Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eSa3Ut_SwLN8YXHp6PkVf9lQ1ew.roa
File: eSa3Ut_SwLN8YXHp6PkVf9lQ1ew.roa (raw, json)
Hash identifier: aNq6Lj6CE4hstJRnbT7U7DEVzDDRnaiYt2yDjYY45Zk=
Subject key identifier: 79:26:B7:52:DF:D2:C0:B3:7C:61:71:E9:E8:F9:15:7F:D9:50:D5:EC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FFE9EBFDF26081AABAE928BA5B0654695
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eSa3Ut_SwLN8YXHp6PkVf9lQ1ew.roa
Signing time: Sun 09 Jun 2024 20:09:27 +0000
ROA not before: Sun 09 Jun 2024 20:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Jun 2024 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fe:9e:bf:df:26:08:1a:ab:ae:92:8b:a5:b0:65:46:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 9 20:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7926b752dfd2c0b37c6171e9e8f9157fd950d5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:20:bd:9c:b2:5e:55:6f:62:66:67:88:ef:
37:bd:58:56:72:1a:00:25:0c:30:75:de:c8:d4:3d:
f4:b9:25:a3:9c:14:86:32:49:58:cd:5a:64:86:bc:
d8:09:42:86:0a:90:9d:63:5b:16:7a:44:4b:59:ed:
a8:27:fc:22:6d:cb:04:7d:6f:37:1d:0f:b3:fd:1c:
0d:5f:4a:dc:ac:82:84:08:95:cd:33:8f:85:36:fa:
0c:a3:b4:29:4d:5e:92:39:21:59:7c:71:51:54:2f:
64:39:53:4e:c2:e6:70:c5:1b:a6:16:c9:f3:68:8d:
cb:a9:d1:3d:3d:8f:b6:d8:3f:95:e6:a4:2a:12:a2:
bb:8a:78:2e:6e:06:42:f1:78:02:72:ae:2b:ad:6b:
b4:96:24:86:46:8f:00:91:8b:e8:62:76:7d:14:ae:
45:98:c6:75:84:60:3d:ae:6c:d6:40:b6:5d:75:7c:
79:e3:66:26:f9:d9:19:81:1b:33:b9:0e:e6:f7:36:
92:02:cb:7b:51:43:9e:ad:2b:0a:77:c2:71:b8:4a:
87:f3:79:d4:25:5d:46:11:17:b4:bd:a8:5c:07:ae:
47:44:8b:a6:18:83:b6:eb:63:5a:b7:e0:e0:f9:0a:
f8:09:fd:30:97:4b:02:d5:77:e3:55:92:26:f0:8c:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:26:B7:52:DF:D2:C0:B3:7C:61:71:E9:E8:F9:15:7F:D9:50:D5:EC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eSa3Ut_SwLN8YXHp6PkVf9lQ1ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:cb:eb:74:af:30:67:14:bd:60:f7:dd:e3:81:b8:30:7e:48:
72:2e:0e:00:a8:1a:ab:2b:d3:11:b4:e4:71:3b:32:34:dd:98:
90:5b:e8:16:1f:07:cd:9d:3b:20:21:87:42:9c:7b:87:a1:fc:
26:be:28:f9:b3:2a:5f:34:ae:fc:45:a5:7c:c5:db:cc:6b:86:
b0:2d:c0:5e:45:26:78:c1:b8:40:fd:49:0f:02:7a:b5:fd:c5:
03:07:ed:dd:2a:c2:2a:67:46:e5:60:3f:d5:e7:4c:d2:b3:bf:
3d:1b:c6:ed:a2:75:ce:49:7c:f4:88:9f:86:de:56:7a:14:9b:
03:13:73:f8:85:a8:09:51:86:02:15:f1:ed:ec:73:b1:3a:2b:
78:a9:c6:58:94:f8:92:04:f0:d1:c8:68:47:e8:fe:02:df:54:
c2:a9:12:bf:56:dd:73:04:6c:8a:72:37:51:7e:72:69:0d:f6:
02:e2:d7:61:9b:30:ab:58:3d:78:06:46:c3:e9:26:d2:e1:51:
b6:94:66:c8:7d:ca:21:da:4e:b5:39:e4:2d:d3:f8:2c:36:dd:
c2:d8:ca:3f:26:4e:7e:79:9e:34:8f:7c:f1:e2:c1:b5:c9:46:
cf:37:c9:73:75:13:16:59:25:df:1f:76:04:92:e8:78:8b:88:
8e:51:1a:82
-----BEGIN CERTIFICATE-----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Generated at Sun Jun 9 21:55:38 2024 by rpki-client on console-fra.rpki-client.org