Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/z9IzXwu8ORf64dKaYaiod1bw9bw.roa
File: z9IzXwu8ORf64dKaYaiod1bw9bw.roa (raw, json)
Hash identifier: 8ifgbWY7eCEtH6YUVsxNk9e091v1t0h8+4m1f+YT8s0=
Subject key identifier: CF:D2:33:5F:0B:BC:39:17:FA:E1:D2:9A:61:A8:A8:77:56:F0:F5:BC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FEA063B0D87E5B49ECF2277260CF06C96
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/z9IzXwu8ORf64dKaYaiod1bw9bw.roa
Signing time: Wed 05 Jun 2024 20:10:27 +0000
ROA not before: Wed 05 Jun 2024 20:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Jun 2024 21:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ea:06:3b:0d:87:e5:b4:9e:cf:22:77:26:0c:f0:6c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 5 20:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfd2335f0bbc3917fae1d29a61a8a87756f0f5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:6a:08:41:3e:48:4f:de:cf:54:4f:b9:4f:
02:62:56:15:13:fa:df:b8:b8:bc:c2:34:dd:3e:43:
40:f3:96:16:de:b2:4b:52:2e:9e:05:eb:cd:e7:ba:
2d:12:4d:0b:39:d8:21:b8:9e:a3:d8:02:41:de:e3:
55:f5:18:6a:07:b0:56:57:dd:40:08:ae:a6:13:40:
e5:7f:6e:01:47:bc:11:9e:77:bf:c4:46:a0:17:1d:
e8:74:04:0f:d2:85:12:d2:59:3c:b1:89:39:10:3d:
78:c1:d3:6d:69:c9:9e:21:1e:59:2e:bc:74:f3:27:
a6:9a:4e:57:28:77:5b:e9:d7:cb:73:55:1d:6c:7d:
df:4e:52:20:d5:74:ec:6d:d7:34:1f:71:b8:f4:f0:
d0:a4:6f:0c:08:16:2e:34:a5:fa:7d:78:8e:37:ba:
92:73:6e:d9:8d:cf:3a:c1:20:33:2a:07:23:78:79:
5b:10:77:7e:77:1f:bb:4a:36:5c:14:65:cb:a0:2b:
16:12:3a:9e:91:d7:ef:25:cf:a4:28:4d:c2:3c:3f:
6c:1a:41:65:7b:d5:c0:c6:56:cd:8a:7b:e6:a1:bb:
f0:e2:b8:12:ea:f1:bd:b1:fd:6e:01:d0:1d:bf:38:
36:31:25:dd:02:b1:92:b9:20:f2:90:72:88:4b:59:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D2:33:5F:0B:BC:39:17:FA:E1:D2:9A:61:A8:A8:77:56:F0:F5:BC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/z9IzXwu8ORf64dKaYaiod1bw9bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:b6:17:d9:ca:0c:c7:1e:3f:10:ca:d8:f9:29:c4:0b:f3:db:
4a:1a:37:30:9a:bc:38:a0:e0:d9:e8:45:a7:d8:36:96:7a:ca:
9f:c6:6e:2a:a2:5e:25:35:61:22:ae:d0:d9:c9:59:74:55:f4:
cb:fa:a6:78:09:a4:0e:ff:34:fb:4a:5a:1e:e5:e4:f0:33:28:
96:77:18:26:ff:90:ac:00:6a:cb:34:c8:c2:6c:a0:f3:52:10:
3b:af:fa:6f:4b:72:36:60:81:6b:1c:58:a3:b6:79:ec:4f:27:
85:08:19:11:cd:15:45:08:29:6b:f6:fa:a3:b1:1a:3a:9e:c0:
9d:c9:3d:08:0f:ac:62:ff:f3:50:79:d1:fb:dd:a5:6f:64:83:
56:58:a3:2c:ce:66:c8:5c:3b:f1:8b:d8:2f:f8:2a:57:76:de:
0b:6e:0b:63:f9:26:37:f3:db:d7:60:03:26:06:c9:f3:6a:19:
94:cb:ef:9e:1e:14:77:7b:85:24:40:aa:4e:5d:09:25:7e:de:
ff:42:d6:52:2b:3c:e6:2c:1a:38:52:aa:8b:d5:10:a3:c2:4e:
63:82:d9:fc:c6:1a:de:0b:29:ac:cf:50:e1:41:cd:ea:d9:d9:
a1:b1:7e:17:d1:9c:54:02:a2:34:16:e8:59:ed:16:62:af:30:
c1:94:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org