Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dEtr2WwWKZeCsIVal853FyIxYu8.roa
File: dEtr2WwWKZeCsIVal853FyIxYu8.roa (raw, json)
Hash identifier: mF1YvhMUmDovfSqJtFVXoY0ZX4uzSOP8Zr8nSEj4f84=
Subject key identifier: 74:4B:6B:D9:6C:16:29:97:82:B0:85:5A:97:CE:77:17:22:31:62:EF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190671E515E7E9C22D8D3C0AB2570BD4E2D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dEtr2WwWKZeCsIVal853FyIxYu8.roa
Signing time: Sun 30 Jun 2024 03:09:18 +0000
ROA not before: Sun 30 Jun 2024 03:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 30 Jun 2024 04:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:67:1e:51:5e:7e:9c:22:d8:d3:c0:ab:25:70:bd:4e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 30 03:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=744b6bd96c16299782b0855a97ce7717223162ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:27:c6:22:d1:ba:8a:08:71:de:16:47:21:
28:1a:43:2c:3a:28:91:ba:aa:23:a6:66:a8:8c:b1:
b1:69:26:73:f3:5b:aa:3a:7a:05:bb:28:e3:96:a5:
be:bb:d1:be:5d:c7:79:89:8b:b6:d3:1c:af:a1:b1:
62:33:8f:88:ac:40:28:45:46:61:92:1a:9a:0d:ed:
bb:6c:97:16:3b:f8:4a:5d:1c:8b:21:35:63:de:c2:
40:c6:98:17:22:8f:2a:85:b0:a7:83:7d:07:3f:87:
e1:84:6a:0b:cb:ab:04:c3:fb:f3:e5:8c:bf:36:c4:
c4:b3:26:97:98:c9:67:4b:74:32:ca:7f:47:a2:70:
90:1d:6a:91:43:9d:a3:97:61:b5:b9:d2:9b:77:a6:
73:22:ad:9e:4a:75:94:09:9d:c9:30:18:c8:32:8e:
63:db:bd:80:ef:3a:fa:b8:7a:c0:84:07:f0:c4:10:
00:d0:45:54:cb:a6:ab:85:07:bb:43:f5:7c:c7:ab:
c6:1f:23:77:d1:3e:88:c8:ed:14:11:d4:48:e6:4d:
be:7c:8e:d2:5d:bd:2d:46:97:99:1e:03:c2:f4:88:
bc:82:ae:94:92:be:5f:00:1b:31:70:13:c3:1e:83:
50:2a:51:41:fa:21:6d:73:3a:20:54:45:c5:fb:9d:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4B:6B:D9:6C:16:29:97:82:B0:85:5A:97:CE:77:17:22:31:62:EF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dEtr2WwWKZeCsIVal853FyIxYu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:b4:4a:c3:be:9c:1a:36:a0:cc:a3:1a:35:23:79:26:9f:41:
9f:f1:85:35:d8:b1:33:df:46:fb:09:ea:60:47:12:5d:45:d1:
b3:ff:08:68:a3:66:3c:99:7c:b3:2b:6d:76:b5:ca:8b:49:2d:
2a:8e:e6:b9:a3:27:5e:c2:ea:fe:00:a0:0a:3a:91:40:a8:23:
b9:8b:be:29:3a:7c:6b:96:b9:d9:4e:03:20:16:90:4e:ca:dd:
fb:e4:e0:e7:ee:8c:11:38:8e:8f:19:89:3a:7a:d4:5a:2b:06:
41:df:83:60:b5:c4:eb:5f:ac:dc:9b:86:e7:f6:85:3e:b8:35:
c6:2b:e3:83:cb:07:ff:14:c5:3e:32:81:29:45:e7:07:04:ec:
c7:6b:c7:27:39:08:4f:f9:bb:87:21:d5:e8:87:12:1c:de:29:
55:a5:fb:64:2d:df:cb:95:f6:34:28:41:06:ac:c6:1b:02:f2:
09:7c:ed:ea:99:d1:a5:12:22:a2:82:44:d0:98:32:89:7c:9a:
99:71:ec:b4:ce:1d:b6:dd:31:41:0c:94:44:7e:43:9b:1d:6c:
ab:3b:4d:f6:d5:05:33:12:05:09:22:56:4d:1e:4c:36:a7:88:
00:56:77:39:20:f6:1f:7b:bb:69:51:ba:ca:bd:97:30:48:bf:
9e:b4:7a:f0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZBnHlFefpwi2NPAqyVwvU4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjMwMDMwOTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDRiNmJkOTZjMTYyOTk3ODJiMDg1NWE5N2NlNzcxNzIyMzE2MmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIAnxiLRuooIcd4WRyEoGkMsOiiR
uqojpmaojLGxaSZz81uqOnoFuyjjlqW+u9G+Xcd5iYu20xyvobFiM4+IrEAoRUZh
khqaDe27bJcWO/hKXRyLITVj3sJAxpgXIo8qhbCng30HP4fhhGoLy6sEw/vz5Yy/
NsTEsyaXmMlnS3Qyyn9HonCQHWqRQ52jl2G1udKbd6ZzIq2eSnWUCZ3JMBjIMo5j
272A7zr6uHrAhAfwxBAA0EVUy6arhQe7Q/V8x6vGHyN30T6IyO0UEdRI5k2+fI7S
Xb0tRpeZHgPC9Ii8gq6Ukr5fABsxcBPDHoNQKlFB+iFtczogVEXF+50rAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHRLa9lsFimXgrCFWpfOdxciMWLvMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvZEV0cjJXd1dLWmVDc0lWYWw4NTNGeUl4WXU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGO0SsO+nBo2oMyjGjUj
eSafQZ/xhTXYsTPfRvsJ6mBHEl1F0bP/CGijZjyZfLMrbXa1yotJLSqO5rmjJ17C
6v4AoAo6kUCoI7mLvik6fGuWudlOAyAWkE7K3fvk4OfujBE4jo8ZiTp61ForBkHf
g2C1xOtfrNybhuf2hT64NcYr44PLB/8UxT4ygSlF5wcE7Mdrxyc5CE/5u4ch1eiH
EhzeKVWl+2Qt38uV9jQoQQasxhsC8gl87eqZ0aUSIqKCRNCYMol8mplx7LTOHbbd
MUEMlER+Q5sdbKs7TfbVBTMSBQkiVk0eTDaniABWdzkg9h97u2lRusq9lzBIv560
evA=
Generated at Sun Jun 30 05:37:14 2024 by rpki-client on console-fra.rpki-client.org