRVcKMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvS1hyeUJyZ3BRVnZweWctM2d2bUt3MlpGVndvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB5TAQKvlyREUxX/repp
j6wPOprDdI8rLih/0eEj1H5Ru2icJwY/azy/W1xshTudwu67gfSAe/OR7sIshl1L
xAd0hCGZ7hqwc3MG2ILzCrzpSLM/MEGzLRyiYfxGiA+av/wjdEaVOmug4xq+BQS0
HGEi8Ld4ks7Ztrt878s0JgaHCI8YGFx+pa0M9mrSQo95z0U5qBTR6sx7V3tI2zQV
k46cpbzdJIc46q1rsjkX5hngSeBtSCEpcDGv8z7w8Wqyw1zGNs9ODNOXKiOQh6/v
6b5TZh7o84v8/H3m7LktUM8Ylx43mDWLx5kKmmM2MD6SVpr4eBR6updPRwelPMRb
JQM=
-----END CERTIFICATE-----
Generated at Sun Jun 9 15:24:58 2024 by rpki-client on console-fra.rpki-client.org