Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RZ_Ogm6AcCokSUV5jkAFV3UbR-Q.roa
File: RZ_Ogm6AcCokSUV5jkAFV3UbR-Q.roa (raw, json)
Hash identifier: qs6u/WeJxhY1xTD+vQreHiK1PInBFHZxxt0Bw0+ZoUc=
Subject key identifier: 45:9F:CE:82:6E:80:70:2A:24:49:45:79:8E:40:05:57:75:1B:47:E4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01903B5B407DB7468DB49B3C2E7460004316
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RZ_Ogm6AcCokSUV5jkAFV3UbR-Q.roa
Signing time: Fri 21 Jun 2024 15:12:34 +0000
ROA not before: Fri 21 Jun 2024 15:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Jun 2024 16:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:5b:40:7d:b7:46:8d:b4:9b:3c:2e:74:60:00:43:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 21 15:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=459fce826e80702a244945798e400557751b47e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:cb:1a:c3:96:a7:5f:78:58:1a:7f:dd:22:
bb:a4:74:1b:53:c8:db:9a:75:2a:fb:20:b8:5d:fb:
07:03:04:64:f7:2a:3b:e2:2c:0e:b1:3b:51:f4:16:
89:1b:cd:91:2c:50:1b:46:76:d5:4a:ad:43:af:c2:
94:3f:ff:5b:cb:7b:db:9b:1b:d3:78:32:17:f6:e2:
77:4d:ef:a6:84:a5:22:63:16:d9:cc:d1:27:c9:5e:
c7:56:20:09:34:5e:73:d3:49:5b:f8:ca:ed:c4:f4:
f8:ba:63:79:fe:6f:a2:9e:5d:bd:3b:3a:2a:e3:10:
d3:be:ca:48:b2:02:77:3d:8b:88:06:ac:af:ca:a3:
c0:72:7c:08:09:26:06:40:47:c7:0f:21:5d:43:9c:
07:49:36:7a:8f:70:6d:ac:5f:a2:7d:c9:18:25:6e:
fa:a8:8f:3f:ff:9f:34:7d:8f:23:f4:85:19:dc:2d:
5a:7d:85:c6:b9:99:9a:77:50:0f:0d:f2:4e:a4:7d:
b3:43:b7:7a:39:d1:9d:00:93:ec:d1:a9:71:4b:af:
d1:4e:71:9a:b7:e6:f0:a7:ca:e3:78:c7:33:83:da:
1a:da:eb:7e:7d:a6:1a:43:a4:42:e7:4e:01:80:c1:
50:c7:32:41:be:15:9a:49:f9:5a:7f:34:55:86:6a:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9F:CE:82:6E:80:70:2A:24:49:45:79:8E:40:05:57:75:1B:47:E4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RZ_Ogm6AcCokSUV5jkAFV3UbR-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:c0:aa:88:73:6c:a7:77:3a:54:34:66:ce:bc:31:7b:e3:0b:
fe:73:3b:ae:61:f8:59:61:77:a7:af:34:2f:83:1a:52:ad:4e:
5c:d6:64:e2:fe:53:55:22:10:a4:b6:d1:a4:dd:9d:b1:5f:6d:
74:65:34:ec:17:59:b6:70:32:e7:d1:eb:53:74:e5:9d:77:5c:
2b:b0:f1:4e:43:76:ff:3f:c6:d1:49:97:c8:23:70:ad:d6:bd:
e6:d0:99:61:3c:2b:f6:f8:25:dd:69:87:48:bf:3a:58:24:00:
99:de:e9:64:08:4f:11:f1:32:92:5b:77:c8:9d:11:3f:45:3f:
9e:a4:9d:f8:37:ec:f1:aa:92:d2:8d:6f:55:c6:7b:a8:29:f5:
66:b5:94:23:82:3f:d6:6e:6e:46:cc:23:a3:dd:7a:e5:9c:b7:
30:9f:92:dc:43:a6:c6:bb:7c:ad:bf:3c:72:ec:fc:73:82:99:
ba:4b:8b:21:4d:49:f1:e2:94:42:5d:9a:30:d9:0d:98:4c:42:
6c:c0:57:28:c4:fd:be:1b:05:f1:52:3a:45:60:f5:a8:37:56:
75:d5:71:9b:22:da:68:84:93:e1:94:c5:cd:53:d0:7d:68:f2:
cb:af:3f:86:01:7c:d0:89:f5:17:aa:8e:14:59:c1:0d:f2:98:
50:fb:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:14:16 2024 by rpki-client on console-fra.rpki-client.org