Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/on2uGXewUNQyz5ikAFNT92KU4y4.roa
File: on2uGXewUNQyz5ikAFNT92KU4y4.roa (raw, json)
Hash identifier: CWq3x5Y06tUp0ioJ5Q/U+41IR8beA+Xu/xWaepD9CD0=
Subject key identifier: A2:7D:AE:19:77:B0:50:D4:32:CF:98:A4:00:53:53:F7:62:94:E3:2E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190633FB8BED0C281626B24014CCAFE9072
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/on2uGXewUNQyz5ikAFNT92KU4y4.roa
Signing time: Sat 29 Jun 2024 09:07:18 +0000
ROA not before: Sat 29 Jun 2024 09:07:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 29 Jun 2024 10:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:63:3f:b8:be:d0:c2:81:62:6b:24:01:4c:ca:fe:90:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 29 09:07:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a27dae1977b050d432cf98a4005353f76294e32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:ac:94:38:11:56:4d:60:29:66:d6:9b:47:
d8:34:c8:d8:20:39:fb:7b:73:38:9f:82:51:23:59:
a1:0c:98:b2:bb:5f:20:14:2a:56:3b:33:8f:c4:05:
a7:90:69:c9:e4:de:04:dd:82:d7:b4:1f:79:bb:ff:
84:0c:68:7d:27:6c:2a:f7:2f:30:de:ed:2c:9c:7c:
30:50:06:03:62:ab:ec:8a:7e:2a:7c:93:63:48:ed:
0e:be:c0:94:30:05:7a:92:9e:7a:d2:78:a5:e4:f6:
92:ba:dd:9e:47:fc:77:a8:1c:cb:20:a1:c1:77:b6:
64:ee:38:1e:fb:17:5b:5c:49:23:cb:b4:6b:91:90:
b6:76:d4:81:02:0d:43:56:17:66:48:6e:b4:08:91:
e7:7a:ae:56:9e:cc:4a:38:06:d6:56:42:75:b1:26:
3f:ee:ab:d2:7a:83:05:b8:28:41:80:1c:81:26:dd:
4f:7c:b7:22:62:f2:c2:42:ee:5c:c6:8e:d1:60:94:
d3:51:f6:0d:78:4a:35:c9:89:34:03:67:90:52:c1:
e1:84:79:e0:a4:21:9a:c3:da:92:81:7d:dd:49:2f:
0d:ee:57:f2:bb:6e:1b:9a:c9:84:75:e5:c2:c9:5a:
82:b7:e5:ec:65:b0:23:6e:5c:cd:8f:e0:3f:ce:44:
63:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7D:AE:19:77:B0:50:D4:32:CF:98:A4:00:53:53:F7:62:94:E3:2E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/on2uGXewUNQyz5ikAFNT92KU4y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:90:30:39:61:b3:57:fb:dc:fd:ed:2c:60:00:64:ca:c1:13:
d5:30:02:22:60:3d:11:7c:44:21:01:b3:54:b2:15:4e:22:61:
3d:0f:78:3f:a6:e6:80:7a:e9:77:34:53:68:06:c1:77:88:ac:
40:73:4a:da:46:83:f7:ad:14:f9:1c:9b:8d:d8:3d:95:e5:b4:
ea:80:cd:4d:b3:00:ed:28:c0:5c:51:ae:2c:eb:0e:9c:e7:3f:
22:cb:47:19:2f:e9:32:1e:aa:32:6d:f8:93:fb:e3:ba:1b:01:
ce:14:05:d0:68:8a:1c:f6:63:54:e0:cf:d4:29:8b:26:da:46:
42:c1:3a:43:8f:14:7e:e1:a6:95:fb:94:70:11:62:59:b7:5b:
9b:e9:da:2c:4f:59:b7:48:54:ed:6d:56:2f:d1:93:17:a3:cf:
f9:d5:f2:c2:32:91:66:c6:08:04:9c:bf:a1:3d:b7:f3:2f:9e:
92:b3:c1:c3:1c:86:f0:79:f3:21:0c:81:15:7c:83:69:42:5d:
0d:8b:5d:23:6d:fc:42:1c:85:4d:f3:9b:9a:c6:e8:97:ff:ce:
97:2b:7f:77:c5:81:8c:29:20:5f:60:b1:80:02:8e:01:3b:7a:
a5:86:85:97:37:7a:0e:86:ba:a1:a6:99:e4:94:a5:df:be:96:
3b:b8:4f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 14:32:47 2024 by rpki-client on console-ams.rpki-client.org