Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T9Vvq8tQwT5Yck_8glFDP1Br4b4.roa
File: T9Vvq8tQwT5Yck_8glFDP1Br4b4.roa (raw, json)
Hash identifier: 1P+SjhZYjlx6SEpQZnKAybtpZtvWfVnow+A5Z1y9XuE=
Subject key identifier: 4F:D5:6F:AB:CB:50:C1:3E:58:72:4F:FC:82:51:43:3F:50:6B:E1:BE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FFA1E193D61743000DF98072038430F00
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T9Vvq8tQwT5Yck_8glFDP1Br4b4.roa
Signing time: Sat 08 Jun 2024 23:10:27 +0000
ROA not before: Sat 08 Jun 2024 23:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Jun 2024 00:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fa:1e:19:3d:61:74:30:00:df:98:07:20:38:43:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 8 23:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fd56fabcb50c13e58724ffc8251433f506be1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:c4:a8:56:90:2e:c8:3e:f6:69:50:50:27:
31:d4:72:d8:7a:0b:19:da:31:6a:c7:12:2a:a8:ff:
b0:81:c2:6f:db:49:e0:3f:e3:32:aa:fa:82:d1:56:
01:a7:25:d5:39:fd:cf:59:93:d5:fd:fd:df:55:ae:
ca:18:21:2a:7e:e3:e2:9a:df:64:c9:22:0d:1c:17:
4c:b0:f1:6b:8f:3d:ec:8b:59:da:ec:4f:94:66:81:
29:a5:db:49:ef:c8:e7:f0:64:08:b1:37:3a:58:21:
7a:09:44:e8:08:02:8b:6d:da:0a:b4:24:89:10:64:
0b:30:73:02:36:7b:04:f6:13:ea:8b:13:13:e4:58:
75:0f:7e:e9:2f:59:51:00:f6:aa:75:52:b7:76:1c:
90:b3:9e:50:9c:6e:9f:16:97:fe:49:ad:3c:38:52:
83:4e:f4:0c:fe:19:e7:b9:87:bb:eb:9b:ec:d4:a9:
11:23:76:34:e0:1c:62:e1:ec:40:f6:96:65:50:ff:
1b:41:b1:ba:23:4b:05:8a:53:0f:d5:d2:7d:6b:43:
4e:a6:c7:30:73:e4:05:3b:25:1b:63:dd:dd:1b:bb:
9f:b3:64:d9:93:17:ad:21:f6:54:cc:31:52:81:35:
f3:5d:15:a8:20:42:58:5b:43:39:27:aa:3f:90:a9:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:6F:AB:CB:50:C1:3E:58:72:4F:FC:82:51:43:3F:50:6B:E1:BE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T9Vvq8tQwT5Yck_8glFDP1Br4b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:0c:94:9d:d6:6b:5a:34:b5:7a:cf:8b:81:31:37:90:e1:c8:
64:c7:4d:d4:25:ce:9d:ff:56:ec:74:b1:40:c6:58:3c:a7:39:
3e:20:00:23:d9:69:bc:6c:66:fe:27:da:a1:f0:e4:0b:17:fc:
c4:6f:5e:72:a9:40:45:18:e6:0e:93:f7:a2:93:6f:09:1e:af:
c4:55:de:93:45:1c:fb:8e:a6:db:29:3b:43:21:e1:a9:a1:1a:
cb:26:4e:b7:b5:f6:93:65:bd:32:22:fa:db:1b:eb:09:8f:38:
ce:89:9b:33:73:b6:f5:30:af:7f:af:1b:bf:0c:e0:67:5c:d0:
90:db:60:78:f5:7a:c9:c7:5a:e1:fa:fe:3b:76:91:b3:bf:72:
19:d9:7f:a3:8e:6a:8c:e3:93:9a:c5:0b:08:3e:30:38:43:38:
85:68:a0:ef:b7:04:0f:9a:ba:9d:90:75:ce:41:33:6d:bb:4a:
b7:61:11:6d:22:f9:f9:54:0c:03:86:12:71:5f:33:ef:b5:2c:
54:26:3e:bc:8b:7e:b8:c0:8b:d3:d0:fb:16:6c:77:88:2f:64:
6a:1f:d4:a6:85:82:2d:3a:5d:db:ff:2c:29:7e:82:d3:a6:b7:
bc:81:55:06:aa:7c:4c:41:29:7e:88:21:8a:ad:ec:4e:3b:c2:
90:1f:ee:fb
-----BEGIN CERTIFICATE-----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Generated at Sun Jun 9 01:15:53 2024 by rpki-client on console-ams.rpki-client.org