Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PJolFWohHrlo6OuqLV_7dCjxcbM.roa
File: PJolFWohHrlo6OuqLV_7dCjxcbM.roa (raw, json)
Hash identifier: d4B3wn3wpS/IRnBxW8W2y27v3vumRg0/IF4DbiASb2Q=
Subject key identifier: 3C:9A:25:15:6A:21:1E:B9:68:E8:EB:AA:2D:5F:FB:74:28:F1:71:B3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019008EC7C791F2FDF6DC686C868507841AB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PJolFWohHrlo6OuqLV_7dCjxcbM.roa
Signing time: Tue 11 Jun 2024 20:10:34 +0000
ROA not before: Tue 11 Jun 2024 20:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 21:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:08:ec:7c:79:1f:2f:df:6d:c6:86:c8:68:50:78:41:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 11 20:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c9a25156a211eb968e8ebaa2d5ffb7428f171b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:e0:91:a6:86:93:8e:77:e3:12:ae:1e:c2:
5d:b2:f1:f9:b4:14:cb:cd:25:98:54:55:7b:12:af:
de:df:32:0f:b4:5a:b7:13:ea:ab:d4:cb:33:4c:2c:
0a:23:70:ab:3c:d4:c5:33:2f:df:13:5d:b3:36:8c:
8f:3f:4c:7c:c6:34:6c:32:d4:ce:d3:8e:e2:62:9e:
d7:81:9e:67:07:7c:0d:07:fb:13:ce:e6:f1:69:95:
7a:c0:0c:d0:d6:e6:26:ec:8e:94:48:80:5a:7f:58:
1b:24:74:b6:05:67:66:f0:1f:e4:b9:07:82:0a:13:
db:a8:b6:25:68:1a:f7:1a:e0:42:5f:58:8f:68:b4:
51:52:3c:97:33:b1:f2:74:89:77:63:37:ff:90:ee:
d2:a2:df:11:5e:f5:83:81:e7:a7:32:d3:8b:d9:10:
0c:19:7d:cc:78:95:6d:01:b5:56:3a:12:02:18:6c:
6d:8a:b0:9b:72:78:7d:55:82:5d:39:12:a6:ca:7a:
e1:a8:00:c3:c2:21:19:0b:8d:f2:67:3b:c2:a3:15:
8e:d2:5f:cf:5b:39:06:17:fe:61:47:d3:a9:68:b9:
bd:12:97:f9:51:71:59:bf:f0:c2:7d:cc:eb:76:2c:
05:54:1b:a4:68:76:50:20:a9:db:92:4d:ea:4b:b7:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9A:25:15:6A:21:1E:B9:68:E8:EB:AA:2D:5F:FB:74:28:F1:71:B3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PJolFWohHrlo6OuqLV_7dCjxcbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:0a:62:15:16:0d:02:50:4a:cd:8f:9a:f8:25:b1:78:83:63:
1e:a3:83:ec:ab:9d:a5:cb:04:ec:f1:8b:32:b4:c0:e9:69:bc:
40:f0:13:c5:b7:b7:77:f9:7b:44:74:22:9b:f0:fe:9f:c4:d1:
9c:62:3f:e4:a2:53:02:c1:e1:87:5c:68:ad:8e:bc:37:29:de:
3e:c2:05:48:8c:11:d7:a7:8e:a9:5d:04:30:f0:e7:e7:36:69:
9e:0e:ba:6e:3b:d7:06:0e:fa:1c:9e:bb:fb:7a:08:1f:54:67:
bc:d2:a8:b5:e4:2a:04:31:5b:0c:9f:4b:da:b1:97:9b:54:b4:
20:d7:e6:af:20:3e:e9:af:79:78:b6:5c:3d:75:8b:0e:7b:64:
92:02:c6:11:08:a7:ca:13:6a:0b:c6:a7:b8:31:26:3a:3c:b1:
42:04:26:3b:c6:4e:87:d9:e8:60:52:12:4b:74:4f:0a:82:87:
a5:5e:e7:49:aa:3d:cd:e6:ac:59:50:f4:e6:93:84:99:89:25:
32:73:65:77:5e:02:b2:56:95:28:4f:e8:d0:7c:75:f1:ba:97:
46:19:f5:f8:f3:4e:c0:c7:b9:ec:55:e1:18:79:8a:54:38:0e:
2a:00:08:28:5e:4b:f8:b7:b4:be:fc:98:fa:e3:bd:e1:56:c7:
35:15:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 00:55:02 2024 by rpki-client on console-ams.rpki-client.org