Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oO6W4PmQnLL49k4ystRuyOiGdHU.roa
File: oO6W4PmQnLL49k4ystRuyOiGdHU.roa (raw, json)
Hash identifier: EayojRisPPgib0zjezIpdDNMV2NQKf3VxzUbRDleAlE=
Subject key identifier: A0:EE:96:E0:F9:90:9C:B2:F8:F6:4E:32:B2:D4:6E:C8:E8:86:74:75
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FEBF3B22696CDFC6BF435A828F0D10B5F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oO6W4PmQnLL49k4ystRuyOiGdHU.roa
Signing time: Thu 06 Jun 2024 05:09:27 +0000
ROA not before: Thu 06 Jun 2024 05:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 06:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:eb:f3:b2:26:96:cd:fc:6b:f4:35:a8:28:f0:d1:0b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 6 05:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0ee96e0f9909cb2f8f64e32b2d46ec8e8867475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:48:e6:1a:ed:d7:74:fd:19:f1:3a:43:7f:
3b:d6:9a:16:a0:fc:a5:c8:26:a2:cd:32:0f:23:99:
87:85:40:eb:ee:d8:7f:37:85:49:98:f1:70:da:03:
37:d8:3e:0f:be:04:cb:07:ae:81:47:d5:58:b6:b4:
7d:54:5d:d3:ec:04:0e:3a:f6:d8:00:de:af:cb:e4:
87:fc:8a:41:ee:fd:3d:72:c0:f8:20:09:c4:52:2e:
34:37:e3:19:88:74:3e:44:e2:d2:a0:9b:2d:9e:8b:
30:6b:bd:e4:33:e6:09:5d:aa:36:33:5d:31:96:a4:
2e:e1:a2:91:96:a1:bf:03:de:ae:fd:05:3d:88:8c:
fd:13:4f:0a:97:74:5b:22:72:11:5f:1a:dc:70:88:
4e:ea:63:d2:5d:c3:b7:87:1c:3e:c6:1c:a1:f3:41:
1d:0b:70:21:eb:a3:ba:45:35:f0:10:ad:af:83:c4:
63:6c:35:11:5c:d0:f8:8b:97:64:4b:eb:8e:81:dd:
d5:96:b1:7b:00:2b:23:1e:a7:86:24:f9:4f:df:64:
a1:35:65:69:86:1e:12:39:10:93:8a:bb:8d:47:c2:
28:9b:d9:01:e0:c1:79:71:7f:a2:26:ba:07:d0:4e:
8e:52:93:67:8a:0c:67:84:65:e9:bb:d3:03:de:76:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EE:96:E0:F9:90:9C:B2:F8:F6:4E:32:B2:D4:6E:C8:E8:86:74:75
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oO6W4PmQnLL49k4ystRuyOiGdHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:c8:8c:0f:93:12:72:8e:4e:14:1a:16:ac:c4:9e:74:69:bc:
e3:38:cc:40:3d:42:28:6f:77:69:ea:46:d2:ea:97:a0:66:fb:
51:a7:a5:ee:78:c5:c2:59:bb:11:55:ff:17:e1:06:5f:f3:c1:
81:51:f6:3f:7f:22:24:c5:7b:64:26:c9:23:24:4f:c2:e6:eb:
65:3c:3f:17:6a:1a:b8:43:32:82:fc:c9:07:4a:15:6f:5d:1f:
d3:8e:c3:24:1d:6e:3b:d2:ad:58:e7:47:07:ff:cb:99:bb:b2:
31:a6:60:e0:c9:50:fe:5f:64:71:b1:21:48:9b:4d:f7:45:62:
89:e4:c2:19:7f:bf:ed:66:f2:6e:3f:06:3b:af:b4:a6:54:cc:
2a:2f:fe:7b:3d:77:cf:ec:44:20:60:d9:99:ab:31:52:30:2e:
e9:cf:36:b1:be:0b:34:29:b8:94:cf:4b:8a:c3:76:8a:ec:84:
51:83:4a:0b:89:e4:5d:d5:16:5f:e7:5b:da:2a:a5:24:a4:3b:
2f:6f:db:11:49:68:fe:4b:d0:12:86:39:af:d7:d7:31:7c:97:
2a:2b:9e:76:67:6c:01:b2:0a:5a:6e:a3:e2:28:f1:1f:68:43:
71:69:f6:ef:99:c6:7f:5e:4a:a6:21:fc:5d:69:97:48:7d:83:
a8:34:43:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org