Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SCzO_P85Vjza72TixGvGuS_pzvQ.roa
File: SCzO_P85Vjza72TixGvGuS_pzvQ.roa (raw, json)
Hash identifier: FmYeReXmtRz7r0MUxbLs0ej5ArR+bDeeplQBsjX4vq4=
Subject key identifier: 48:2C:CE:FC:FF:39:56:3C:DA:EF:64:E2:C4:6B:C6:B9:2F:E9:CE:F4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FD190EF76BEE42A90D4726A6487479E87
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SCzO_P85Vjza72TixGvGuS_pzvQ.roa
Signing time: Sat 01 Jun 2024 02:11:27 +0000
ROA not before: Sat 01 Jun 2024 02:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d1:90:ef:76:be:e4:2a:90:d4:72:6a:64:87:47:9e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 1 02:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=482ccefcff39563cdaef64e2c46bc6b92fe9cef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:c8:56:92:85:a6:32:bf:6a:6b:0f:15:ce:
c0:2c:66:79:67:1f:c5:9d:4e:a2:8a:53:fa:0b:a9:
96:7f:ba:ee:e7:a4:9f:3f:83:15:36:b9:cb:60:9e:
70:0f:6e:33:cb:ce:82:e3:91:ea:8b:2f:aa:82:d5:
48:d6:6c:9f:40:59:5d:7d:56:97:ac:3b:9d:b9:5d:
5e:06:d1:d7:aa:5f:c5:74:af:93:14:d8:e8:e3:55:
68:12:ce:62:40:6d:2b:0a:03:41:e3:ae:31:39:8c:
50:3c:89:a4:f7:bf:6c:ac:ab:2c:fb:da:ee:f4:13:
16:60:25:e1:7a:37:75:a6:ef:49:db:8e:c0:e1:2e:
bf:ef:b9:27:b2:69:f0:94:09:fb:a9:2c:bd:f6:28:
ca:3e:38:4d:32:dc:39:96:eb:61:de:b9:b7:75:ad:
84:3c:72:b5:1e:90:8b:54:c3:c8:97:ed:a4:13:2b:
16:74:b6:60:d9:64:56:4f:ef:2f:30:5f:ad:24:d8:
18:8d:01:dd:e2:3b:8d:57:46:95:d6:19:90:b4:74:
6f:5d:8e:98:3b:48:da:64:30:ae:09:f3:5a:e4:b3:
b6:9f:02:91:0e:80:62:b2:54:08:6a:8d:a8:9b:67:
b3:38:4a:4d:b3:65:e9:13:3a:df:42:07:6f:92:d5:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2C:CE:FC:FF:39:56:3C:DA:EF:64:E2:C4:6B:C6:B9:2F:E9:CE:F4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/SCzO_P85Vjza72TixGvGuS_pzvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:c8:8e:a8:bb:33:4c:f2:9d:b5:be:a6:68:de:40:f8:07:16:
bf:06:ed:29:2b:35:53:d3:60:3a:b1:17:de:42:96:f5:9d:90:
f8:5b:36:4e:e7:03:e8:84:fc:7f:5c:f1:52:fe:1a:f9:68:be:
79:38:17:c6:23:84:68:0b:5c:c9:85:18:73:30:75:83:b1:5e:
8e:fd:b9:61:ed:2a:20:1f:81:f0:19:c6:d4:6f:26:1d:0d:27:
2b:24:e3:2d:4d:26:85:c1:91:a2:75:11:6f:e5:14:86:04:3e:
aa:a2:c3:36:90:8e:45:ca:45:f4:63:e1:65:db:1f:1f:bb:84:
8a:2d:65:c2:e4:70:a8:c2:39:0f:3d:23:b0:4a:10:65:92:f1:
56:d3:6e:63:02:b5:cf:01:d7:5e:c7:cc:ac:76:ec:43:ee:e0:
bf:88:6d:6a:fb:77:09:14:cd:d9:13:6a:22:6e:77:cf:23:2d:
11:e9:1b:f0:06:7c:31:b2:7e:89:79:0b:c3:72:98:31:19:7c:
6c:3a:54:bc:e2:70:cd:d1:9b:61:4f:de:ae:bc:08:ba:56:b2:
de:9c:0b:28:64:87:fd:fd:09:a7:d2:81:b7:7e:e8:ab:f9:25:
09:e3:3a:da:4b:14:11:04:af:80:8a:ff:43:69:27:a8:01:5a:
c6:06:97:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org