Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/L3LMXkW79m1RdRWaRojBp6BjWmI.roa
File: L3LMXkW79m1RdRWaRojBp6BjWmI.roa (raw, json)
Hash identifier: 7MWIDxlr03gsu7gHzd1gQj0gtPLL8N02lbRX9PFURsQ=
Subject key identifier: 2F:72:CC:5E:45:BB:F6:6D:51:75:15:9A:46:88:C1:A7:A0:63:5A:62
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019025DEC42AE6DEC598809FB4ACE5972473
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/L3LMXkW79m1RdRWaRojBp6BjWmI.roa
Signing time: Mon 17 Jun 2024 11:04:34 +0000
ROA not before: Mon 17 Jun 2024 11:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:25de:a01a/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 17 Jun 2024 11:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:de:c4:2a:e6:de:c5:98:80:9f:b4:ac:e5:97:24:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 17 11:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f72cc5e45bbf66d5175159a4688c1a7a0635a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:bd:05:1f:bd:7f:31:1c:ba:c1:89:80:8a:
5a:d4:6b:bd:02:a9:b7:b0:05:ba:f4:d2:21:5c:4c:
e0:6b:d8:8c:9d:1b:5d:16:98:80:c2:70:86:a7:e2:
3e:8b:1a:24:95:3f:5d:c5:62:60:22:95:bd:03:22:
4d:f9:ee:22:30:b8:5a:ce:b2:89:c8:de:cc:43:6d:
1e:fe:c1:e5:e0:b3:ba:70:66:48:26:07:ae:8e:35:
5d:ce:00:7a:3f:32:9d:2a:26:3e:98:76:25:2a:53:
75:25:87:fa:42:14:2c:75:19:f4:02:08:25:7a:21:
09:95:89:21:6b:d6:4d:ef:4c:f6:96:cf:98:e7:d5:
bd:e3:a6:c8:7e:b2:29:59:20:f9:af:45:a4:b7:27:
93:8e:77:0b:db:08:32:79:56:b1:d8:a7:f4:5a:8e:
a9:4e:23:ae:dc:23:59:79:a1:65:8c:1d:bc:1b:50:
d8:8c:84:d5:1a:0d:dc:ba:85:6d:12:c6:47:48:de:
45:8b:8d:46:69:d7:f2:82:f1:b0:1b:33:ff:43:0d:
bb:f8:bb:f2:57:4b:95:98:93:cc:28:fe:10:d5:8f:
de:f3:83:9c:15:20:d0:45:29:da:fd:ab:0b:70:5c:
76:7b:b9:7f:62:21:c1:65:82:41:ef:23:bd:16:1d:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:72:CC:5E:45:BB:F6:6D:51:75:15:9A:46:88:C1:A7:A0:63:5A:62
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/L3LMXkW79m1RdRWaRojBp6BjWmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:f3:eb:00:47:46:29:d1:fe:22:60:94:9d:b0:02:d5:28:76:
ec:93:70:96:36:48:8f:82:ee:30:f5:c3:e5:4b:42:c5:3f:d9:
78:88:fc:9a:ca:96:61:46:da:2d:5c:e2:40:1a:83:8f:0e:ae:
39:4d:0c:8e:91:3e:33:80:28:3a:63:9e:5d:35:8a:0c:ce:9b:
c1:c5:e5:48:d0:af:a7:30:6c:19:15:4c:e4:22:f3:93:96:6c:
ee:7d:b2:5e:35:77:70:b1:df:00:71:2b:98:75:40:dd:a0:b7:
e5:4c:a0:56:6b:fa:d6:3c:0d:91:17:b5:ff:90:0d:dd:37:cf:
07:9c:09:88:57:d0:f2:44:f6:91:f2:4b:38:08:59:5c:c8:3e:
5c:59:1f:4d:7a:02:d9:99:93:6d:ee:40:17:43:7f:3c:28:a3:
1a:c5:62:74:0d:84:df:c9:1a:30:51:d6:56:07:a5:7e:15:37:
1b:ba:c9:7f:27:c0:fa:68:c8:52:98:c0:c7:b6:95:46:d6:47:
70:e7:bc:ee:3f:b4:bf:93:89:87:f2:74:8d:2a:e3:6c:72:3d:
a7:9d:6b:77:35:f5:1e:73:a3:13:b6:88:2f:d7:bf:1f:46:39:
19:df:30:ee:a8:0b:5e:2c:2d:78:f2:76:1c:3c:13:c3:4d:f2:
a3:ea:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:16:13 2024 by rpki-client on console-fra.rpki-client.org