Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/e5on-ko3h-9_CIlFvlBhx9ccykg.roa
File: e5on-ko3h-9_CIlFvlBhx9ccykg.roa (raw, json)
Hash identifier: 6gBqmY0u+kwuZuf5OLzc3vvBNzrA8pc6CCdyHbcDbp4=
Subject key identifier: 7B:9A:27:FA:4A:37:87:EF:7F:08:89:45:BE:50:61:C7:D7:1C:CA:48
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190611B5117BB8B3EA912E0363804FF6E15
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/e5on-ko3h-9_CIlFvlBhx9ccykg.roa
Signing time: Fri 28 Jun 2024 23:08:18 +0000
ROA not before: Fri 28 Jun 2024 23:08:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 29 Jun 2024 00:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:61:1b:51:17:bb:8b:3e:a9:12:e0:36:38:04:ff:6e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 28 23:08:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b9a27fa4a3787ef7f088945be5061c7d71cca48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:d3:eb:e4:60:c4:8b:d9:55:2a:87:65:25:
58:c3:75:a9:7b:51:ec:c1:14:8f:4c:a3:8e:13:d5:
3d:c8:ba:fe:5e:8c:48:88:64:c5:8c:7b:1b:77:88:
21:a1:ce:24:99:77:04:d8:ac:cc:5c:c5:bf:c0:40:
4d:35:cd:f9:e7:ea:20:58:48:3b:f9:bd:14:04:ce:
41:16:c2:45:32:cf:c2:18:29:70:98:7a:77:f9:54:
5c:7b:de:03:ff:d8:30:33:5c:a2:aa:86:d9:e0:0c:
58:a6:1b:cd:ef:e8:44:f2:99:34:b3:ce:82:5f:c9:
0b:2f:fe:03:bf:77:bc:6f:d4:c9:a0:d6:d3:46:f8:
5b:f2:84:7a:53:f4:b9:86:2d:8f:c8:b5:6e:48:62:
dc:4e:ca:a3:c7:c0:95:a2:34:f8:db:f4:23:e7:a1:
ec:db:cd:0b:bf:4b:a4:01:48:12:b8:80:21:b5:f0:
70:0b:36:3d:11:74:6b:71:27:05:0d:84:ab:be:ca:
cc:23:1f:ff:6c:ba:fe:5e:2e:06:bd:c0:71:16:94:
0b:1b:01:94:3e:3b:3f:4e:29:03:4f:05:40:33:c4:
88:83:33:4f:b6:b2:e0:12:6e:fd:02:82:51:58:4f:
6f:25:5e:73:4b:52:e0:d6:72:f7:c4:dc:45:38:68:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9A:27:FA:4A:37:87:EF:7F:08:89:45:BE:50:61:C7:D7:1C:CA:48
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/e5on-ko3h-9_CIlFvlBhx9ccykg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:37:a9:05:32:c1:23:29:16:9f:b4:e0:fb:ee:f1:11:06:70:
06:31:42:e3:99:6c:0b:38:82:5d:35:b1:4b:1e:61:a3:ff:50:
42:df:0b:b8:c4:22:61:43:46:e6:f0:63:0c:58:3d:06:b7:8d:
bd:26:ec:ce:d3:32:84:b4:04:f0:eb:35:8d:fa:03:27:a6:bf:
fb:69:a1:e5:5d:4d:57:5a:34:c4:e4:d8:6c:54:37:82:45:fe:
3c:fb:03:28:06:47:84:f8:c9:3b:6c:e1:c3:03:bb:74:a4:6f:
0f:78:3d:c2:38:02:65:0f:3c:17:a1:21:1b:9d:f6:e2:78:16:
0e:39:ae:df:ec:a9:8b:66:7f:da:58:9c:55:b3:05:28:f5:59:
91:fd:5a:89:4b:e1:15:1c:71:9e:a0:9a:fe:13:84:f9:80:eb:
11:dc:9d:20:f6:50:12:2c:e3:ef:d7:ce:ca:2d:ad:a2:5c:9d:
3f:2a:f2:5a:25:2e:fb:e7:6d:4e:27:27:af:91:bb:29:1c:19:
8f:69:57:2e:67:c5:5e:f4:ef:f5:66:a8:11:54:c7:2d:43:31:
1d:4e:eb:be:98:20:d6:e6:33:6d:74:f7:6f:08:78:d6:57:66:
59:49:a9:e5:bb:56:4c:f3:f2:5e:43:59:d7:1c:bb:f0:9c:41:
d4:82:45:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:06:14 2024 by rpki-client on console-ams.rpki-client.org