Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hM3rqzakiNh78Q3q7HEX_QNiUu8.roa
File: hM3rqzakiNh78Q3q7HEX_QNiUu8.roa (raw, json)
Hash identifier: Sv1lM+r0/T/8+1lJnwhqpiwjf/WAnQL9EGb0nyOT28g=
Subject key identifier: 84:CD:EB:AB:36:A4:88:D8:7B:F1:0D:EA:EC:71:17:FD:03:62:52:EF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01901339344AFA1718F6B464DFEB8C317358
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hM3rqzakiNh78Q3q7HEX_QNiUu8.roa
Signing time: Thu 13 Jun 2024 20:10:34 +0000
ROA not before: Thu 13 Jun 2024 20:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Jun 2024 21:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:13:39:34:4a:fa:17:18:f6:b4:64:df:eb:8c:31:73:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 13 20:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84cdebab36a488d87bf10deaec7117fd036252ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:e9:81:3e:ca:85:73:a0:ab:e5:41:4d:55:
7a:cb:bd:64:93:43:d7:b1:48:78:84:af:34:8a:cc:
db:30:d1:cc:29:10:cc:06:03:9c:e8:07:68:91:f5:
ac:b1:3a:6b:60:83:1d:05:0a:a1:93:a6:81:30:20:
67:c9:10:8d:ce:e5:dd:5b:4f:e6:e3:b0:4f:00:2d:
50:38:cd:1e:61:7d:71:54:19:b5:49:49:7b:58:63:
dc:56:20:f5:80:92:e1:70:b0:4e:3b:82:17:e4:7b:
32:71:ae:79:b9:e6:24:d0:f9:3b:1a:46:13:fc:2d:
9e:bb:2b:59:52:b4:c3:a3:8f:f0:e5:fa:ce:41:1a:
59:8d:bd:4f:f9:63:71:b6:35:35:c5:8b:cb:fb:3b:
35:38:e9:82:65:31:ea:0a:22:99:fb:a9:38:fb:b9:
4b:37:55:eb:9f:1c:92:ff:fb:1d:52:78:a3:69:cb:
0f:8b:5b:fb:b1:47:25:e1:d9:e6:64:d5:19:0d:12:
96:68:65:0d:c1:78:82:1d:6e:d9:a3:4f:25:8e:b8:
e0:64:54:c5:c4:c1:6a:24:29:ce:cb:3b:63:38:bd:
d4:f4:1e:2d:ba:ed:79:97:be:47:73:67:0c:34:3a:
a0:b1:22:ee:c4:78:91:6d:05:7f:2d:a7:c1:de:5e:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CD:EB:AB:36:A4:88:D8:7B:F1:0D:EA:EC:71:17:FD:03:62:52:EF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hM3rqzakiNh78Q3q7HEX_QNiUu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:68:2b:7a:71:1a:dc:04:f2:42:ad:da:58:e0:0c:ef:b7:55:
f3:c6:66:04:87:76:0e:7c:4b:75:ae:89:40:af:36:aa:61:1a:
e1:aa:ff:3a:93:ff:af:c5:a5:3c:b1:58:6f:31:49:04:80:e8:
6d:5f:fe:6c:64:16:76:4d:1a:80:af:78:d8:a8:f0:12:08:27:
cf:ff:3d:fe:eb:a1:d4:24:4e:67:fb:ef:3e:a7:8b:46:1a:98:
71:c9:df:5a:5b:17:89:4a:c9:de:fa:03:57:dd:b0:be:a7:be:
84:b0:5d:c1:16:f5:07:32:ae:a3:6c:af:97:96:46:3f:9a:1e:
7e:fd:58:44:0f:c0:20:55:30:f8:bb:39:40:cf:a6:f0:87:ec:
3e:db:8c:a1:40:15:54:73:98:2a:63:64:69:56:bd:bc:82:89:
93:87:3a:56:77:a8:c2:8d:69:a8:73:bc:42:5b:cc:5a:fd:1a:
00:27:b8:0d:f0:15:d2:f2:c9:a7:55:8c:49:39:72:b0:f8:83:
21:e7:f4:a1:fa:63:59:ac:f2:e4:37:ac:3d:81:ad:65:f4:1f:
14:ac:03:1d:bd:fd:45:75:98:12:13:f3:1a:cf:3e:cb:87:2a:
89:0b:92:df:c7:9e:60:bc:d4:86:a2:f7:9e:8c:7f:b5:37:2d:
3a:38:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 23:45:04 2024 by rpki-client on console-fra.rpki-client.org