Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hSNZhvqbWzE8H8V3xOuXGvyrqxg.roa
File: hSNZhvqbWzE8H8V3xOuXGvyrqxg.roa (raw, json)
Hash identifier: ScRIzh1hVg0hFrbEryaOh+gOqWKAPLutPHlYrPIEMaE=
Subject key identifier: 85:23:59:86:FA:9B:5B:31:3C:1F:C5:77:C4:EB:97:1A:FC:AB:AB:18
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FEDE3E9AD958A68166E2D543BFDC9774B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hSNZhvqbWzE8H8V3xOuXGvyrqxg.roa
Signing time: Thu 06 Jun 2024 14:11:27 +0000
ROA not before: Thu 06 Jun 2024 14:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 15:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:e3:e9:ad:95:8a:68:16:6e:2d:54:3b:fd:c9:77:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 6 14:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85235986fa9b5b313c1fc577c4eb971afcabab18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:dd:77:ce:8c:53:fa:8f:58:c0:c2:91:b6:
bb:fa:b1:d2:fc:94:b2:fb:32:93:d9:e9:12:2c:20:
cc:23:a4:3c:14:a3:ca:6c:e4:48:a9:85:9d:15:3c:
53:07:f1:09:5d:dd:ec:b8:83:dc:59:32:26:e2:4e:
2d:15:59:70:9d:d7:7f:d5:0f:8b:35:af:3c:42:57:
a9:02:62:11:dc:7a:6f:8b:01:c3:f1:ed:68:c0:0a:
11:1c:44:db:dd:70:1d:b0:c6:00:6e:50:82:47:4e:
91:df:fa:ad:86:03:2c:cf:f9:f6:1e:4c:16:a8:97:
a7:39:33:69:9b:78:fe:ec:9c:67:94:00:0e:70:2d:
b6:9c:d5:35:53:f2:f3:03:84:85:18:1d:84:5f:ee:
df:45:0c:ea:85:a2:e8:1e:08:15:45:70:e6:92:1a:
2a:7c:0f:2b:ea:3b:bc:ae:4c:df:ea:5b:6c:36:fc:
48:38:97:1d:e6:f3:95:2c:31:9f:b0:5c:8a:c9:e6:
82:57:31:f7:08:79:bd:45:9f:25:3c:35:23:e9:5c:
4e:50:fe:c3:88:73:b0:a3:52:0e:e3:6d:44:90:82:
23:c4:4d:8c:0b:9a:38:f4:ac:d9:ce:f3:1f:aa:a7:
5c:b1:ec:5a:19:1a:4d:c2:99:53:06:3b:7e:f1:92:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:23:59:86:FA:9B:5B:31:3C:1F:C5:77:C4:EB:97:1A:FC:AB:AB:18
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hSNZhvqbWzE8H8V3xOuXGvyrqxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:70:4e:67:17:21:26:a8:61:1a:04:01:67:ac:c7:9d:c1:25:
96:f9:bf:48:f4:af:60:c9:b3:60:96:a7:a1:dc:f3:fd:a7:03:
97:7a:6f:89:6a:dc:4e:51:26:1c:ac:a9:ae:d4:81:00:58:67:
4a:58:02:b1:02:94:af:1e:cd:f7:cc:59:bc:92:e9:78:e2:32:
74:32:26:16:5d:c6:fe:77:e6:cc:6f:f8:a5:80:8b:3b:f4:55:
22:30:4f:1e:d9:32:a0:ae:ef:f2:b2:ef:18:77:e4:9e:8b:c0:
b7:b5:56:ba:e3:bf:8c:0d:bf:3d:64:3b:3d:85:73:a4:3b:69:
e8:3b:53:61:bd:8d:09:47:c2:cb:4e:80:10:2f:11:0d:f7:78:
cc:39:9a:2a:ae:7b:a6:d0:d0:d0:04:e6:1d:53:80:ca:2c:41:
37:2f:80:43:9b:20:2d:b3:6b:ce:56:28:a5:3f:c2:08:36:df:
c1:af:14:01:6a:50:2e:17:85:39:02:f9:30:c3:e6:82:91:dd:
91:34:65:e8:78:52:d3:1a:4b:0a:41:11:86:17:b4:f9:01:f9:
02:06:ff:ff:67:ef:69:3e:b6:32:56:9d:4a:bd:a7:e4:0a:9a:
d7:e1:f6:7e:aa:88:93:e2:d7:7c:3a:6e:6c:50:79:d0:d0:d5:
7a:5c:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 23:20:47 2024 by rpki-client on console-ams.rpki-client.org