Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uPoGEc8kUdjhnvQLLdn7sOceUHw.roa
File: uPoGEc8kUdjhnvQLLdn7sOceUHw.roa (raw, json)
Hash identifier: jRPEWOVPsjCoazf1kI/Mwk1cVsYZWH/CuSkToBEzYaY=
Subject key identifier: B8:FA:06:11:CF:24:51:D8:E1:9E:F4:0B:2D:D9:FB:B0:E7:1E:50:7C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019045A6258F34190D8840C3621A86C47C42
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uPoGEc8kUdjhnvQLLdn7sOceUHw.roa
Signing time: Sun 23 Jun 2024 15:10:34 +0000
ROA not before: Sun 23 Jun 2024 15:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 23 Jun 2024 16:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:a6:25:8f:34:19:0d:88:40:c3:62:1a:86:c4:7c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 23 15:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8fa0611cf2451d8e19ef40b2dd9fbb0e71e507c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:eb:31:2c:82:83:9d:1c:c2:6a:0d:37:78:
c5:d0:25:89:6a:48:55:5e:bc:9e:97:0d:9c:4e:c4:
9c:9d:aa:6e:1c:44:84:41:7d:1c:c0:83:6e:86:c4:
b9:05:59:61:b1:a3:59:55:4f:8e:0d:c2:01:af:22:
33:11:91:5d:4c:c2:43:95:06:87:6b:f9:8e:e6:21:
f4:26:3c:15:f2:1b:da:a8:7d:27:4f:6b:98:53:aa:
ff:76:83:a6:9b:38:c9:9f:71:1d:6a:20:bd:4e:0a:
81:df:57:63:e8:88:ff:d6:b5:98:b2:00:de:c8:8f:
74:49:bc:80:d2:93:3f:9d:f7:6b:b7:e7:5f:80:4a:
31:86:78:67:a0:90:89:10:90:ef:b0:0c:0b:cf:70:
f0:d5:5b:95:6d:35:ba:70:f6:9c:a3:45:bf:e1:25:
e5:f4:8c:30:7e:ec:af:f1:14:2e:55:0f:9b:69:a8:
08:e9:8f:da:cc:0b:a3:8e:ac:14:96:47:6e:ba:a4:
af:de:a3:b1:ef:73:09:af:26:26:a0:3f:42:94:e8:
f9:5b:15:39:4e:90:2f:ab:e2:60:6c:02:c4:fe:60:
da:ab:30:0d:f6:26:be:53:3b:ad:2c:5a:14:02:ca:
a7:bc:59:2d:4e:ee:f3:ef:79:a7:e4:87:47:34:71:
4c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FA:06:11:CF:24:51:D8:E1:9E:F4:0B:2D:D9:FB:B0:E7:1E:50:7C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uPoGEc8kUdjhnvQLLdn7sOceUHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:6b:f9:e9:9e:a0:f3:19:fc:dc:b8:cd:65:fa:27:ee:3e:ed:
d2:4a:38:09:d6:e8:6b:f8:9c:f4:cf:f5:01:c8:b6:3d:10:dc:
c3:4b:32:2e:dd:1a:0e:6e:79:cf:fd:60:ea:2d:3e:c3:04:ef:
99:74:ab:b9:1b:b9:5c:f0:00:58:00:13:11:9d:62:6e:08:5f:
9e:c4:d6:f1:99:80:1b:03:92:24:fc:d3:9d:a5:83:1e:b4:a5:
09:44:54:c8:07:4f:09:f0:e4:f4:63:4c:59:41:f3:97:be:6f:
d0:78:a2:58:1c:d8:da:51:e3:66:41:98:f1:ea:98:1a:a5:71:
70:85:a4:42:52:a7:53:02:8f:41:e9:cd:a7:47:67:ab:44:68:
10:cf:15:a3:85:43:55:01:09:8e:91:7e:72:3a:1c:0f:b6:7a:
9f:5e:1c:30:25:c6:bc:03:3b:3f:21:e1:11:3d:7a:9f:4c:73:
75:65:52:6a:9b:e0:8c:1c:e8:1e:96:7a:63:7c:7c:36:61:47:
ac:eb:aa:6d:df:b0:ac:25:ce:83:d1:30:21:f5:f3:30:2e:6d:
a1:12:d0:7a:03:5e:8b:d7:0b:63:e0:22:05:f2:3a:70:23:95:
16:71:0d:80:7f:67:4a:ee:c7:0c:7f:ad:d9:2d:ac:6a:39:28:
da:ad:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:24:56 2024 by rpki-client on console-fra.rpki-client.org