Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YO0fONQ4Ot7XyrO-ksVpuKpMO8k.roa
File: YO0fONQ4Ot7XyrO-ksVpuKpMO8k.roa (raw, json)
Hash identifier: 9jBv0MvMxScpXVki9w7kNSPG7x8iMhMFBxkGa6FFvsc=
Subject key identifier: 60:ED:1F:38:D4:38:3A:DE:D7:CA:B3:BE:92:C5:69:B8:AA:4C:3B:C9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FFE68BB69A4CB4E3839B15515293584C7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YO0fONQ4Ot7XyrO-ksVpuKpMO8k.roa
Signing time: Sun 09 Jun 2024 19:10:27 +0000
ROA not before: Sun 09 Jun 2024 19:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Jun 2024 20:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fe:68:bb:69:a4:cb:4e:38:39:b1:55:15:29:35:84:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 9 19:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60ed1f38d4383aded7cab3be92c569b8aa4c3bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:26:6a:af:a1:ea:11:81:34:23:50:1b:26:
4c:df:82:24:9e:78:f3:13:34:dc:7e:f6:30:8c:f9:
39:82:1d:2d:a1:d9:c1:13:80:1a:c9:f1:a9:d9:05:
11:99:3e:4e:ce:bb:e7:a3:f7:cc:41:93:b6:44:e7:
62:87:0f:2c:11:26:f0:5b:2b:79:b3:aa:97:c1:3d:
0c:11:88:bf:b2:e0:31:34:02:b5:74:bd:04:48:43:
f8:bc:cd:f2:42:91:72:1e:51:3b:e4:a4:42:80:18:
6e:f6:30:a1:94:a6:6e:fe:e8:34:89:37:e6:d7:cc:
c1:5b:9d:19:52:1b:a7:1f:30:05:25:e5:dc:98:7a:
da:da:21:35:e7:33:c5:81:b6:e8:dd:72:d6:ba:1e:
e8:1d:d2:c9:00:70:43:7c:e3:df:45:a1:9b:bc:36:
1d:b7:69:b2:d3:f7:c9:1d:c4:37:f1:31:ba:a2:7b:
fd:dc:3e:ee:c5:4e:f3:74:e6:c9:15:ee:e6:33:d0:
78:ab:b2:ae:c2:db:e2:af:2c:dd:b4:a9:53:1b:7a:
b7:e6:a7:0e:e5:ed:30:fd:65:33:33:93:16:6c:9b:
97:df:95:ad:68:1e:83:69:88:20:37:25:51:d7:b0:
12:db:3a:ff:6e:61:2b:59:ae:9f:df:25:e3:f3:39:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:ED:1F:38:D4:38:3A:DE:D7:CA:B3:BE:92:C5:69:B8:AA:4C:3B:C9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YO0fONQ4Ot7XyrO-ksVpuKpMO8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:02:19:b0:ce:c4:4f:e5:34:c9:e0:84:c8:45:85:22:7a:fd:
57:66:fd:f7:fa:b6:63:83:6c:bb:64:25:8b:ee:47:21:88:9d:
af:23:ac:52:31:13:94:58:a7:4f:9d:4b:a4:66:a2:c6:26:ef:
59:cf:ea:39:0e:e5:98:b5:d8:ef:b7:70:dc:c2:c5:aa:61:75:
30:0b:fa:d6:a4:4f:21:1b:89:46:33:e8:df:8f:c6:7c:13:15:
af:d0:db:21:19:f4:88:32:e0:89:0a:9c:e2:90:a3:36:f8:f4:
f9:6c:cc:2d:3f:31:01:a3:5e:c3:76:94:ef:b8:1e:a7:7b:ac:
8a:15:50:22:db:1d:c3:37:0d:7c:d6:2e:5b:af:e4:62:50:f4:
31:1b:be:9c:7c:a6:ef:e1:c4:e8:08:5f:3a:43:e4:ab:4d:28:
d8:c8:76:c1:d3:d7:11:03:69:b3:bb:08:42:59:d3:32:ec:29:
dd:c8:0e:0f:16:50:18:38:8e:8a:33:b1:a6:fc:d4:e1:eb:9b:
bd:a1:5b:b7:22:99:0f:b9:2a:6d:c0:02:8e:8a:26:c3:75:c2:
4f:71:27:5d:71:86:22:37:e0:b8:d6:9e:ae:7c:ee:a8:ff:88:
b3:b0:12:e1:20:3f:3a:25:e6:28:79:d5:ea:0f:a9:3c:0a:fe:
ee:c8:b8:21
-----BEGIN CERTIFICATE-----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Generated at Sun Jun 9 20:36:25 2024 by rpki-client on console-fra.rpki-client.org