Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Odl6CKBoE9EFV9B4WgZYHXx2re8.roa
File: Odl6CKBoE9EFV9B4WgZYHXx2re8.roa (raw, json)
Hash identifier: OgzxP0Cim0YLRp3RKjgplLaxafU+QVXl4nv0PxzZEK0=
Subject key identifier: 39:D9:7A:08:A0:68:13:D1:05:57:D0:78:5A:06:58:1D:7C:76:AD:EF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019009236AE922E0C1931FA8E1B2E0D7B576
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Odl6CKBoE9EFV9B4WgZYHXx2re8.roa
Signing time: Tue 11 Jun 2024 21:10:34 +0000
ROA not before: Tue 11 Jun 2024 21:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 22:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:09:23:6a:e9:22:e0:c1:93:1f:a8:e1:b2:e0:d7:b5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 11 21:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39d97a08a06813d10557d0785a06581d7c76adef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:fe:9b:b0:44:2e:74:bf:37:42:15:fd:a7:
0f:ce:17:2c:57:38:c3:f8:8e:d8:04:bb:57:d1:74:
61:35:7b:c8:78:f2:87:ab:1d:7c:60:92:e3:31:b2:
5a:87:4c:2b:6d:56:e8:6d:a1:4f:fd:af:ba:1f:5c:
d2:80:f9:e1:a9:90:fc:78:fd:97:8a:f4:6b:ba:3e:
a0:f0:8c:69:e4:68:25:37:61:a0:6e:cc:d8:6f:44:
b1:ae:d4:b1:53:e0:18:cd:b3:92:19:a5:99:2b:0d:
72:0a:09:d5:4e:7c:8b:06:c7:6f:c6:fc:78:61:8f:
59:97:12:73:43:e9:b7:2a:f6:ca:e0:bc:8f:4e:3e:
39:5a:ee:cd:f7:26:fe:0f:52:a3:27:76:9c:21:47:
a4:3e:1a:f6:1a:93:79:93:44:af:88:12:9c:6e:a5:
44:d2:a8:08:26:74:c9:ee:26:74:e4:dd:18:25:c2:
2f:25:b8:97:db:21:2d:44:09:f1:f9:34:65:be:a9:
2b:f1:e6:3d:cd:29:61:ba:6f:d6:43:d8:fc:15:ee:
7f:ee:f3:46:45:87:20:57:81:11:67:40:63:92:d1:
dc:8e:d8:56:f0:7c:ad:8a:f4:5f:bd:c8:7d:4e:9e:
b8:ef:09:98:62:ad:af:05:29:b3:5a:e4:ea:83:7c:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D9:7A:08:A0:68:13:D1:05:57:D0:78:5A:06:58:1D:7C:76:AD:EF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Odl6CKBoE9EFV9B4WgZYHXx2re8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:5e:8b:d9:56:c1:3c:dd:4a:6a:e1:f8:16:79:22:bd:30:1b:
5d:2b:17:fe:31:0c:26:62:bd:d6:ba:3f:35:78:b2:7c:14:2e:
95:8b:e3:a3:df:b2:d1:17:9d:5e:3e:6e:79:4d:73:de:fb:ad:
c1:66:fc:27:2d:bc:e7:17:d4:e8:9a:27:e3:f9:73:ed:9e:63:
2b:e2:5b:8c:87:81:6d:4b:f7:6a:98:50:73:40:83:d0:2d:63:
21:5d:9f:52:c2:06:4c:35:c8:37:83:c1:0d:7b:25:58:d0:3c:
b7:d4:93:e7:05:2d:de:90:2f:83:13:8f:35:d3:9f:1d:c6:46:
08:bf:5f:4f:42:01:6e:64:9d:db:64:03:7d:77:b0:c9:7a:54:
e4:12:d8:57:89:a8:c7:fe:6b:fc:23:a6:ec:84:40:0c:aa:91:
33:ca:db:58:0c:30:f0:29:7f:92:8d:27:6f:48:26:6a:23:80:
b0:ff:34:b1:02:54:e4:d9:bd:32:fd:49:ab:83:63:12:a0:97:
68:dd:02:54:cf:f1:30:d2:ad:c0:ac:e4:71:d3:28:79:e3:d2:
65:1d:61:b6:ad:3c:5d:f1:a8:67:10:12:32:ee:a2:ce:57:09:
f1:3d:d0:7f:4e:e8:51:e6:85:4b:de:87:32:46:0e:cb:8f:55:
c4:2d:08:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 22:56:47 2024 by rpki-client on console-fra.rpki-client.org