Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jX_Uo0Cx6w-Lq55mTVQAGZ4HVp8.roa
File: jX_Uo0Cx6w-Lq55mTVQAGZ4HVp8.roa (raw, json)
Hash identifier: TpOvDQGIY+xRDmU3cY0LmG9/VKXNsvZEI9jcvF8is3c=
Subject key identifier: 8D:7F:D4:A3:40:B1:EB:0F:8B:AB:9E:66:4D:54:00:19:9E:07:56:9F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FD235BB3339CF477FF7FB52183964E164
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jX_Uo0Cx6w-Lq55mTVQAGZ4HVp8.roa
Signing time: Sat 01 Jun 2024 05:11:27 +0000
ROA not before: Sat 01 Jun 2024 05:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jun 2024 06:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d2:35:bb:33:39:cf:47:7f:f7:fb:52:18:39:64:e1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 1 05:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d7fd4a340b1eb0f8bab9e664d5400199e07569f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:ff:89:dd:49:32:a7:3f:d3:ac:e5:31:3b:
68:f5:78:ba:dc:a0:7d:e8:2b:01:66:39:51:db:1b:
13:b5:89:10:62:bd:2f:93:23:ed:3c:e1:49:de:94:
72:7a:3e:cf:49:11:11:c8:16:3b:03:33:ec:53:2e:
ed:8c:f7:28:7c:72:ea:29:bc:f7:06:76:02:41:8b:
e8:30:e7:79:54:b1:c4:5b:d2:8e:a5:d5:fb:1e:e3:
9b:4b:a2:e5:2a:eb:9c:f7:fe:6f:b0:1e:0e:a3:29:
82:e9:c4:77:14:1a:3f:f5:7d:18:ca:5c:5f:d0:ae:
d2:a2:4f:e2:40:b4:7c:9d:98:7b:f2:c0:00:a9:1d:
5a:8c:c1:cc:62:0e:f6:50:0b:5e:75:94:67:40:f2:
98:71:4d:31:1b:67:32:36:e3:26:fc:88:7a:1b:61:
12:9b:21:d6:23:7e:4b:a1:d8:e3:3d:78:f1:f8:64:
89:1d:80:a0:0e:bd:a1:ab:68:16:59:6a:56:e4:88:
82:d7:30:59:7c:64:64:23:85:f8:23:44:01:17:5d:
4a:ff:ff:9e:69:7d:ea:23:6f:89:16:f9:9b:e9:61:
91:a4:51:98:28:bc:70:eb:ff:bb:7d:13:43:92:9a:
aa:d6:63:d3:49:0a:10:65:69:da:fa:df:80:32:2c:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:D4:A3:40:B1:EB:0F:8B:AB:9E:66:4D:54:00:19:9E:07:56:9F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jX_Uo0Cx6w-Lq55mTVQAGZ4HVp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:87:fb:0e:b5:f2:40:0d:f9:b2:96:28:3d:3e:d6:5b:09:7e:
76:f2:5e:f1:20:79:39:ca:97:56:5f:30:58:66:c5:3e:a8:10:
2d:60:bb:77:6e:16:0c:82:3b:2c:fb:1e:75:bd:8b:0f:51:eb:
0c:9b:01:4c:18:bc:da:ab:a8:5b:96:35:55:9a:76:ee:82:7d:
f3:2b:3e:df:fc:d7:c6:a2:bb:fd:ff:bc:f6:1f:8f:11:79:53:
0c:b3:18:44:0e:46:ca:88:56:9d:24:46:38:62:39:74:02:ad:
31:4d:95:af:2c:2a:70:7e:2b:eb:0e:0c:76:14:03:ec:3c:18:
8c:ed:42:5e:4a:2f:70:6d:99:81:49:da:46:7e:61:4a:ce:6f:
a5:bb:42:92:ef:9b:58:60:16:0a:4c:53:91:71:8c:c0:f9:c6:
29:c1:91:f9:4a:c5:ab:75:38:db:e1:cb:da:de:f8:a9:29:9c:
c6:6d:02:8d:82:83:10:af:6c:08:4a:9f:8b:4d:d2:1c:1e:66:
29:b0:7b:45:9b:7c:e9:8d:82:5f:96:3e:97:30:4b:28:8b:0b:
d9:d2:85:44:22:3b:91:c7:4a:99:9a:96:4c:01:aa:82:ee:b1:
0b:72:2e:a1:2c:fa:a1:d8:91:05:17:ca:69:5a:f6:f7:d4:e5:
0d:89:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org