Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/W3EDqOsc_WsjUyvF5pn5_ewshsM.roa
File: W3EDqOsc_WsjUyvF5pn5_ewshsM.roa (raw, json)
Hash identifier: jOoShULgpBqogfn9API9vK8FjWfIIOGKmBvWG47IHeE=
Subject key identifier: 5B:71:03:A8:EB:1C:FD:6B:23:53:2B:C5:E6:99:F9:FD:EC:2C:86:C3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01903A0A575EC33220B893007D38CBA57593
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/W3EDqOsc_WsjUyvF5pn5_ewshsM.roa
Signing time: Fri 21 Jun 2024 09:04:34 +0000
ROA not before: Fri 21 Jun 2024 09:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:3a0a:4ca/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 21 Jun 2024 09:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:0a:57:5e:c3:32:20:b8:93:00:7d:38:cb:a5:75:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 21 09:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b7103a8eb1cfd6b23532bc5e699f9fdec2c86c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:5e:78:86:5b:04:8c:be:1c:ed:4b:4c:20:
b4:c9:e2:1d:ea:50:46:d1:40:02:79:b6:cc:16:09:
d7:1d:05:f5:12:bf:71:2a:fa:d5:e4:40:68:14:d1:
ef:a8:b9:c2:fe:5d:28:57:a6:f6:5f:0a:ca:2d:a8:
01:ea:63:d5:cb:ea:8d:4e:08:df:ae:1c:3a:0e:aa:
46:95:4a:27:2e:b4:d0:96:05:d4:ef:0d:be:42:34:
f2:1e:26:b1:6c:fa:98:72:ef:ba:e5:1b:38:44:5b:
43:93:78:44:85:91:d4:6c:d9:92:2f:63:db:72:90:
77:16:d6:40:d7:48:a9:1b:60:d2:99:d5:b5:77:6e:
17:75:36:bb:af:b1:89:8e:7f:93:f5:c2:b1:de:b8:
62:34:29:1c:45:b9:ca:35:d4:38:a6:84:94:3a:ff:
5e:9b:ff:04:81:b0:ae:5f:77:60:2f:75:2d:a0:89:
ce:d8:8c:75:ee:53:c7:a3:48:43:56:39:a8:4a:ba:
62:74:de:70:56:9f:34:d3:9f:c8:cb:89:ba:8f:79:
b9:46:76:81:ea:ba:a4:30:63:87:d6:97:e2:ef:71:
db:b3:79:7a:8b:97:01:8b:6c:09:09:e8:e3:3e:62:
62:4d:5f:c4:f9:86:69:a7:9c:f8:67:83:c0:08:17:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:71:03:A8:EB:1C:FD:6B:23:53:2B:C5:E6:99:F9:FD:EC:2C:86:C3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/W3EDqOsc_WsjUyvF5pn5_ewshsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:b6:28:76:aa:f3:43:aa:c0:fe:53:07:bf:97:69:53:45:d4:
4f:83:b7:00:57:57:dc:50:a6:9f:13:39:78:49:4a:87:2c:15:
f9:e6:6d:93:68:76:ce:94:fe:1c:29:4f:8e:80:c1:39:ce:f9:
20:96:de:45:fe:76:94:c1:9b:5c:b0:26:39:4b:72:02:e2:56:
3b:5a:62:73:0b:72:d2:03:22:60:c9:ee:b8:97:21:42:03:ef:
25:f3:ba:cf:ec:32:55:64:a3:a3:b0:e5:76:b7:74:1c:13:46:
eb:c9:e4:11:fc:10:e2:9e:f9:67:16:80:52:8e:49:f3:67:f3:
74:e3:2b:4d:a8:8b:e9:7a:7a:55:b4:ef:b5:c4:c5:a5:dc:fa:
52:4b:d6:ac:2e:b4:e9:ec:da:59:68:a2:01:a4:dc:fe:10:23:
71:a4:5b:04:f3:43:e6:12:5c:90:08:c6:19:fa:4f:4b:c8:f0:
63:a1:61:83:11:6a:c2:e4:dd:d4:78:d0:71:90:ba:2c:ad:2c:
b6:c2:d5:a8:e2:82:a7:8a:61:8c:24:01:e0:89:d5:5b:0c:35:
7a:3a:ad:1e:14:d0:61:13:24:ee:f1:36:d7:ad:82:d3:39:21:
34:7f:54:d7:7d:a1:f2:dd:32:28:3d:e4:63:2a:ee:59:0a:b3:
b1:b9:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 13:17:26 2024 by rpki-client on console-fra.rpki-client.org