Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/siYREjM3RMSEfOWmVyMDKzXTHI0.roa
File: siYREjM3RMSEfOWmVyMDKzXTHI0.roa (raw, json)
Hash identifier: k+ul69DovDAGQxvTcQ29f3dfsImtQm6meLgwM+K1VmI=
Subject key identifier: B2:26:11:12:33:37:44:C4:84:7C:E5:A6:57:23:03:2B:35:D3:1C:8D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FE4DEF3BAB3A119A8BB077BD5A41DC508
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/siYREjM3RMSEfOWmVyMDKzXTHI0.roa
Signing time: Tue 04 Jun 2024 20:09:27 +0000
ROA not before: Tue 04 Jun 2024 20:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 04 Jun 2024 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:de:f3:ba:b3:a1:19:a8:bb:07:7b:d5:a4:1d:c5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 4 20:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2261112333744c4847ce5a65723032b35d31c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:b4:9c:41:34:2a:15:a5:0e:07:f5:71:96:
0d:e1:08:23:fa:3b:ef:e2:91:9e:5b:a4:e3:ee:02:
67:6e:34:20:d1:a2:c6:1d:91:a7:c2:6c:91:9d:b1:
b8:e4:10:7d:38:2f:c0:a5:d1:b8:29:12:2e:e8:0a:
d5:e3:75:7d:98:a5:74:1c:b7:ec:5c:75:72:83:9f:
c7:d7:62:75:ac:c1:ea:b9:62:d3:14:6c:c6:fa:bc:
59:ef:84:59:d0:59:33:af:f7:ff:47:84:25:27:ee:
45:b5:0f:27:29:40:c8:2c:b2:c4:d2:20:91:78:0b:
99:e9:0e:e2:db:2a:39:b4:28:6e:1a:16:61:ba:a9:
8a:55:27:2b:02:0a:ee:78:b6:35:93:4b:ad:20:f1:
51:64:d4:5e:49:53:e8:63:5b:ad:aa:50:4f:e6:8b:
58:0d:82:a0:c0:12:c3:3e:91:e3:12:a0:28:bf:fd:
20:c5:02:3e:be:04:bc:52:f8:0c:9d:db:8a:1b:30:
10:63:7e:d6:8e:58:31:b1:31:06:19:3a:8d:e3:e6:
ab:07:e0:f4:d5:4a:51:11:df:cc:cb:a7:83:3a:26:
d7:10:1c:11:92:88:25:4f:09:7a:a4:81:24:6c:07:
12:18:5d:db:fd:a9:3c:13:a0:c7:d7:16:b7:2b:0d:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:26:11:12:33:37:44:C4:84:7C:E5:A6:57:23:03:2B:35:D3:1C:8D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/siYREjM3RMSEfOWmVyMDKzXTHI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:c4:4f:9f:40:36:1a:a7:41:41:ce:d4:ac:a9:3d:c6:71:d5:
26:7b:cd:cb:19:fa:fe:de:66:bf:73:bd:6e:55:48:7c:5a:4f:
da:e2:6b:4c:eb:4b:c0:ae:4a:05:b8:14:d9:49:7d:d6:3a:a5:
61:98:46:ec:6f:dc:1f:e0:8c:3e:6e:42:af:be:c2:b7:8c:52:
3e:81:48:89:0d:3c:38:48:d6:2f:e9:09:6f:45:fe:53:4b:eb:
81:04:a5:36:e2:49:af:5a:3d:43:6b:62:59:0e:6c:ec:b4:da:
9d:99:18:88:bd:6a:e4:b9:f8:b8:18:60:c0:ad:bf:d6:5c:b0:
40:2b:57:79:c4:be:43:d2:85:96:ee:dc:43:e7:70:3c:a0:7a:
93:53:e1:89:09:6f:2a:69:43:67:7a:89:57:45:60:38:a0:4b:
ce:d3:30:46:bf:34:5a:e5:d1:8d:60:1b:5b:1e:2e:3a:dc:f7:
22:b3:f6:5e:66:dc:87:0a:22:23:06:9c:6d:56:9f:43:36:02:
a6:77:96:a5:19:e8:f0:69:71:ec:73:35:c5:3d:48:e2:72:57:
b0:54:67:17:f1:2d:3b:95:76:b0:46:22:67:25:c7:6f:b3:35:
fc:cb:52:62:a9:06:f8:68:fb:85:73:2f:50:98:d4:38:84:b9:
4b:b0:17:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org