Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dLSpt0hrNvQpukRnVAM30608n20.roa
File: dLSpt0hrNvQpukRnVAM30608n20.roa (raw, json)
Hash identifier: DChBWpQTt1sa2WsN1/pYC4yNjTkdUsOqyj1UiU+Js1Q=
Subject key identifier: 74:B4:A9:B7:48:6B:36:F4:29:BA:44:67:54:03:37:D3:AD:3C:9F:6D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FEB19CCBD1BB9F3212C37A62075B81B67
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dLSpt0hrNvQpukRnVAM30608n20.roa
Signing time: Thu 06 Jun 2024 01:11:27 +0000
ROA not before: Thu 06 Jun 2024 01:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 02:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:eb:19:cc:bd:1b:b9:f3:21:2c:37:a6:20:75:b8:1b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 6 01:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74b4a9b7486b36f429ba4467540337d3ad3c9f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:32:4c:69:5f:b0:fe:7b:a5:3f:7c:ca:0b:3c:
e0:64:d8:66:b0:ae:76:e0:51:6f:0a:1f:d4:65:34:
95:95:19:3f:29:98:e2:65:c3:5c:e8:04:56:f8:a6:
61:f0:18:2d:98:c8:7f:91:a2:06:a4:15:23:33:8a:
17:c4:46:18:49:f5:37:be:0e:2c:88:56:29:8c:35:
a5:b6:9c:0d:08:dd:35:93:3f:f1:20:7a:d1:f4:cc:
1b:46:32:55:de:c9:74:5d:cf:d7:d0:2b:9e:61:28:
14:99:26:b5:64:4d:91:fa:16:fb:d2:5d:20:13:f1:
e2:cb:16:85:5a:bd:63:bc:88:ae:2f:6c:93:4f:25:
80:1d:e2:ec:fa:30:98:70:a1:15:ab:e6:0f:93:1f:
c9:64:29:e4:40:82:29:76:66:fb:cd:b3:33:a1:84:
ce:d1:df:16:5b:61:04:49:82:16:c2:21:10:55:34:
cc:ee:cc:f8:6d:21:70:c5:03:92:1b:e6:05:a3:9e:
3b:90:82:b3:f9:31:1e:47:11:b0:77:93:60:12:55:
42:c1:60:4e:a7:02:d3:38:2e:bf:71:ef:39:8d:5c:
01:ee:0b:5a:2a:2f:19:2a:10:8c:bb:5c:08:3c:0f:
32:b8:16:45:3a:5e:98:3d:42:1d:5c:16:df:1c:23:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B4:A9:B7:48:6B:36:F4:29:BA:44:67:54:03:37:D3:AD:3C:9F:6D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dLSpt0hrNvQpukRnVAM30608n20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:5d:54:87:d9:25:7d:8f:53:a7:57:6e:3f:ca:27:db:15:b3:
95:8c:7d:75:5d:33:ac:e5:3c:13:eb:8d:0f:13:e4:c6:f6:f6:
9b:11:e0:c6:1f:74:8e:11:33:8c:a3:3d:1a:1b:ef:15:3c:dc:
52:58:2a:7d:05:fe:a3:1b:9b:99:3c:7f:46:9b:70:40:91:72:
d8:dd:be:00:12:69:4c:43:87:d4:a0:50:2a:99:69:0a:21:09:
4f:ba:6f:81:18:cc:44:ca:f9:86:34:b3:96:bf:41:73:e8:a0:
97:9f:35:15:5c:d2:21:1f:38:d6:df:cb:cd:56:2a:f0:0f:23:
4b:83:30:ba:73:14:ff:fd:8d:c3:5c:5e:99:e2:b1:54:fa:cc:
d7:cf:34:bc:44:b0:7e:65:ae:81:d1:04:6e:3a:d3:3b:26:6f:
62:26:bb:49:dd:2c:af:7f:b4:14:f3:cf:e2:3c:a6:74:3e:5c:
3f:96:c0:aa:2e:fa:c4:75:d0:65:8c:af:b6:f7:d6:89:03:5a:
39:df:ec:b0:19:6c:78:e4:b8:77:08:8a:f0:01:4c:a8:db:2f:
b2:69:b3:14:63:7f:91:d4:30:bb:6d:a0:37:33:cf:9d:26:76:
29:6f:9c:90:9d:e9:93:13:6b:10:ea:ab:a8:b2:b8:4d:af:e9:
84:f3:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org