Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mWQKeX9UsgTj5eOKBbj9GpbflSs.roa
File: mWQKeX9UsgTj5eOKBbj9GpbflSs.roa (raw, json)
Hash identifier: 3K5ywzOhr2+qY1DirVOOVaF66KP7N+nuF9YH0vwdrsE=
Subject key identifier: 99:64:0A:79:7F:54:B2:04:E3:E5:E3:8A:05:B8:FD:1A:96:DF:95:2B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FABCC474B052ABEBAF2CCE59BC8F6D4FA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mWQKeX9UsgTj5eOKBbj9GpbflSs.roa
Signing time: Fri 24 May 2024 18:10:42 +0000
ROA not before: Fri 24 May 2024 18:10:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 24 May 2024 19:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ab:cc:47:4b:05:2a:be:ba:f2:cc:e5:9b:c8:f6:d4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 24 18:10:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99640a797f54b204e3e5e38a05b8fd1a96df952b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:46:c7:b0:28:c5:e5:e3:51:14:32:69:50:
dc:d0:43:0f:5b:01:08:58:77:0b:b9:c2:da:3e:88:
7f:24:72:97:44:4c:f3:eb:6a:54:68:42:56:2e:43:
3c:a0:8f:11:56:9f:54:8e:1f:97:8d:ea:72:22:dc:
da:18:ca:62:d5:f2:2b:f7:02:0c:9a:88:24:ff:fe:
5a:dc:39:16:95:ae:0b:30:57:d5:f5:8b:02:84:38:
1a:2f:00:47:73:ac:3b:ec:6e:ed:da:1b:2c:ae:12:
e8:fb:b0:2c:b9:4b:ae:b9:cb:ba:25:d0:e4:b3:18:
4d:62:81:ce:5a:89:4b:74:bd:01:63:91:ee:13:ee:
31:3d:fe:a9:02:f0:9c:fc:e4:21:f7:0e:28:b5:a3:
27:da:7a:9c:e3:a8:6a:86:5f:ae:55:f7:b9:02:9e:
90:ab:c2:67:8f:7f:bc:e8:80:25:49:2f:85:ce:20:
5b:ba:c5:72:69:da:b5:29:52:52:20:03:72:1d:d0:
f0:d0:c4:f6:2b:a7:63:4a:31:f0:95:12:7d:b5:b2:
d0:be:32:80:b5:8e:ce:27:1e:2d:b4:d9:3d:52:08:
7a:c3:03:06:15:41:98:0b:8f:ec:3d:69:7f:22:83:
fa:f0:2e:7f:9c:8d:1d:26:01:5a:b0:a3:f9:43:25:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:64:0A:79:7F:54:B2:04:E3:E5:E3:8A:05:B8:FD:1A:96:DF:95:2B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mWQKeX9UsgTj5eOKBbj9GpbflSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:4f:2a:f9:a2:09:10:2b:3d:39:a4:4d:e8:d5:5c:4f:47:79:
cd:4b:43:e0:ea:67:75:30:24:2e:0e:10:47:43:0c:ea:bc:17:
3a:b3:3e:5f:ad:ca:e3:21:6c:74:ef:59:0f:2c:56:60:80:a7:
ce:ac:1e:9d:0a:4f:04:7e:62:78:e1:42:7a:31:d6:fd:9f:b0:
b7:5b:b1:8f:01:44:6b:8d:9a:dd:5e:5e:0d:c4:b2:e0:46:32:
54:66:36:cd:7a:fc:be:86:11:a5:3a:b8:cc:ae:a4:e7:f1:f8:
76:89:e8:ab:04:04:6b:bf:b8:a9:08:ac:18:72:d9:d1:aa:4c:
44:41:b9:cf:55:1d:32:99:64:e4:8b:eb:ee:2e:39:57:d7:23:
15:99:a5:f8:13:f1:d4:52:96:b8:fa:5e:f9:10:59:aa:df:1c:
ce:bd:27:52:aa:ac:27:52:12:14:33:f5:a4:0c:0c:ce:ed:cc:
26:3f:d4:5a:df:84:61:6c:ad:63:76:00:8d:3e:0d:64:37:66:
38:b4:fe:7b:4f:63:74:2e:75:d9:78:16:ac:6b:1f:d1:b6:76:
b0:9f:f8:d4:2a:ae:18:9a:e0:fe:73:34:34:46:3f:08:7c:24:
dc:0d:53:4c:a9:67:03:84:a8:6f:84:6c:95:bc:e8:6a:3f:84:
b1:e1:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org