Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vfjlWWUy553MQ9j7kKepZlO9gQQ.roa
File: vfjlWWUy553MQ9j7kKepZlO9gQQ.roa (raw, json)
Hash identifier: s4vlSNcO+FgoPkZjM91gbEKPVaJnc+yE0mnyr5ohjdA=
Subject key identifier: BD:F8:E5:59:65:32:E7:9D:CC:43:D8:FB:90:A7:A9:66:53:BD:81:04
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FEAAB057DA8DECEC7FDBA0EA072E45C95
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vfjlWWUy553MQ9j7kKepZlO9gQQ.roa
Signing time: Wed 05 Jun 2024 23:10:27 +0000
ROA not before: Wed 05 Jun 2024 23:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 00:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ea:ab:05:7d:a8:de:ce:c7:fd:ba:0e:a0:72:e4:5c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 5 23:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdf8e5596532e79dcc43d8fb90a7a96653bd8104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:dc:d8:a1:69:fa:c5:02:b5:a1:39:ee:4c:
25:94:6b:70:6a:0f:54:a7:b1:bb:72:5f:69:96:ae:
14:a6:8f:98:4d:6e:f2:5f:f9:2a:c2:0b:9b:c3:7e:
c8:f0:b0:b8:c7:29:04:ce:2b:2d:9b:55:22:d2:9f:
0b:32:e0:7f:db:c6:0b:7a:35:07:00:45:31:c9:27:
97:9b:1e:7c:0e:db:1d:f6:65:83:c8:f7:28:66:09:
9c:43:22:4f:5d:a7:e9:38:03:68:a3:72:b4:f7:d3:
cd:8e:65:ec:f9:b1:40:59:93:dc:d6:24:9a:11:a3:
eb:fa:e3:6f:94:ff:cc:ed:d9:f9:ae:f6:70:45:11:
47:7d:0b:e7:3c:eb:23:9b:52:36:23:e6:42:ff:9f:
e6:25:2e:ce:2c:45:e7:5c:f3:47:92:74:b3:2a:f8:
97:f3:82:10:9d:d7:f3:74:70:cc:b2:8c:b7:21:ae:
61:2b:e6:05:72:fb:39:77:aa:43:4c:6a:da:56:30:
62:e9:6b:8b:87:25:ff:d2:38:e7:23:cd:61:3b:07:
ca:07:ce:95:b0:6f:ae:b8:66:30:25:83:67:fc:25:
4a:aa:0d:1c:a6:b5:33:f3:5a:e9:c3:90:a3:95:08:
0f:03:d9:ea:df:61:33:17:82:0f:e5:c3:1b:02:4b:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F8:E5:59:65:32:E7:9D:CC:43:D8:FB:90:A7:A9:66:53:BD:81:04
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vfjlWWUy553MQ9j7kKepZlO9gQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:52:2c:df:54:5f:32:c8:ef:6b:c6:93:22:10:fb:38:e6:3a:
1b:1a:50:09:5a:24:94:a3:d5:5f:a7:b4:2b:11:f6:2c:d7:1d:
ff:3d:e1:3f:20:78:9e:80:e8:99:9d:2d:6d:84:1e:9b:bd:54:
17:d8:10:cd:08:10:5d:0a:75:6d:a3:e4:e6:d5:89:4d:cf:16:
49:e9:4a:f1:48:ca:3c:9d:0c:96:36:ba:58:f7:7c:05:a3:2a:
22:0b:a3:31:9d:c8:20:0c:57:53:99:16:13:e2:10:99:94:29:
ed:a9:ac:fa:ad:af:d5:e8:51:ca:81:f1:4a:95:0f:ad:71:ec:
fb:a9:39:b1:ad:14:3e:61:d1:64:61:a7:ed:df:71:d5:3f:60:
e7:23:13:f4:f5:c6:02:5e:5f:97:4b:81:ee:0f:44:ea:7b:13:
f4:c1:68:56:ee:c7:c5:e9:08:92:d9:3a:0d:fd:cb:9e:a2:eb:
be:eb:83:9e:c1:5f:fe:1a:ab:b4:7e:13:37:5b:57:f1:10:2d:
cb:fe:80:49:d3:ab:89:7e:39:9e:e3:aa:1b:90:41:21:e8:6e:
35:08:1f:5c:22:1c:07:93:bb:1b:ba:c5:93:0f:b4:21:97:8a:
93:88:b2:f4:97:86:62:94:7e:cb:22:72:56:3c:c5:4c:55:5d:
44:e4:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org