Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KxB5yOdXv6jnhBLl8UsrXhpwkoE.roa
File: KxB5yOdXv6jnhBLl8UsrXhpwkoE.roa (raw, json)
Hash identifier: RseikHaEekEgRatr4QPhbNtGKrMMgapKEEURzpV0ayg=
Subject key identifier: 2B:10:79:C8:E7:57:BF:A8:E7:84:12:E5:F1:4B:2B:5E:1A:70:92:81
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01906F0FB52A5719088D12B5D032A4ECEF9D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KxB5yOdXv6jnhBLl8UsrXhpwkoE.roa
Signing time: Mon 01 Jul 2024 16:10:18 +0000
ROA not before: Mon 01 Jul 2024 16:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jul 2024 17:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:0f:b5:2a:57:19:08:8d:12:b5:d0:32:a4:ec:ef:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 1 16:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b1079c8e757bfa8e78412e5f14b2b5e1a709281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:73:18:5f:1d:3b:98:59:33:b1:e4:b6:9d:
86:4a:7a:b2:26:3c:04:34:57:14:a7:2f:98:3c:d5:
1d:80:46:0b:16:88:62:d3:59:70:a0:52:f9:07:9a:
88:37:b9:47:bd:21:c3:a5:a6:2a:bc:5b:aa:2f:24:
ff:9e:a5:18:1f:06:43:5d:9d:8a:e6:63:ef:6f:8d:
79:de:96:ce:74:fd:97:35:fc:46:a1:dd:4d:13:1b:
8f:d4:c2:ea:a4:18:e1:db:14:be:c1:1e:17:ff:7c:
bd:c4:25:8e:e8:38:30:3e:ba:5d:cb:8f:64:63:56:
0f:db:14:1e:7b:40:d3:9f:e6:51:ec:e7:0f:0f:98:
02:07:56:86:d6:2f:81:f2:35:af:db:fb:fb:ff:dc:
2e:4b:25:4b:af:38:3d:83:6c:d4:16:ec:a8:ed:58:
b4:4a:84:bc:2b:19:1a:70:3c:ff:ca:18:03:6d:0d:
f8:cc:1f:a0:4b:7c:45:80:f2:2e:34:31:95:36:ad:
dd:ee:c0:88:57:0e:1d:a9:e9:d4:e2:1f:ad:78:84:
06:ae:6a:ea:eb:1f:9c:05:f6:af:84:20:7a:e8:2b:
e4:60:cf:08:a1:cf:85:bc:b1:a6:e8:54:27:d2:9f:
dc:b5:d5:2f:4c:7c:6c:f2:65:4a:14:1c:40:0b:7c:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:10:79:C8:E7:57:BF:A8:E7:84:12:E5:F1:4B:2B:5E:1A:70:92:81
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KxB5yOdXv6jnhBLl8UsrXhpwkoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:9f:fb:64:55:c2:58:e8:8d:80:79:06:80:ba:05:2b:97:74:
46:5c:76:25:01:0b:fe:7f:6c:df:23:21:8b:ce:38:c4:3f:2b:
3d:a3:56:ef:f6:6d:50:96:fa:db:1e:d8:27:f1:8e:7e:3a:5d:
6d:d2:a3:a1:05:d3:bc:13:99:75:4c:f0:7e:04:10:f5:8e:92:
aa:21:bf:10:d9:5c:e9:3b:32:24:e9:de:fa:9a:27:6f:1e:b1:
ec:b1:4c:22:0a:30:c2:07:cd:ae:e3:92:2e:60:f9:c0:42:93:
20:84:10:0f:67:aa:83:87:3b:79:0b:57:77:d1:45:ed:46:5d:
73:72:7d:57:6c:0f:fc:13:87:f7:d9:a5:86:ae:7e:b7:cf:d6:
77:cb:a7:08:b8:49:ed:d4:1c:13:43:89:ad:5b:58:f5:3f:fc:
68:d5:f4:46:ec:ea:e2:c1:59:be:19:4a:ab:7f:94:90:d7:b7:
59:4c:b9:4c:d3:6a:ba:37:5a:aa:5b:d9:86:c9:82:e8:64:71:
34:ff:3a:cc:4d:57:ad:33:5a:19:05:7f:1c:ee:c1:e8:5f:fc:
9d:1b:39:dc:92:47:c4:9b:1f:56:07:77:c9:e1:1b:d6:9f:bf:
7f:6e:2d:d4:66:e2:f7:90:d7:94:db:dd:85:b0:23:76:cf:22:
4a:13:72:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 18:55:02 2024 by rpki-client on console-fra.rpki-client.org