Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ygDxNAB8LnnSK3xy11hpkoB8q-8.roa
File: ygDxNAB8LnnSK3xy11hpkoB8q-8.roa (raw, json)
Hash identifier: t4YpYKH9gUp5vzZ3xjCNcm2hOZqJmY04UuTbrs0+fSE=
Subject key identifier: CA:00:F1:34:00:7C:2E:79:D2:2B:7C:72:D7:58:69:92:80:7C:AB:EF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01903C000CB1C19A325C4AF3FCF9DD770738
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ygDxNAB8LnnSK3xy11hpkoB8q-8.roa
Signing time: Fri 21 Jun 2024 18:12:34 +0000
ROA not before: Fri 21 Jun 2024 18:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Jun 2024 19:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3c:00:0c:b1:c1:9a:32:5c:4a:f3:fc:f9:dd:77:07:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 21 18:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca00f134007c2e79d22b7c72d7586992807cabef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:f8:d6:3c:e4:27:da:a5:35:19:36:a3:98:
37:95:32:25:9e:9d:c5:b5:93:51:5d:ff:d7:8a:7f:
df:fd:bd:9b:e6:a7:7c:9a:be:0e:d6:8b:af:5e:a0:
4d:f4:f6:28:3c:22:e8:f0:fb:c9:5c:c0:ca:2c:da:
d9:dc:b7:dc:03:00:1a:d5:33:98:fd:7c:ca:43:d9:
7a:03:2d:ed:23:d4:9b:4f:e9:9c:00:3d:b9:3c:d1:
c4:15:37:77:a9:22:b8:22:78:c7:28:66:e5:e2:51:
8b:e0:88:73:fb:71:5b:53:96:c1:19:8a:f2:a2:7a:
93:85:3e:1a:e1:3f:c8:f9:03:7a:0d:19:e0:5b:85:
e2:b8:6d:58:a8:5d:db:16:fc:cf:c9:76:94:9e:51:
63:68:5a:8f:64:b5:6a:20:84:d3:99:22:3e:5b:0f:
13:ee:2c:53:5f:e8:2a:3e:eb:1e:d1:98:bb:76:d9:
df:74:c8:0f:65:30:d4:41:d4:42:4b:90:cb:53:83:
4d:dd:a1:e5:57:7d:d6:22:7a:58:54:df:d2:75:66:
1c:7b:c0:ee:9d:42:fa:39:22:a8:4a:c7:9a:57:7e:
81:2b:d2:00:49:17:8d:9f:d8:65:55:27:f0:93:7f:
bc:19:54:b1:45:e0:07:25:4f:a1:32:e9:01:22:af:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:00:F1:34:00:7C:2E:79:D2:2B:7C:72:D7:58:69:92:80:7C:AB:EF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ygDxNAB8LnnSK3xy11hpkoB8q-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:da:00:48:73:a8:7d:31:c0:05:6f:d6:5f:4a:11:6c:4c:32:
bd:3d:4d:c8:1c:89:d4:16:eb:3d:85:19:17:3c:2d:04:ff:37:
e3:98:1e:7b:32:5a:a3:03:7b:f9:57:33:78:8a:a2:69:0b:84:
ef:de:c9:34:22:8b:3c:52:e4:e1:de:d8:bc:7b:da:cb:2a:10:
9c:34:93:48:3e:88:b9:c9:d1:e5:46:78:37:93:8f:b2:34:98:
61:35:9f:b1:77:5c:96:9d:05:52:85:99:8c:c1:7f:db:aa:79:
be:99:a5:db:f0:ba:94:0c:bb:70:1d:37:8e:de:6c:b2:49:ac:
d5:18:a0:b5:23:58:d9:e0:47:89:1c:ea:fe:2d:cf:a3:1f:0a:
ef:50:2e:12:0b:2b:8f:bc:cc:e7:22:fd:ce:c8:0a:14:7a:bc:
8e:52:93:23:b2:bd:27:61:da:e0:5a:90:f7:d3:b3:b0:97:40:
8b:08:bd:26:b0:24:de:fd:37:8c:2c:35:82:91:ef:44:f1:16:
15:8a:37:dd:d5:75:a8:2e:19:0e:54:b4:b3:c6:d7:bc:ae:19:
20:de:df:82:ef:68:f6:36:62:80:bc:5d:dd:f4:1b:1a:14:c2:
a9:fd:d6:83:8e:cf:98:fe:00:93:1b:9f:70:6e:1f:74:af:cc:
0b:ea:a1:31
-----BEGIN CERTIFICATE-----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Generated at Fri Jun 21 21:25:27 2024 by rpki-client on console-fra.rpki-client.org