Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Wr-h7AZmf8WdoPRz0KfwcaBfqPw.roa
File: Wr-h7AZmf8WdoPRz0KfwcaBfqPw.roa (raw, json)
Hash identifier: IShDgYM5ISV1nJfcIgP8hoq6/pOsxHX/B7a9Xrs1vEA=
Subject key identifier: 5A:BF:A1:EC:06:66:7F:C5:9D:A0:F4:73:D0:A7:F0:71:A0:5F:A8:FC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01901AB65164FF630F0D1522006B7820B0F4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Wr-h7AZmf8WdoPRz0KfwcaBfqPw.roa
Signing time: Sat 15 Jun 2024 07:04:34 +0000
ROA not before: Sat 15 Jun 2024 07:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:1ab5:f5a6/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 15 Jun 2024 07:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1a:b6:51:64:ff:63:0f:0d:15:22:00:6b:78:20:b0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 15 07:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5abfa1ec06667fc59da0f473d0a7f071a05fa8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:a1:4a:cf:72:ad:87:59:54:82:e8:63:58:
a8:03:3a:0a:fc:6a:42:ac:ae:47:bd:17:07:01:ff:
4e:14:b9:c6:0e:12:89:67:8a:41:06:62:6f:5f:c8:
39:1b:6a:af:82:4b:16:3f:de:61:63:23:b0:9e:bf:
c2:a8:a5:f1:38:9a:6c:5d:72:20:4f:d9:28:3d:be:
a9:2c:3a:33:87:10:4d:d4:9f:3d:0c:ca:3e:bb:bb:
d9:9a:5b:88:8c:4c:76:1f:db:41:92:93:19:e4:51:
ab:ef:a4:0b:c1:87:b0:08:fd:c2:bc:d7:d6:d4:16:
bd:eb:a5:2e:43:61:8c:45:94:67:b1:b0:dc:70:1f:
ab:ad:35:66:09:d0:0d:88:4d:7c:cd:75:65:aa:5d:
01:3f:88:a1:63:0f:df:57:cc:79:b4:23:7b:a8:69:
67:6f:d3:87:f9:64:46:98:26:56:a0:cf:a6:0b:fb:
03:71:21:13:66:e1:f4:04:36:17:f7:94:6e:d2:d5:
10:dc:d1:6d:02:01:e0:a1:1b:0d:76:52:42:77:87:
c7:46:06:f1:13:c7:95:67:a1:2d:a6:ff:26:2d:a7:
bd:9b:42:f6:04:27:81:bf:22:fd:1f:20:a6:2b:f1:
3a:a4:d6:40:4e:d3:98:cb:d2:b3:53:ab:38:92:93:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BF:A1:EC:06:66:7F:C5:9D:A0:F4:73:D0:A7:F0:71:A0:5F:A8:FC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Wr-h7AZmf8WdoPRz0KfwcaBfqPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:07:79:cb:6a:92:9c:7e:15:30:d2:ae:96:59:59:cb:f5:4e:
32:b5:e2:df:5f:92:4b:82:d2:9a:9c:f0:64:03:e5:3d:cb:cc:
fb:54:98:e8:42:8c:e8:a3:aa:b0:8a:27:ca:29:31:96:f9:78:
57:e5:c9:2a:28:49:ac:41:ac:c9:1d:77:3d:d2:33:41:cf:0c:
f3:26:fc:0e:35:b0:87:cb:92:50:c1:20:1a:4d:22:86:20:79:
db:c4:39:2e:34:45:4a:9e:f3:49:b0:df:63:0a:e1:bd:c3:82:
3b:23:5e:11:55:b0:c0:0f:2c:e9:a5:b0:32:1e:c2:16:21:a4:
2a:db:4d:eb:13:b2:3d:8d:12:e0:39:f9:c7:7f:ac:7a:68:e7:
f7:33:6a:bf:10:fa:2a:d6:b9:1d:f1:d3:db:ec:f9:bf:42:b2:
03:4d:1b:2d:51:57:2b:92:fb:88:96:cd:51:ef:bc:c9:49:51:
f0:bb:83:5d:dc:b6:98:d8:b1:a7:47:be:a9:18:3f:8f:9f:df:
7c:07:42:02:1b:94:9c:a5:87:66:bf:ff:aa:7c:42:71:35:25:
c3:ef:57:16:2e:d1:be:d8:51:96:32:a6:60:67:52:3d:90:dd:
13:02:33:fd:a2:46:75:8e:a4:1d:80:d9:87:9c:1e:dc:b6:17:
70:05:75:38
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 15 08:17:56 2024 by rpki-client on console-fra.rpki-client.org