Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/L7OC5PlFsw_6AcFfzQNoExlq_d4.roa
File: L7OC5PlFsw_6AcFfzQNoExlq_d4.roa (raw, json)
Hash identifier: CC5YPX9SNTaZerzlfSrrbi3AEEYyEj2vROj90Apxn1Y=
Subject key identifier: 2F:B3:82:E4:F9:45:B3:0F:FA:01:C1:5F:CD:03:68:13:19:6A:FD:DE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB50656769F9E49B52F90B6A931BF1D0D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/L7OC5PlFsw_6AcFfzQNoExlq_d4.roa
Signing time: Sun 26 May 2024 13:10:42 +0000
ROA not before: Sun 26 May 2024 13:10:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 26 May 2024 14:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b5:06:56:76:9f:9e:49:b5:2f:90:b6:a9:31:bf:1d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 26 13:10:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fb382e4f945b30ffa01c15fcd036813196afdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:f8:a9:b4:3b:b5:e8:ab:2a:d0:54:f2:a7:
2c:44:74:a4:37:d7:8c:f1:92:a1:83:73:2e:9f:05:
90:49:50:18:9a:48:a0:0e:a3:c2:33:42:4a:df:43:
1c:2b:43:bf:5d:4b:23:db:d3:40:e0:c6:36:94:7b:
91:6e:f0:d7:9e:35:50:52:6e:b4:7e:66:8a:db:05:
87:2d:c2:76:92:aa:db:38:53:64:ac:de:d9:a7:4f:
f3:5e:f3:14:3c:dd:e1:11:69:2a:07:a9:f6:00:d7:
3d:eb:b5:94:72:e1:c4:ab:83:4c:b4:67:a1:e8:74:
0a:99:4f:08:a1:71:dc:11:fa:e6:42:aa:40:e7:b1:
a2:e6:4e:b1:ad:d0:b2:28:74:bd:d4:cd:5f:81:2c:
a4:e8:6f:02:14:56:27:be:db:6c:2e:a3:49:5b:40:
47:99:c5:89:3b:ff:67:64:3b:f4:09:0d:c5:4e:58:
fa:8d:9a:92:cb:b0:9b:00:ee:7d:09:a9:e5:ac:0a:
30:8d:12:97:9f:e4:7d:eb:87:8a:aa:5e:69:57:cc:
95:92:41:e7:e5:1d:70:b7:e1:5e:f0:3d:b7:81:17:
0e:0b:8a:25:9e:cc:3f:39:e3:9d:fb:74:a3:77:5d:
cf:c9:9f:f7:2e:0e:37:5c:cc:7a:b6:c4:fb:2e:ea:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:82:E4:F9:45:B3:0F:FA:01:C1:5F:CD:03:68:13:19:6A:FD:DE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/L7OC5PlFsw_6AcFfzQNoExlq_d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:29:03:b7:8e:77:3c:aa:b2:c6:ad:db:01:56:54:a7:c9:af:
1f:77:a4:75:db:f4:42:eb:0f:3e:35:70:6e:5c:91:07:ab:7e:
ee:00:9c:8b:dc:f1:12:23:22:2c:b1:7f:2a:f2:3d:b5:70:a4:
05:e0:d0:14:ed:e4:1f:7a:22:fc:6f:6e:80:0a:fa:9b:2e:92:
91:cb:ee:0e:ff:04:2c:0a:b2:0d:23:c6:85:ef:01:cc:f0:7f:
9a:61:23:fe:74:a7:8b:8a:0e:06:93:91:5c:a1:60:28:1f:c5:
ea:da:25:72:e3:b3:3a:f8:3b:41:40:75:58:8b:16:12:3f:87:
85:fd:07:d8:96:18:87:dc:0b:5e:0c:14:72:d5:69:b7:11:6f:
95:b7:44:f9:60:08:86:88:5e:88:f7:40:f4:74:23:55:38:bf:
95:81:24:b6:c4:c9:e5:14:26:8a:d4:5e:0a:23:12:74:6d:0a:
db:0d:d8:7b:b1:2f:a3:67:87:9f:38:e2:0f:7c:3c:16:b4:eb:
95:f0:a4:6a:03:63:b6:29:31:d6:08:53:a9:96:bb:21:34:05:
ff:1c:4b:9c:2c:f8:7c:0f:62:b6:29:d2:32:cf:bf:3b:ea:0f:
dc:d6:c4:ab:49:19:50:1f:e8:22:84:14:c3:ee:84:c7:8e:61:
aa:71:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:51 2024 by rpki-client on console-fra.rpki-client.org