Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yq8DBiQL7-Morq8zQr4bDZJodEU.roa
File: yq8DBiQL7-Morq8zQr4bDZJodEU.roa (raw, json)
Hash identifier: SjJsy6qHVTvCAHB1Lfw3Ar4G6/QtadqQ3Ijfd+IZCxM=
Subject key identifier: CA:AF:03:06:24:0B:EF:E3:28:AE:AF:33:42:BE:1B:0D:92:68:74:45
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01900EB88F4CF659750A564CBD11F5DF2DC3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yq8DBiQL7-Morq8zQr4bDZJodEU.roa
Signing time: Wed 12 Jun 2024 23:11:34 +0000
ROA not before: Wed 12 Jun 2024 23:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Jun 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0e:b8:8f:4c:f6:59:75:0a:56:4c:bd:11:f5:df:2d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 12 23:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=caaf0306240befe328aeaf3342be1b0d92687445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:1f:20:79:35:b3:4e:a5:9c:28:48:79:4f:
22:18:fe:dc:8a:3b:d0:c1:84:b6:14:61:84:9c:d5:
60:25:09:97:06:c5:87:ab:75:60:2c:73:36:ef:23:
6e:a8:10:40:d1:2e:a5:ea:d4:42:78:fc:e4:03:70:
c0:9e:71:73:48:85:f1:6b:8e:a0:2e:6c:0e:da:f9:
4f:94:12:47:b8:f6:a2:74:43:41:5e:36:48:56:f7:
99:9b:4d:f8:d5:5d:20:96:27:c8:60:43:c2:1c:c5:
83:7f:54:79:5b:a2:96:81:e4:be:96:cd:28:82:9d:
ab:f1:d4:a0:bc:40:9d:b4:db:f3:58:c3:1c:33:8e:
2b:ea:38:e4:40:92:14:97:81:a1:26:34:75:60:91:
36:8b:b1:d4:be:01:37:3a:44:4a:32:74:f7:39:a7:
93:88:5e:b0:31:b2:03:86:c1:db:75:4f:f6:a9:9c:
75:87:6a:a9:15:01:d1:cc:c0:ed:17:72:b0:99:74:
96:76:e6:c7:7d:ee:de:0f:03:4b:0a:40:a4:4d:d4:
f5:23:81:99:56:0b:8e:29:61:dd:a3:7d:c1:b2:c9:
7a:6b:e8:e3:72:26:78:96:28:fa:f9:28:71:cd:22:
5f:70:8f:44:d7:75:fc:4e:a6:26:87:b0:84:ed:b9:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AF:03:06:24:0B:EF:E3:28:AE:AF:33:42:BE:1B:0D:92:68:74:45
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yq8DBiQL7-Morq8zQr4bDZJodEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:d7:e2:4b:b6:60:f3:59:2b:39:dc:9b:17:30:be:a2:f7:2f:
9d:39:f9:5d:a1:39:1f:b9:32:db:e5:b7:65:01:a4:75:39:c2:
81:2d:64:d6:ec:1f:ba:f9:ee:d0:09:74:d2:50:eb:82:42:22:
45:00:e8:5b:1a:8e:06:2a:3a:e6:eb:6e:21:e3:d6:73:cf:9a:
f5:88:18:fb:51:09:26:b6:23:a6:d2:e7:fe:d7:83:4f:a4:c8:
16:0e:49:97:73:ad:98:f8:95:56:d2:98:df:20:8b:e8:8c:69:
a4:0b:d5:ee:4f:93:22:7a:b3:83:bb:a9:00:17:69:0f:b2:6e:
30:43:e2:b7:25:bd:03:05:1c:01:d7:47:36:16:4a:7e:0d:9f:
e6:dd:e1:b8:0b:13:b1:98:8b:17:18:a9:6e:b7:cf:01:16:7a:
56:e5:92:00:ad:2d:4e:26:8d:22:54:0e:b2:0e:2d:56:5b:cd:
39:6a:c8:40:d6:6e:57:30:4c:b5:84:6b:71:7b:1d:c6:50:33:
c4:c6:8c:a0:5a:d2:23:8d:12:46:8f:b0:51:18:d7:fe:21:b5:
5b:f6:35:87:b1:62:78:eb:73:de:76:e0:ef:fa:3f:31:dc:be:
6b:4e:12:1a:28:24:bb:63:b6:5b:58:6e:5d:5c:4e:9f:65:ca:
d6:bd:9c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 01:11:14 2024 by rpki-client on console-fra.rpki-client.org