Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dQyOXybnnsKwhjeK2m41GATjGn8.roa
File: dQyOXybnnsKwhjeK2m41GATjGn8.roa (raw, json)
Hash identifier: JBOlpfdRLw/8PNL1vO1tWlKO93EF5EMxc+mwiFXDCuw=
Subject key identifier: 75:0C:8E:5F:26:E7:9E:C2:B0:86:37:8A:DA:6E:35:18:04:E3:1A:7F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FED0830B20DA872754DA28CD91B7CA038
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dQyOXybnnsKwhjeK2m41GATjGn8.roa
Signing time: Thu 06 Jun 2024 10:11:27 +0000
ROA not before: Thu 06 Jun 2024 10:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 11:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:08:30:b2:0d:a8:72:75:4d:a2:8c:d9:1b:7c:a0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 6 10:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=750c8e5f26e79ec2b086378ada6e351804e31a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:18:51:a7:66:c9:f4:b9:a2:88:d5:18:1b:
80:85:91:fc:8e:ed:26:ba:b0:45:65:14:4c:a1:90:
54:2d:e1:4f:6a:a6:b0:f9:b0:71:44:75:94:5f:08:
97:fc:5e:47:a6:2f:99:e2:7a:f5:f4:fd:de:f9:de:
11:7c:08:39:fd:9a:a9:19:79:fc:c5:70:d3:a6:4d:
49:bf:db:69:14:ad:e8:15:3d:09:83:af:73:e9:cd:
5b:98:f4:3d:1a:4c:b4:06:7b:ba:28:70:46:31:ad:
33:b5:cc:14:81:b0:a5:cf:9e:45:c6:e2:67:2a:b4:
92:a3:52:40:a8:47:8d:87:ff:a0:29:2d:9b:ad:97:
94:88:45:8a:7d:1a:84:01:c7:e9:86:f7:53:f2:97:
ec:49:36:c2:73:64:50:f5:cc:32:7b:bb:16:77:50:
6d:81:99:fb:c9:c9:b1:ce:0f:62:24:9b:0e:d0:82:
03:15:5f:02:cb:ae:6e:ad:7a:f2:40:57:df:0e:50:
3b:89:1b:29:62:61:30:fe:9d:0c:bd:0f:53:f8:a6:
e7:f1:ad:62:97:ad:d1:0e:05:24:46:52:8c:15:d9:
17:a0:3a:d7:4f:21:ea:1f:ba:8c:31:d8:32:6b:12:
99:5a:4a:dc:05:f3:db:c4:3e:81:28:83:ac:fe:94:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0C:8E:5F:26:E7:9E:C2:B0:86:37:8A:DA:6E:35:18:04:E3:1A:7F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/dQyOXybnnsKwhjeK2m41GATjGn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:2d:04:b8:cc:05:9f:d4:42:b5:5f:82:ea:3e:8b:d6:65:42:
29:7a:d7:97:59:40:f8:87:ec:20:4c:a5:df:94:34:56:b5:e4:
a1:46:ef:b7:06:ed:fc:11:aa:1b:03:68:57:4c:c0:18:df:34:
42:c9:93:df:f0:67:9c:ce:3e:7e:96:1c:ce:13:ad:fd:d1:93:
2e:ca:81:46:19:ed:2a:5d:57:49:24:6a:de:11:83:f0:53:b0:
22:47:86:f2:b7:37:2b:42:a2:51:23:46:70:f1:a1:cd:f2:30:
bb:6f:00:91:72:dd:22:0e:7c:bc:67:ac:30:f7:18:63:1c:8d:
84:75:25:3b:4d:a7:b2:b3:d5:68:e5:31:d2:6c:08:cb:82:21:
38:54:5c:42:b3:78:6a:bc:37:cc:c0:03:58:86:5a:14:94:50:
9a:6c:f3:15:7e:44:40:cf:81:53:3f:b8:8c:a8:9e:d6:01:12:
33:a1:9d:7e:84:26:88:1a:41:5e:66:a5:f9:9c:b7:81:35:91:
bb:2a:aa:78:65:c4:cd:79:7c:38:eb:80:61:d6:0e:b2:28:51:
36:87:e7:ef:1d:7e:37:a1:6c:12:60:02:21:e3:b9:44:5b:51:
2d:23:5e:64:11:50:ff:2c:9d:b7:78:b4:66:56:48:90:23:39:
65:c4:05:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org