Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eeNGRA4LfpbszWY6FscqsjtBM0s.roa
File: eeNGRA4LfpbszWY6FscqsjtBM0s.roa (raw, json)
Hash identifier: /D4bw72oyElb5GpcnsADFnxOHLSAAx3ibOtZUEzDkqA=
Subject key identifier: 79:E3:46:44:0E:0B:7E:96:EC:CD:66:3A:16:C7:2A:B2:3B:41:33:4B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FFC427FF05464E954E0FD4F16745FE13B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eeNGRA4LfpbszWY6FscqsjtBM0s.roa
Signing time: Sun 09 Jun 2024 09:09:27 +0000
ROA not before: Sun 09 Jun 2024 09:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Jun 2024 10:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fc:42:7f:f0:54:64:e9:54:e0:fd:4f:16:74:5f:e1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 9 09:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79e346440e0b7e96eccd663a16c72ab23b41334b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6e:4e:82:50:aa:0f:9d:87:7e:44:77:a1:77:
76:0d:c0:6c:ad:71:57:cc:5a:54:3d:77:5e:a8:d2:
f0:da:c9:73:d5:a2:75:bf:35:d2:99:aa:d0:5d:67:
d3:8b:38:e0:9b:ce:db:cf:a9:11:eb:28:b5:73:bf:
77:d3:ae:79:8d:23:aa:ae:3c:1b:18:56:65:89:b7:
7d:f9:15:7f:67:7f:c0:48:ff:03:7b:f7:00:5e:77:
33:35:75:a1:07:e1:db:43:32:3b:e3:45:81:1b:6a:
f6:68:1c:b3:09:20:03:af:39:ca:61:ff:3b:04:a9:
60:99:bb:86:b6:54:7c:ef:00:fa:09:24:cf:47:f0:
8d:74:30:41:c9:d5:67:d9:7d:d5:40:7b:8d:b4:d5:
57:d4:ec:26:44:61:86:af:59:19:23:ee:cd:4f:8d:
20:1e:68:28:80:e9:79:87:14:fa:32:cf:01:57:a1:
39:40:4a:96:00:55:46:68:d1:93:a2:2b:8d:b4:a1:
2a:83:62:34:84:f3:6c:5d:b2:0f:7e:76:c8:48:f5:
2b:23:60:0e:6a:ab:4d:97:55:9e:b8:74:af:70:cd:
06:57:5e:fa:69:37:f7:b9:77:3a:00:a9:25:48:be:
36:b0:b2:40:3a:47:ae:c0:7f:c4:b5:1f:bd:40:22:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E3:46:44:0E:0B:7E:96:EC:CD:66:3A:16:C7:2A:B2:3B:41:33:4B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eeNGRA4LfpbszWY6FscqsjtBM0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:da:28:f4:ac:2c:a9:42:6b:1b:a1:bd:3e:3a:29:39:a4:bb:
fc:bb:50:11:7d:4b:3e:f0:54:8a:51:06:55:5d:a3:ed:2e:ed:
6a:40:53:fe:5e:b8:ad:1b:63:84:8c:d2:a7:a3:6b:85:e6:01:
da:f0:a4:32:37:27:95:99:bb:50:63:3f:e7:f6:e3:63:ee:cd:
4f:4c:64:37:7c:e2:23:b3:92:2e:9f:65:00:22:45:e4:c3:02:
9e:ee:24:7c:02:04:5d:7f:b9:9d:70:9f:92:b6:c1:6c:96:19:
63:cd:74:aa:9a:d3:35:48:70:a4:8f:a8:a3:2f:df:39:d8:3c:
48:50:f4:c2:79:10:57:2a:e6:b4:42:15:6d:54:0d:e9:87:24:
68:5e:66:d9:5f:54:8e:5c:b5:56:61:50:e2:de:1d:26:2b:32:
50:5c:72:67:58:9e:50:5f:b1:5c:43:9a:32:4d:5b:0a:d4:e1:
6a:af:0e:2b:94:1c:7f:4c:c1:82:38:80:e1:c2:2f:a1:c3:25:
b7:de:3b:76:8f:5d:15:25:69:07:16:c8:44:f5:c4:82:63:ad:
4f:d6:da:74:16:a3:0c:81:d5:d2:ab:71:c7:48:a6:0a:68:ea:
ee:4d:99:21:38:8c:3e:46:ed:18:2f:60:10:21:93:f3:86:10:
52:3e:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 12:04:29 2024 by rpki-client on console-fra.rpki-client.org