Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5yDSdAycG3JegfdR6IrQGPeSR1Q.roa
File: 5yDSdAycG3JegfdR6IrQGPeSR1Q.roa (raw, json)
Hash identifier: VpcnFiorhBtvmiMKTHZREbHgRg1B3yfT0tiG8yWogTc=
Subject key identifier: E7:20:D2:74:0C:9C:1B:72:5E:81:F7:51:E8:8A:D0:18:F7:92:47:54
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A4EE88B277DF0474AEBA2D305154F7FB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5yDSdAycG3JegfdR6IrQGPeSR1Q.roa
Signing time: Fri 12 Jul 2024 03:13:34 +0000
ROA not before: Fri 12 Jul 2024 03:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 Jul 2024 04:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a4:ee:88:b2:77:df:04:74:ae:ba:2d:30:51:54:f7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 12 03:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e720d2740c9c1b725e81f751e88ad018f7924754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:f9:96:c3:68:4a:9e:b5:b2:1b:4d:10:d1:
30:00:85:78:a1:65:54:03:62:db:ed:6b:80:c3:48:
41:c4:73:f0:9a:1e:5c:a6:9c:f2:83:7a:c8:19:d0:
00:04:69:c2:fc:dd:48:ec:1f:ea:2a:a2:1f:2c:1e:
4c:31:a7:32:28:f3:d0:1f:20:1e:52:47:4b:21:7a:
e0:24:33:92:35:78:cb:20:d2:e1:b1:91:42:98:1f:
51:f7:4b:d8:4f:d4:0f:18:f6:0e:d5:e3:b5:11:67:
23:0e:94:39:cb:7e:c1:b8:34:50:36:99:48:58:ea:
f7:f8:68:63:d2:83:c9:07:3c:94:95:3d:5b:04:4c:
68:00:55:93:dc:8d:e1:44:c7:15:cf:22:24:4e:7e:
b5:6c:ff:85:74:a4:e0:16:7c:cb:a9:5e:56:28:b5:
65:b6:3d:45:41:f2:17:af:a8:ff:cb:1d:d7:3a:6b:
97:2b:06:ef:59:08:0e:8d:a4:1f:65:f7:36:20:6e:
16:92:1f:1d:14:79:31:49:1d:5f:a4:8b:3d:a7:ae:
dc:4d:ae:e4:66:9a:16:21:02:e8:e8:ff:7b:93:a2:
7c:a0:6c:73:0d:f1:6e:8e:0d:2a:33:df:38:3d:26:
2e:ee:81:d3:cc:9e:ce:ab:c3:a0:95:17:24:a6:0b:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:20:D2:74:0C:9C:1B:72:5E:81:F7:51:E8:8A:D0:18:F7:92:47:54
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5yDSdAycG3JegfdR6IrQGPeSR1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:87:4a:30:7c:c5:4e:82:f0:9d:56:08:95:d0:c3:a5:ac:08:
fa:40:83:02:e6:9f:7f:3f:d4:e3:e9:7b:1d:53:fd:7e:0a:28:
33:1a:03:7c:2d:4b:b2:2c:7b:7d:ca:d6:36:73:73:d6:68:1c:
c3:3e:33:e7:cc:c6:2f:3c:cd:e1:0d:5d:5d:96:51:d7:a3:b8:
6d:86:1f:59:17:01:d4:85:0e:e8:d8:08:fb:14:93:90:53:8a:
f7:9f:5e:14:89:59:7a:a2:dc:48:c8:36:f8:cf:cb:a1:8f:49:
54:04:e9:a0:53:7b:78:99:8e:64:d5:11:4b:aa:41:d0:9b:9c:
25:5f:07:4a:40:c8:79:6e:f6:aa:9f:4d:93:77:1a:b4:42:ca:
26:ca:59:5b:ef:40:31:84:c5:f9:4b:0e:e6:c7:8d:8a:fd:fb:
05:c0:2f:36:fd:10:62:d3:6c:47:36:7f:7c:e2:b3:30:e4:e7:
bd:ae:d5:30:20:97:fe:e7:72:b0:e8:f5:a7:72:0c:9e:db:71:
88:44:5f:76:49:8e:11:65:9f:9e:c3:95:8e:ff:27:46:18:d6:
d4:ab:2b:de:f6:98:71:85:bd:98:72:30:28:8b:7e:40:22:71:
6e:38:54:b5:98:5f:e0:c6:3a:ce:f6:71:d9:e0:7b:c1:47:6b:
19:80:bd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 05:10:25 2024 by rpki-client on console-fra.rpki-client.org