Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R6mf8EOLHa3RKIddnbPiYr6rCv8.roa
File: R6mf8EOLHa3RKIddnbPiYr6rCv8.roa (raw, json)
Hash identifier: +louZxppa1ARWOdnlCfNrC4iX5HvUffYY5wEuLxEk0g=
Subject key identifier: 47:A9:9F:F0:43:8B:1D:AD:D1:28:87:5D:9D:B3:E2:62:BE:AB:0A:FF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FF59C88BD3170A301362BBECCD9F34933
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R6mf8EOLHa3RKIddnbPiYr6rCv8.roa
Signing time: Sat 08 Jun 2024 02:10:27 +0000
ROA not before: Sat 08 Jun 2024 02:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Jun 2024 03:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f5:9c:88:bd:31:70:a3:01:36:2b:be:cc:d9:f3:49:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 8 02:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47a99ff0438b1dadd128875d9db3e262beab0aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:b2:67:50:ca:bb:1b:c8:f0:15:c6:8f:e1:
02:e0:0d:fd:86:64:25:87:4f:9a:86:4a:7f:db:3a:
fe:0e:44:cf:44:2a:19:68:4b:7f:db:84:6c:28:58:
db:c3:3a:ae:ee:6c:ee:ba:ce:8a:68:57:b7:00:c6:
63:d7:09:7d:c0:6c:07:56:11:52:10:c9:71:d9:7b:
a6:47:5f:68:aa:4a:6c:35:f7:40:4a:b4:a5:5a:b7:
37:c1:42:37:38:b1:bc:70:c6:37:ea:5e:09:02:ff:
3d:27:ec:c6:0b:3c:05:bf:d5:0d:ec:2c:f4:c4:ba:
fa:55:60:7c:03:0b:76:67:78:d8:6d:c0:cc:c3:fb:
b7:a5:4a:68:e1:98:95:58:09:ee:49:82:7b:f3:0d:
f5:ea:5f:4f:42:2a:82:df:bd:72:9a:47:18:4a:a4:
37:6c:5f:36:b7:84:ee:b6:f0:7b:c6:76:90:ec:ce:
18:8e:a0:44:31:57:55:62:3f:39:f2:90:bb:6e:59:
bf:f2:ce:d0:1f:eb:e8:f6:5e:71:4b:98:ab:49:d6:
77:d4:50:4e:8d:f3:98:48:9c:22:d2:af:b5:10:f0:
ec:21:4d:90:cc:a6:03:87:8a:a3:21:72:c6:95:01:
4c:0d:70:9b:8d:ad:31:45:70:9f:be:73:64:98:d9:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A9:9F:F0:43:8B:1D:AD:D1:28:87:5D:9D:B3:E2:62:BE:AB:0A:FF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R6mf8EOLHa3RKIddnbPiYr6rCv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:2a:49:40:c6:15:6f:f5:ce:61:c2:12:92:18:c2:94:8c:85:
19:4e:a6:6f:90:3e:6b:cc:79:0c:8e:8b:f2:76:c1:3a:02:d9:
37:34:59:5d:77:8f:b9:c4:d2:fd:80:f2:a4:6b:dd:02:cb:4b:
ff:e5:96:95:36:c4:e1:c5:b9:72:1f:42:1b:35:5f:f6:d6:b6:
c6:06:16:da:54:18:ea:e4:16:1c:7d:2c:2d:ab:bb:55:99:c7:
1d:b6:19:13:53:e0:71:40:75:ff:65:d9:33:2e:d2:cc:49:27:
c6:42:89:9a:7e:03:83:ef:8c:d3:96:8b:cf:13:11:cd:f4:9c:
34:df:6b:c2:ee:12:c4:68:bb:8e:a1:6c:4b:b5:ef:51:7c:be:
7c:43:13:e0:f6:ef:88:0c:0d:c8:a4:05:9c:b0:4d:1a:5c:93:
e9:3b:22:61:a4:05:23:c5:01:6c:ac:55:2a:90:73:c2:59:af:
51:f6:84:42:72:8d:70:ea:e2:d7:dd:ab:7d:b1:4e:a7:81:e6:
e9:8e:97:d9:c6:99:de:3b:9c:ba:11:5f:39:2c:6a:48:35:b5:
42:10:c8:22:af:64:d6:5e:1a:7f:3a:87:c8:4b:4c:2b:63:31:
07:fa:b9:a4:de:9c:fd:0f:15:4d:b3:99:49:0c:86:c0:ee:ee:
f4:73:e5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:22:35 2024 by rpki-client on console-fra.rpki-client.org