Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uIrlAOI5KIN06cUZZYfNSu9edvU.roa
File: uIrlAOI5KIN06cUZZYfNSu9edvU.roa (raw, json)
Hash identifier: cVRR1QTRtz7ufFx8vA4Q5gNJdoOOQQndZF2bThzsyI4=
Subject key identifier: B8:8A:E5:00:E2:39:28:83:74:E9:C5:19:65:87:CD:4A:EF:5E:76:F5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FFB9F8A168542A1A0792CE7C292996A08
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uIrlAOI5KIN06cUZZYfNSu9edvU.roa
Signing time: Sun 09 Jun 2024 06:11:27 +0000
ROA not before: Sun 09 Jun 2024 06:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Jun 2024 07:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fb:9f:8a:16:85:42:a1:a0:79:2c:e7:c2:92:99:6a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 9 06:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b88ae500e239288374e9c5196587cd4aef5e76f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:50:13:4a:c1:ed:57:35:b0:32:a2:b0:d3:
b1:3a:d7:48:15:75:00:53:a6:69:2c:b1:e4:f1:64:
ce:88:01:d1:74:ac:55:72:1b:76:6c:b4:2d:39:92:
e3:10:5a:5b:27:65:57:a0:99:c4:a8:2d:a4:bc:ba:
25:cb:c8:d9:29:bb:86:cc:90:03:45:50:54:fd:04:
2e:21:0f:54:99:f0:84:a8:34:ee:da:0b:32:e4:1b:
37:14:2c:82:6d:ac:a9:7d:b9:db:16:38:d2:0e:36:
85:08:cc:d2:c0:e5:84:f6:8f:46:2a:52:55:fd:7c:
4a:9a:4c:38:f6:bc:8a:a0:42:38:cd:37:b6:b7:2a:
72:df:19:b4:2f:99:f4:4d:2e:31:dd:82:5d:28:c3:
f2:e7:19:31:6a:59:0a:fb:84:1e:e2:37:40:ab:dc:
e6:b4:41:dd:09:dd:8a:4d:b5:2c:51:b9:14:c7:96:
13:30:42:4a:50:f7:51:2c:e5:18:a4:0d:87:7a:34:
bc:1a:ac:f1:53:2d:c5:ce:5e:78:58:9e:ea:82:c7:
f2:8f:99:b3:c0:30:66:99:30:51:c3:fa:6b:a9:75:
c7:27:2f:35:8c:20:4d:ab:a4:1e:c3:e1:83:2c:27:
15:ac:6a:98:55:bb:12:4d:d9:84:57:ea:5c:51:13:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:E5:00:E2:39:28:83:74:E9:C5:19:65:87:CD:4A:EF:5E:76:F5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uIrlAOI5KIN06cUZZYfNSu9edvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:88:44:03:9a:d2:c8:d6:be:25:43:2c:05:87:8f:87:d9:a1:
7b:34:12:f3:fb:3c:40:11:72:d2:c9:49:f1:b3:53:17:36:90:
23:45:da:ca:ca:50:b2:a8:0f:27:1c:23:28:a2:84:0c:69:0a:
0e:bb:13:5f:07:8d:23:22:86:39:6f:c4:4d:64:44:cd:ee:5d:
6a:20:59:6a:94:3c:3e:ff:4d:6b:d3:7b:7b:42:d2:4b:47:1f:
1c:11:70:d8:58:49:2c:e6:1d:16:65:7d:66:9f:34:1b:0c:62:
97:42:d1:d4:32:b0:82:b8:f9:5f:6d:3f:69:88:e0:48:e6:67:
60:94:63:fa:c7:46:7d:aa:d2:cb:41:6c:e7:03:6d:7b:bb:d4:
91:2a:fa:6b:74:55:37:3f:f7:88:98:68:6e:48:7f:ab:51:1c:
11:5d:0d:95:b7:76:08:ff:bb:bc:0c:33:15:ad:22:db:c7:9d:
fd:c8:82:8a:a7:6d:4b:dc:7f:f4:f4:44:7b:d4:77:24:57:7f:
12:91:fd:0b:81:10:07:a6:45:52:1d:04:de:51:6f:46:c9:f6:
e1:b8:55:41:a0:e3:21:fa:26:90:4d:eb:27:ba:bc:c2:80:2b:
8a:50:b7:9e:49:5c:0b:8a:c5:21:fe:0e:16:7e:83:98:eb:63:
27:af:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 07:48:25 2024 by rpki-client on console-fra.rpki-client.org