Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/acJ-t5j_UVXm2DYmCKK3xcJMRiQ.roa
File: acJ-t5j_UVXm2DYmCKK3xcJMRiQ.roa (raw, json)
Hash identifier: lvkLiTWLirmrLr1nwNz80g557W989QfhedXgUeUeEYE=
Subject key identifier: 69:C2:7E:B7:98:FF:51:55:E6:D8:36:26:08:A2:B7:C5:C2:4C:46:24
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FF6E61FBEC9B99572E4F20DB5B2FD3BF8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/acJ-t5j_UVXm2DYmCKK3xcJMRiQ.roa
Signing time: Sat 08 Jun 2024 08:10:27 +0000
ROA not before: Sat 08 Jun 2024 08:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Jun 2024 09:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f6:e6:1f:be:c9:b9:95:72:e4:f2:0d:b5:b2:fd:3b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 8 08:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69c27eb798ff5155e6d8362608a2b7c5c24c4624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:56:65:24:e3:2a:d0:2d:f5:1d:3d:aa:1f:
1e:da:c2:19:58:7a:28:cb:49:d7:60:b7:de:e4:4b:
be:ca:30:c5:fe:c8:0a:9b:a1:a3:85:5a:d1:a7:50:
5a:b5:ee:31:84:7e:bb:a3:f6:07:33:34:4f:ff:6b:
2f:80:e7:b1:47:45:42:a0:af:a2:dc:30:aa:9c:f5:
be:3c:7c:79:5c:4b:3e:4a:7f:ae:c7:e5:a3:6c:35:
37:fe:13:7c:7b:3d:95:73:0b:fa:e3:06:dc:94:e6:
0c:e5:52:e6:13:bc:f2:31:ec:a1:4b:59:a4:eb:9e:
1d:e5:cf:43:7e:23:3e:db:2b:f1:4e:84:43:ae:7c:
55:a1:ad:ba:d5:3b:c2:b9:60:57:7c:1d:6c:ce:36:
de:51:52:f2:81:62:59:35:0a:27:4b:b2:4c:ff:2d:
9e:10:57:c8:f3:f4:9f:84:c0:7b:7f:69:63:e8:39:
01:5d:a1:f0:37:ff:a8:08:6b:c5:71:17:b9:33:82:
73:38:2f:49:ab:7a:b4:96:86:46:4e:0a:ce:fe:89:
4d:25:9b:34:6a:f8:b1:9b:58:a0:89:77:85:3e:06:
6d:5e:c5:90:95:c7:e3:36:d9:b7:57:f2:96:37:3c:
a2:93:4a:07:07:dd:0e:76:ce:2d:e0:41:3e:36:ec:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C2:7E:B7:98:FF:51:55:E6:D8:36:26:08:A2:B7:C5:C2:4C:46:24
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/acJ-t5j_UVXm2DYmCKK3xcJMRiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:5d:fe:ed:1d:e2:1f:3c:70:3a:f1:a2:fa:64:7a:c3:db:c5:
c2:c6:92:ce:39:30:fa:e1:59:73:e7:49:d9:1f:c5:29:58:41:
01:cd:90:1f:bb:d6:b3:fe:20:80:82:5c:5f:44:35:09:02:6b:
a4:24:6f:69:5f:f3:77:07:d5:d3:02:30:91:89:6f:54:c8:6f:
d9:c2:25:c3:2c:68:0a:a6:50:36:9f:af:c1:76:1c:98:c8:5f:
e1:dc:be:71:1c:60:45:14:ef:8c:2f:7f:7e:ec:d2:26:4f:1c:
1d:de:82:29:05:c7:af:d2:5c:15:4a:2a:6b:53:61:76:82:35:
e5:9a:7b:38:5b:bd:7c:36:fa:f5:52:62:09:bb:aa:82:ed:f4:
83:55:e0:05:7b:e9:c7:ef:81:ab:99:87:10:b8:60:bb:56:3c:
5f:78:53:57:ad:69:12:7a:87:cb:3b:34:a1:cc:3c:b8:07:f3:
1c:fa:60:0f:65:6f:e7:c3:92:ae:57:63:8b:6c:26:4d:47:35:
b9:95:b7:4c:c3:84:cc:96:9b:19:02:c8:08:58:d1:0c:ec:4e:
22:f6:cd:ca:a0:29:56:4a:59:17:e1:f4:be:20:8b:8c:e0:a6:
f1:5a:ad:d3:70:9a:34:4e:16:ad:5a:d5:19:76:32:d5:58:26:
7f:2a:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:51:19 2024 by rpki-client on console-ams.rpki-client.org