Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/e3hfQDC4UN9OId1k31jHuZw_Exk.roa
File: e3hfQDC4UN9OId1k31jHuZw_Exk.roa (raw, json)
Hash identifier: ZMh/v6IinwUij0DXHRZyKQCmR1BG4cqHXNTnzOKt34U=
Subject key identifier: 7B:78:5F:40:30:B8:50:DF:4E:21:DD:64:DF:58:C7:B9:9C:3F:13:19
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FD536C6FE139A8541DF9379DA611CFE98
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/e3hfQDC4UN9OId1k31jHuZw_Exk.roa
Signing time: Sat 01 Jun 2024 19:11:27 +0000
ROA not before: Sat 01 Jun 2024 19:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jun 2024 20:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d5:36:c6:fe:13:9a:85:41:df:93:79:da:61:1c:fe:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 1 19:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b785f4030b850df4e21dd64df58c7b99c3f1319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:6d:7e:3b:c7:5c:79:62:59:82:fa:e2:04:
f2:59:9e:e0:17:e6:4f:80:42:eb:31:d4:48:5a:24:
3e:8c:0a:aa:e1:10:db:3d:1a:42:94:6a:44:30:a3:
ab:dd:0d:f0:5d:7c:f1:93:02:36:e4:2a:1f:5c:00:
bf:9b:12:42:fc:94:24:6c:57:7c:a7:55:10:2a:64:
cb:25:bf:73:6d:0d:b8:f1:2b:18:cb:15:0e:dd:24:
fa:3c:88:5d:07:1a:6e:94:89:9d:30:fc:9b:98:49:
c1:78:1b:13:30:69:35:fb:cc:9d:2b:d4:53:be:a0:
d0:61:eb:ee:b5:87:00:80:e5:e7:b6:94:16:53:8a:
29:c6:b7:fb:fd:17:4f:dc:b6:29:a4:5b:e6:af:59:
61:d6:75:c6:0e:e5:ee:65:e2:22:f6:74:44:b3:86:
0c:7a:34:1f:3a:99:e2:3a:9a:9c:3a:f4:90:88:04:
ac:f2:a5:4c:b7:57:6c:e3:60:77:ed:5e:b1:a2:8a:
d3:34:88:1e:cb:f0:a4:22:8b:1e:74:af:e6:05:73:
9d:e8:ad:0d:40:a3:22:0f:7c:4c:a5:83:a2:86:fc:
41:0d:2a:c8:1e:8c:04:8e:13:36:3b:e7:7e:52:a7:
7e:02:cd:b6:b4:a2:01:36:be:bb:e4:1c:27:80:24:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:78:5F:40:30:B8:50:DF:4E:21:DD:64:DF:58:C7:B9:9C:3F:13:19
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/e3hfQDC4UN9OId1k31jHuZw_Exk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:17:97:52:de:5c:a4:b6:63:3d:3d:77:a4:22:fe:ef:14:0c:
8d:31:78:8e:6c:b1:31:18:0a:a8:69:cc:9b:5c:9c:bd:78:8b:
a2:0c:41:e4:45:ae:69:9f:c7:36:7b:6c:2e:b5:c0:07:ab:de:
1b:8f:8d:41:6a:f6:e8:2c:3b:dd:88:e8:84:a5:d3:ba:90:fd:
a3:08:84:16:d9:a3:79:07:89:29:86:7e:a2:b6:96:e3:b3:08:
8f:5b:91:ff:f5:1d:0c:55:0c:61:b3:6c:23:10:96:d8:7e:85:
7f:10:23:27:d4:ac:a0:4c:d5:4b:58:7e:88:c7:de:82:ca:2f:
91:fc:aa:dc:98:e9:1f:06:21:55:88:f6:91:6d:51:8e:85:7e:
23:9a:fc:a9:bc:a2:21:70:18:f9:58:37:9d:af:4b:61:c1:56:
d3:d8:19:50:ce:a0:4d:3c:45:67:24:40:88:90:c8:79:de:bd:
5d:c7:49:aa:1b:7b:a8:db:00:37:e2:f6:ed:94:e6:a2:eb:0c:
ac:21:7b:af:07:6c:73:7e:b1:be:71:20:dc:fa:3c:68:2d:95:
26:d1:82:b2:34:61:65:b0:d8:ba:31:c8:91:13:fa:3e:cc:54:
89:65:76:ce:e4:5e:36:02:31:30:c1:54:70:e9:94:aa:b0:fa:
fd:87:5b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org