Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n83VzNyVHKENEIbB9iZKSYsK9uo.roa
File: n83VzNyVHKENEIbB9iZKSYsK9uo.roa (raw, json)
Hash identifier: 65b/Jg9xzmAfgzUWg7apZHsLEBD+HeahlTOIi6ovNgs=
Subject key identifier: 9F:CD:D5:CC:DC:95:1C:A1:0D:10:86:C1:F6:26:4A:49:8B:0A:F6:EA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01901D49803C4C4C1643B77A4212EA91F697
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n83VzNyVHKENEIbB9iZKSYsK9uo.roa
Signing time: Sat 15 Jun 2024 19:04:34 +0000
ROA not before: Sat 15 Jun 2024 19:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:1d49:236d/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 15 Jun 2024 19:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:49:80:3c:4c:4c:16:43:b7:7a:42:12:ea:91:f6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 15 19:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fcdd5ccdc951ca10d1086c1f6264a498b0af6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:ba:3d:82:ad:4f:f2:87:09:74:82:cd:1e:
4a:8b:93:3f:43:c7:8a:f6:3e:5c:ff:04:54:fd:99:
11:fc:77:ee:65:f4:45:c7:e7:62:ab:d1:a3:19:72:
ba:5d:77:27:a4:4a:d9:10:67:15:1b:3c:54:65:1e:
cb:d3:35:2c:6c:9a:18:01:53:b4:d3:9a:62:91:90:
b6:b2:f5:63:5b:a5:dc:b5:dc:cf:91:9c:74:56:d1:
7c:ff:d8:d7:7c:6d:09:e3:b5:86:03:dc:70:46:bf:
80:95:38:79:0d:66:53:71:49:b8:9a:b2:38:7e:81:
a3:a8:2c:6e:f4:75:47:d2:da:11:be:56:67:11:71:
52:c5:6a:0b:56:6e:e1:50:53:09:81:10:12:5d:1e:
94:85:ea:34:e5:cd:ed:69:aa:92:22:48:e0:2b:67:
fb:ba:d8:a1:f1:79:42:82:07:e7:23:3a:9c:7b:e8:
ed:5b:61:15:c5:40:ba:3f:1f:9a:ae:92:1e:c8:ec:
ba:23:5b:26:73:e4:ee:7e:9e:12:1e:b1:a5:a0:ac:
30:3c:be:59:bc:77:03:ce:21:eb:27:fe:83:45:70:
d4:58:ec:37:7b:a0:c4:df:43:dc:ec:8d:b1:de:b8:
04:61:64:09:01:a1:70:ec:c6:4c:03:eb:8a:b0:72:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:D5:CC:DC:95:1C:A1:0D:10:86:C1:F6:26:4A:49:8B:0A:F6:EA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n83VzNyVHKENEIbB9iZKSYsK9uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:be:4e:e3:ac:6e:28:13:aa:be:e0:6d:54:35:04:4c:8a:f0:
4d:90:8d:0c:70:3b:43:13:19:83:1e:19:ba:72:40:2b:39:5e:
16:21:de:66:61:07:04:e1:09:d7:29:66:0a:90:56:4d:f5:4f:
d7:0d:39:2b:09:11:2d:89:10:27:65:26:45:9f:82:3a:34:a8:
1a:88:53:10:32:54:78:d2:e6:05:f2:8a:89:c4:51:f1:c0:64:
1d:4a:37:fe:42:e0:19:fb:e1:30:55:20:3b:0c:f8:49:96:8c:
27:7f:9b:18:57:e6:c4:be:85:d6:d6:8a:29:ac:c0:d7:6e:96:
d4:ce:85:27:85:df:4d:bc:33:da:e6:38:a3:6a:4d:dd:25:67:
6c:7d:fc:8c:9f:9b:02:36:ef:83:78:9e:39:75:53:2d:be:88:
68:0c:ff:42:4a:73:1e:f8:ba:b0:e7:47:c5:e5:91:ac:af:48:
fb:b1:01:f9:72:1b:6e:64:e1:c2:3d:f4:05:8b:74:33:65:f7:
29:3b:1f:ad:cb:24:4d:03:1f:53:a2:42:a0:1d:ba:1d:43:aa:
ee:72:30:f8:8a:05:d7:b7:05:be:d6:1f:a1:cb:f6:10:60:17:
e4:1f:cd:74:5f:2e:73:aa:0f:f7:a0:82:f1:75:71:a8:ed:0c:
63:83:c1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:35:51 2024 by rpki-client on console-fra.rpki-client.org