Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Tm74I_D2JJy_D-UB1NIplC0zjOE.roa
File: Tm74I_D2JJy_D-UB1NIplC0zjOE.roa (raw, json)
Hash identifier: lEft0mbm5MXvs43NLkOpGbNChBp/EyKSfnOX2lrb3Jk=
Subject key identifier: 4E:6E:F8:23:F0:F6:24:9C:BF:0F:E5:01:D4:D2:29:94:2D:33:8C:E1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FD8D633BE99847774EB01FDDD2E8A8B4E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Tm74I_D2JJy_D-UB1NIplC0zjOE.roa
Signing time: Sun 02 Jun 2024 12:04:27 +0000
ROA not before: Sun 02 Jun 2024 12:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:d8d6:b2/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 02 Jun 2024 12:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d8:d6:33:be:99:84:77:74:eb:01:fd:dd:2e:8a:8b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 2 12:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e6ef823f0f6249cbf0fe501d4d229942d338ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:92:27:76:0c:26:21:a5:bc:9d:25:4a:1e:
19:dc:9c:9b:57:df:ce:33:1c:d1:56:49:47:09:51:
d8:df:33:92:78:88:1d:e1:53:a1:cd:17:19:49:b1:
a6:92:46:6f:45:4a:f8:a8:1c:6f:10:b9:ce:24:bd:
e3:d6:db:7e:56:3a:19:5d:f6:3f:a9:47:21:4f:31:
0c:12:46:cf:64:97:41:42:71:03:b4:7a:7e:6c:e9:
ff:2f:4a:e2:24:7c:bd:21:ab:0c:b8:be:9c:71:a1:
2f:85:b0:82:07:42:04:71:52:e1:07:a8:6a:46:14:
83:3f:e7:72:32:68:06:7e:66:41:d4:f7:d8:89:77:
1b:85:d0:82:ce:25:e5:5d:b9:60:cd:6e:86:f2:cc:
34:86:95:91:4b:f3:16:94:ce:b5:72:76:21:15:eb:
df:87:f7:21:06:37:c1:fd:c7:db:f1:c7:d8:0c:46:
52:53:6a:b1:ec:b8:4a:6a:2f:cc:7c:44:b1:1d:fb:
19:b3:e4:c7:ad:b4:82:0f:c7:46:8d:db:b1:c8:72:
07:df:28:0b:a6:60:ea:91:f0:f7:d2:cc:28:c8:a2:
10:ec:72:c3:9b:16:cd:ea:9f:24:5b:ed:93:53:4e:
63:19:aa:40:48:a7:0e:2d:c6:82:c7:d1:5a:ed:92:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6E:F8:23:F0:F6:24:9C:BF:0F:E5:01:D4:D2:29:94:2D:33:8C:E1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Tm74I_D2JJy_D-UB1NIplC0zjOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:fc:4a:64:c3:03:c5:62:c0:19:26:8d:5b:b9:f3:aa:f4:71:
e6:19:60:54:45:15:97:bd:45:24:b1:e1:61:ab:b3:7b:03:c4:
28:31:6c:b0:dc:90:22:18:f8:c3:ed:7f:89:eb:6c:3b:dc:8c:
55:fa:dd:a3:64:db:e2:f0:9d:ff:24:98:e8:c9:33:1f:15:3b:
cb:a8:cb:b0:53:c2:69:1c:b1:9b:7f:a2:ae:e0:5e:40:6f:35:
8e:09:f1:55:b9:9e:6e:0e:e9:6c:ae:7e:1a:2d:cf:bf:87:d0:
2c:bf:01:b6:0b:03:32:25:7b:20:9c:98:11:fc:8f:81:a2:f0:
51:c2:d9:c9:62:36:1e:a5:4e:1c:b1:a5:36:34:3e:b7:d1:79:
b2:2a:da:43:4c:a8:9b:7c:a2:50:51:b2:e1:bf:8b:a1:da:18:
e3:8d:e2:bc:65:1b:44:d7:98:13:2c:39:6b:c3:be:39:1d:f6:
47:ae:79:1f:98:6e:47:72:99:f4:fd:ab:05:38:7a:a1:50:5b:
c9:87:61:a5:4c:91:79:b3:72:a2:07:15:0e:3d:18:64:8a:f9:
7a:05:df:97:00:70:78:9a:9e:e9:b8:67:cc:61:1a:d0:03:55:
4b:b5:15:0b:17:75:6e:8f:8a:4a:f5:08:39:75:44:9c:e9:3c:
19:87:fd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org