Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WSIjhnBz_QB7VRqMWs80fcwfmPE.roa
File: WSIjhnBz_QB7VRqMWs80fcwfmPE.roa (raw, json)
Hash identifier: EKHIa2eDCONYIoNaybSzwYBJ07v8N+TT6OcEYgkLMns=
Subject key identifier: 59:22:23:86:70:73:FD:00:7B:55:1A:8C:5A:CF:34:7D:CC:1F:98:F1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FC28A1DFBA6842C9CFAF40B7F6F26B6A8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WSIjhnBz_QB7VRqMWs80fcwfmPE.roa
Signing time: Wed 29 May 2024 04:09:42 +0000
ROA not before: Wed 29 May 2024 04:09:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 May 2024 05:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c2:8a:1d:fb:a6:84:2c:9c:fa:f4:0b:7f:6f:26:b6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 29 04:09:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=592223867073fd007b551a8c5acf347dcc1f98f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:01:a8:4a:41:bf:3f:ca:a1:3e:56:3b:32:de:
56:2c:de:4a:3e:b4:1f:d4:d1:b1:9a:07:da:45:90:
7f:65:8a:93:67:1f:8b:9b:49:b5:11:9d:96:a7:8a:
51:8f:61:b1:4e:3e:05:0a:29:32:cf:37:36:ec:37:
5b:a4:39:1b:5b:51:71:e5:94:bf:27:17:b2:15:6a:
8d:b1:df:07:54:d1:d2:89:a9:0f:a6:ac:ad:46:77:
76:af:d2:ce:c8:58:d7:22:71:35:8f:f0:07:21:2f:
d5:72:af:31:3a:d1:3d:9d:51:91:7c:8f:e0:1f:91:
fa:d1:7d:6b:ea:ad:4c:5d:c5:dc:c6:5f:d2:dd:cb:
86:4e:db:1f:4f:d6:7b:25:d5:7b:9e:1c:67:06:f4:
f3:df:ab:97:dc:86:22:73:9c:46:e0:9b:15:a7:72:
db:5d:e4:5a:44:13:93:d9:38:80:7d:24:11:23:dc:
26:ee:f9:92:be:e5:c3:72:28:1b:b0:57:6a:d5:e0:
e2:63:fa:8b:1e:b2:ef:25:ff:6f:b1:ae:4e:40:dd:
48:d7:5c:62:e2:d8:45:27:00:3e:0c:85:63:89:0c:
0d:ab:20:bb:72:e6:09:d5:8f:aa:13:92:4f:fd:ab:
8d:8b:94:0f:29:9f:1d:2a:2c:5b:7a:dc:7b:1e:04:
9d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:22:23:86:70:73:FD:00:7B:55:1A:8C:5A:CF:34:7D:CC:1F:98:F1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WSIjhnBz_QB7VRqMWs80fcwfmPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:ef:0a:ad:57:ed:e4:2f:f8:93:14:e9:5b:c7:d0:55:2c:d3:
a2:e8:25:3e:1a:df:96:9d:ac:b5:b2:cf:0f:67:74:77:d4:1b:
b8:af:c9:97:6c:9a:dc:d7:01:50:1a:7a:81:af:2a:d2:c0:b4:
31:72:65:16:9e:cb:18:4d:3b:d5:9f:02:50:c9:9f:52:1c:ab:
b9:1b:ed:44:1e:4a:5c:cf:5b:1d:1e:88:8b:e8:fa:52:a2:de:
da:93:75:ee:43:65:98:82:5e:74:07:e1:91:b0:06:c3:a3:b4:
03:73:5b:67:67:83:7d:a0:2c:9a:25:d6:aa:aa:df:ab:b2:8d:
b9:09:74:b1:26:21:b2:86:1e:cb:06:a8:51:0e:c0:ef:18:76:
a2:b4:d5:c5:b6:2c:c0:aa:10:53:cd:cd:8c:58:77:5b:aa:1a:
17:05:d4:18:76:65:93:c5:1d:9b:54:6c:64:ed:1d:8f:dd:1f:
c0:f1:cc:ca:51:48:39:22:cf:47:5d:c6:77:23:e2:b1:b9:2a:
38:cb:1e:41:0b:ed:59:0f:2e:fb:06:8e:49:2d:b7:f7:71:87:
44:07:65:39:33:e3:37:e7:93:62:f3:85:23:7e:05:f2:c3:9a:
87:25:8d:da:28:70:68:e8:e6:6b:14:93:d2:b0:ff:b5:85:3e:
57:b1:56:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org