Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uJn-NEdHKmyrqWrLT1CV-aUTC5E.roa
File: uJn-NEdHKmyrqWrLT1CV-aUTC5E.roa (raw, json)
Hash identifier: 707WeQEoqOtl4IBnYVr2uDzyK/LI8RGDhkzLcngPHqY=
Subject key identifier: B8:99:FE:34:47:47:2A:6C:AB:A9:6A:CB:4F:50:95:F9:A5:13:0B:91
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01906A1F5D199903251F067A5F7C47DAEA8A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uJn-NEdHKmyrqWrLT1CV-aUTC5E.roa
Signing time: Sun 30 Jun 2024 17:09:18 +0000
ROA not before: Sun 30 Jun 2024 17:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 30 Jun 2024 18:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6a:1f:5d:19:99:03:25:1f:06:7a:5f:7c:47:da:ea:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 30 17:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b899fe3447472a6caba96acb4f5095f9a5130b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:10:ca:1f:62:06:a9:67:6d:0a:cd:4e:11:
c9:22:df:5b:59:ec:ab:97:d4:8a:18:27:52:80:65:
31:e5:0e:06:0d:ff:5a:07:f0:10:d0:5e:ed:0b:e6:
1e:65:39:6d:03:b4:8e:46:c9:fe:80:10:2f:5d:90:
09:87:6b:c4:97:39:8f:16:48:96:3e:47:92:d7:aa:
68:32:dd:a2:ff:9a:0d:6a:fb:fc:01:40:86:55:7e:
3e:35:bc:8e:58:94:d4:47:f8:ff:94:82:d9:13:1d:
00:e6:90:94:88:5b:d9:eb:fe:d3:9d:3e:66:f1:7f:
31:9c:76:3d:52:21:43:0b:a0:3f:da:24:57:a1:96:
06:2b:4b:5a:d9:a1:89:6a:1d:86:39:a9:ef:d7:83:
11:f9:75:6a:1b:08:8d:b7:1d:72:cf:0b:f8:f2:b9:
7b:01:03:05:ad:7a:a6:9a:c0:ed:ab:31:44:e7:17:
f9:2b:24:dd:92:d9:1c:58:a5:55:86:fb:7c:ff:a3:
0e:ae:37:71:2c:05:7b:0c:63:c6:ac:d1:d3:3d:83:
57:97:56:5d:6b:f8:9c:2f:ed:ac:0e:dc:f2:0c:ea:
5b:20:78:9b:ba:17:ab:c7:1a:b0:fb:0b:b8:2f:c4:
a7:2d:7b:fb:bb:00:df:57:2b:53:94:6c:3f:68:24:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:99:FE:34:47:47:2A:6C:AB:A9:6A:CB:4F:50:95:F9:A5:13:0B:91
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uJn-NEdHKmyrqWrLT1CV-aUTC5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:a7:4d:50:d2:12:eb:1f:2a:d8:af:3a:35:c2:af:26:20:87:
22:13:a4:ef:d2:4e:69:3c:0f:77:31:ca:28:f1:0a:43:3b:ef:
a3:88:a3:ed:b2:c7:5d:40:6e:5a:d3:22:66:6d:34:e7:cc:29:
87:33:09:4b:ba:e3:b9:fb:d8:31:2e:f5:9e:c8:7c:de:80:de:
a2:98:6e:e8:a8:66:51:84:fa:05:ee:97:d8:2d:a1:d7:57:e1:
2c:b3:a3:6c:cf:d5:ad:55:7a:09:bd:9c:b0:5d:97:64:ba:06:
2d:95:c0:15:7a:7f:d5:05:52:9d:bc:12:76:3a:02:d0:da:3c:
07:73:3a:65:eb:60:ae:6b:b0:36:4e:eb:77:b9:b4:69:1e:f8:
d5:4f:27:d8:f8:95:13:9a:53:f2:b3:a0:b8:b2:ca:7f:84:06:
41:2c:0f:68:42:35:74:24:32:1e:00:12:25:3e:57:ec:49:95:
47:98:51:93:5f:e2:a2:d8:c2:14:3d:c5:cf:e4:70:87:3c:50:
51:f5:ee:1b:fe:fe:fa:bc:a5:a9:04:03:87:9d:12:ca:69:0c:
7e:05:55:4c:a8:96:8f:5e:c5:2d:ba:be:9e:73:70:77:70:83:
33:b2:dc:9c:48:18:fe:cb:a3:93:ed:3a:a6:be:3e:03:0d:82:
35:c7:e8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 21:56:15 2024 by rpki-client on console-fra.rpki-client.org