Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oA75RmEKosL7mIEL_k2dbHXOjoc.roa
File: oA75RmEKosL7mIEL_k2dbHXOjoc.roa (raw, json)
Hash identifier: 39awpTGMKDUcwsclPvlDxRoHQ3qg1Ro717zGyikeS+Q=
Subject key identifier: A0:0E:F9:46:61:0A:A2:C2:FB:98:81:0B:FE:4D:9D:6C:75:CE:8E:87
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FCAACB6BA3FAD818BFEEEBBB17CC0E6CE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oA75RmEKosL7mIEL_k2dbHXOjoc.roa
Signing time: Thu 30 May 2024 18:04:27 +0000
ROA not before: Thu 30 May 2024 18:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:caac:9889/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 30 May 2024 18:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ca:ac:b6:ba:3f:ad:81:8b:fe:ee:bb:b1:7c:c0:e6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 30 18:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a00ef946610aa2c2fb98810bfe4d9d6c75ce8e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:59:76:cb:14:cb:00:73:bc:2f:23:11:63:
ba:3b:79:2f:e3:52:75:36:a6:ac:67:93:59:0b:8d:
87:88:6e:a5:95:36:ed:ae:8e:9f:c8:26:02:c0:d7:
9e:0e:e0:98:23:81:61:a5:0c:7d:a6:c5:3d:1f:2f:
92:1a:f3:4b:a6:c9:19:ae:d8:a8:f8:87:25:1e:1a:
62:1e:4c:c3:46:36:d3:e8:12:8a:d3:3b:b5:d1:6d:
04:a8:3b:bd:82:e9:c7:1e:4a:77:dc:d1:ed:e8:66:
7f:a2:17:57:06:b1:75:90:d0:46:40:4a:9c:8d:1b:
5f:b8:9b:54:ba:c1:45:0b:ce:3c:db:87:3b:e8:59:
f6:c6:47:f0:b4:bf:8c:62:92:d8:c0:0c:35:70:4d:
84:5a:ce:a1:cd:3f:4e:4f:7c:4b:52:ca:f8:b3:5d:
c3:45:aa:d3:62:8a:89:4e:04:0c:21:52:af:a1:39:
da:d9:c7:29:76:d8:1e:64:93:1f:f1:2a:94:cd:d2:
98:79:34:9c:33:7a:38:62:87:0b:85:1f:6b:5f:9a:
9f:e8:7c:df:ac:2b:04:90:0c:f0:30:cc:07:0d:1e:
d2:1c:33:ef:76:3b:6f:9b:4f:75:9c:41:1c:97:73:
b8:40:0f:82:74:e4:85:01:62:a8:34:4b:34:a8:5e:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0E:F9:46:61:0A:A2:C2:FB:98:81:0B:FE:4D:9D:6C:75:CE:8E:87
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oA75RmEKosL7mIEL_k2dbHXOjoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:b3:9a:81:90:c8:7e:f9:80:83:fc:2d:07:02:38:38:5e:05:
6a:16:69:c1:1b:da:6a:f0:b5:63:09:a2:20:f3:13:93:eb:c9:
fb:5b:4e:22:06:4f:36:50:c7:df:63:08:54:7c:bc:5b:91:30:
87:32:22:ad:ae:7d:1e:03:98:2d:05:85:46:57:15:80:77:0d:
2e:0e:db:b3:ba:78:89:3e:ed:fa:74:12:40:03:e8:0d:05:a7:
4a:14:ad:64:3e:82:e2:fd:b2:aa:45:37:71:8a:40:fb:74:4f:
20:16:37:6f:38:00:29:aa:c4:ac:7d:cd:ee:09:41:f2:16:8d:
f5:7d:47:00:29:b9:c7:65:bb:fc:c3:6b:e7:38:bf:fc:30:b5:
f6:3e:64:17:e6:04:d5:b9:1e:7b:4e:62:ae:d2:dd:3b:17:a1:
8c:b2:1c:04:44:e1:50:7b:24:cd:e9:d3:fc:c7:7b:9e:6b:16:
24:0d:5b:69:6d:b8:cb:82:93:eb:6b:21:59:c6:1f:d3:56:52:
7c:e7:fd:bb:4d:03:c7:3e:28:86:54:42:0c:f1:80:6d:29:c9:
c2:d3:58:2d:6d:0d:ca:8f:5b:65:48:f1:b8:79:cd:69:7f:9c:
b5:57:e2:82:c7:4e:29:3f:51:37:7a:78:23:56:e2:0e:9e:dd:
c5:22:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org