Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UZRPaTLKsaCx4DAozm4nzv52n8Q.roa
File: UZRPaTLKsaCx4DAozm4nzv52n8Q.roa (raw, json)
Hash identifier: ZNSU+1NXB1xLOamW8Sfi+Z1zN63HAI6INOsx3L0FVPw=
Subject key identifier: 51:94:4F:69:32:CA:B1:A0:B1:E0:30:28:CE:6E:27:CE:FE:76:9F:C4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FC4E74801499DFD4338D0458F9AC13DAB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UZRPaTLKsaCx4DAozm4nzv52n8Q.roa
Signing time: Wed 29 May 2024 15:10:42 +0000
ROA not before: Wed 29 May 2024 15:10:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 May 2024 16:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c4:e7:48:01:49:9d:fd:43:38:d0:45:8f:9a:c1:3d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 29 15:10:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51944f6932cab1a0b1e03028ce6e27cefe769fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:bf:14:ed:9d:c0:ec:6a:44:34:c3:d0:82:
55:1c:6f:b5:81:90:5d:8f:f9:4d:f8:7d:d7:df:f8:
93:29:a0:41:ab:51:b2:8b:7d:bb:1d:f7:e6:94:db:
1c:ff:81:70:b7:55:c6:6c:c9:ce:c3:41:47:dd:7a:
50:a5:f6:02:f0:04:12:8d:42:8d:24:c4:9b:84:5b:
b1:f3:e5:1a:da:71:4d:4f:5b:d4:82:4d:a3:78:1d:
17:de:a3:23:43:81:9d:70:11:37:6a:b3:8f:a7:91:
b3:9b:74:52:54:60:3b:bd:f3:97:58:77:b9:5c:33:
a3:49:9a:01:b3:69:e1:2e:7f:b3:c2:15:b5:eb:b7:
82:c6:1e:91:2a:cf:40:78:4c:31:eb:1e:38:3e:d7:
4d:c4:94:09:6a:57:c9:8e:93:ec:3c:52:50:3b:8a:
3b:0f:5b:10:ae:64:5d:ea:7b:05:78:a8:93:e9:02:
eb:34:ba:ff:91:50:05:b2:d4:c9:a9:a3:a1:f3:c4:
a5:f9:e5:d2:72:f5:14:9b:4b:2c:46:95:db:aa:87:
1c:01:91:e1:0a:4f:d1:07:81:1e:ee:64:f3:8b:bc:
73:15:93:f0:b1:2e:79:5d:91:67:85:35:dc:79:7b:
30:f7:c2:d5:9c:32:b4:01:bd:4e:4f:2d:e5:eb:bf:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:94:4F:69:32:CA:B1:A0:B1:E0:30:28:CE:6E:27:CE:FE:76:9F:C4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UZRPaTLKsaCx4DAozm4nzv52n8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:59:c9:6a:5b:c6:f4:16:9c:a0:7c:c9:d9:16:6d:a7:7f:8d:
07:88:9b:e0:54:97:27:00:23:11:a4:ad:f7:53:82:27:e1:06:
e1:32:39:fc:a7:d9:34:02:bb:9c:d4:60:6d:9f:04:26:96:12:
20:00:0e:f5:fe:2b:2e:ff:d2:d1:18:4a:72:0a:9c:b0:1b:42:
0e:60:75:cf:5f:09:78:99:8c:b7:7b:a6:3f:8d:5f:fa:d4:9e:
c3:f9:85:97:45:4e:d7:46:b2:11:af:3d:a4:d6:59:48:39:c9:
3b:9a:fa:51:52:a9:4a:eb:32:11:64:8a:fc:a8:c4:d2:42:a2:
44:50:77:b2:19:8f:24:62:cc:2d:f5:ce:9a:5e:25:4d:39:9b:
5a:63:5a:07:17:70:06:49:0b:d6:27:f0:0c:1f:db:58:a5:13:
3a:fb:81:0d:2e:5a:bb:f5:e2:15:c1:f2:b5:53:c6:b9:a3:e3:
4f:21:68:a7:b8:a4:59:77:4a:22:29:e2:f0:39:82:e5:50:10:
78:bb:57:b4:d8:c4:ae:09:81:05:ce:e4:6a:97:e7:89:24:8a:
8e:c4:5b:db:49:3d:7f:18:ed:a0:a5:22:d5:7f:78:9a:da:bc:
e9:da:b9:e9:24:f0:46:10:02:ab:91:c9:d2:48:ba:c2:69:26:
39:85:f2:f2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/E50gBSZ39QzjQRY+awT2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNTI5MTUxMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTk0NGY2OTMyY2FiMWEwYjFlMDMwMjhjZTZlMjdjZWZlNzY5ZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZK/FO2dwOxqRDTD0IJVHG+1gZBd
j/lN+H3X3/iTKaBBq1Gyi327HffmlNsc/4Fwt1XGbMnOw0FH3XpQpfYC8AQSjUKN
JMSbhFux8+Ua2nFNT1vUgk2jeB0X3qMjQ4GdcBE3arOPp5Gzm3RSVGA7vfOXWHe5
XDOjSZoBs2nhLn+zwhW167eCxh6RKs9AeEwx6x44PtdNxJQJalfJjpPsPFJQO4o7
D1sQrmRd6nsFeKiT6QLrNLr/kVAFstTJqaOh88Sl+eXScvUUm0ssRpXbqoccAZHh
Ck/RB4Ee7mTzi7xzFZPwsS55XZFnhTXceXsw98LVnDK0Ab1OTy3l67+YHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFGUT2kyyrGgseAwKM5uJ87+dp/EMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvVVpSUGFUTEtzYUN4NERBb3ptNG56djUybjhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI9ZyWpbxvQWnKB8ydkW
bad/jQeIm+BUlycAIxGkrfdTgifhBuEyOfyn2TQCu5zUYG2fBCaWEiAADvX+Ky7/
0tEYSnIKnLAbQg5gdc9fCXiZjLd7pj+NX/rUnsP5hZdFTtdGshGvPaTWWUg5yTua
+lFSqUrrMhFkivyoxNJCokRQd7IZjyRizC31zppeJU05m1pjWgcXcAZJC9Yn8Awf
21ilEzr7gQ0uWrv14hXB8rVTxrmj408haKe4pFl3SiIp4vA5guVQEHi7V7TYxK4J
gQXO5GqX54kkio7EW9tJPX8Y7aClItV/eJravOnauekk8EYQAquRydJIusJpJjmF
8vI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org