Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/668DF8Jz_bSp0AkbSCpy8t5ZEBs.roa
File: 668DF8Jz_bSp0AkbSCpy8t5ZEBs.roa (raw, json)
Hash identifier: yo6v/SLqkZOGyRGGTkBKirGzOwocG72WEQU+TmK11pQ=
Subject key identifier: EB:AF:03:17:C2:73:FD:B4:A9:D0:09:1B:48:2A:72:F2:DE:59:10:1B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01902FC4087FD6CEB0AC39987FA5D285E13E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/668DF8Jz_bSp0AkbSCpy8t5ZEBs.roa
Signing time: Wed 19 Jun 2024 09:11:34 +0000
ROA not before: Wed 19 Jun 2024 09:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Jun 2024 10:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:c4:08:7f:d6:ce:b0:ac:39:98:7f:a5:d2:85:e1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 19 09:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebaf0317c273fdb4a9d0091b482a72f2de59101b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:25:a8:89:3d:40:36:03:6e:5e:96:91:69:
20:85:88:49:4b:31:1e:f8:ab:51:b5:0a:8d:0c:95:
9c:6b:86:d2:30:fb:3e:c3:bf:71:0e:12:4c:37:65:
9b:e8:a2:91:e7:2f:f6:45:8b:7b:8f:47:3b:04:3a:
54:b0:c3:46:18:b0:b9:71:7e:b6:d5:e1:18:8f:ea:
46:2d:ee:1f:db:84:71:11:cc:8c:3f:86:4c:41:f4:
46:b1:08:eb:ee:37:c2:08:c3:3d:65:4c:e8:10:81:
a5:39:59:ad:69:79:94:da:c7:5d:1b:14:b8:17:f6:
bc:e4:d1:89:28:5a:21:60:ac:3c:29:18:ed:e7:01:
fe:83:30:67:94:9d:65:5d:55:18:ff:e6:dc:02:28:
81:0a:97:06:6d:45:21:59:4e:2c:7e:0d:98:7d:c5:
4a:df:73:fe:cd:8e:d8:cf:b5:11:30:07:11:80:10:
b0:40:15:38:a7:e0:4b:5e:e2:b4:5e:81:a0:97:c4:
79:15:9a:a4:c1:73:37:2c:e1:67:68:eb:b6:b5:eb:
cf:26:42:a6:90:92:d0:7f:35:6b:02:18:1a:08:68:
ad:c1:b5:66:b7:e8:83:a8:a4:0f:0c:e1:18:f6:1e:
6a:6f:09:81:6b:27:70:57:f5:5b:22:b2:4b:1d:09:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AF:03:17:C2:73:FD:B4:A9:D0:09:1B:48:2A:72:F2:DE:59:10:1B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/668DF8Jz_bSp0AkbSCpy8t5ZEBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:ec:be:d7:9e:60:78:20:0f:1d:60:ce:88:4c:a1:e0:59:2f:
65:3f:07:f5:7e:45:35:62:1d:09:49:f6:ae:4c:67:95:cd:66:
a4:8c:66:06:c5:95:fb:b5:0c:18:f1:3c:cc:b5:38:62:dc:63:
c1:c6:1e:6b:25:1d:10:15:d9:1c:18:d9:9c:6d:25:78:15:81:
f1:d2:36:8e:fb:da:42:d2:9c:f8:0e:0e:5b:59:c8:0f:87:d0:
9b:6d:61:ea:58:2f:59:31:24:0a:6e:f7:24:2a:5b:b5:30:4e:
09:5b:51:96:10:23:b3:8e:f0:42:c3:0e:d5:61:92:24:f2:4d:
15:0d:96:fa:a7:bb:2c:80:a9:0a:56:1f:7d:44:ed:57:a5:36:
ee:65:0d:2b:a3:ef:07:c0:e0:5a:f9:c2:31:1e:26:86:36:1e:
4a:e2:19:a3:82:28:dd:d2:18:ed:0c:2d:c0:b7:19:c6:fd:67:
ca:79:48:35:ba:1b:f5:e6:a1:e1:79:e9:d6:bb:4f:d8:85:3c:
90:67:96:66:1f:44:58:d5:5f:a3:1a:bb:54:ed:40:85:da:78:
34:c9:ec:76:ad:0d:64:2f:db:4a:e1:ee:c6:ea:7e:03:5a:be:
bc:00:3e:3f:57:06:a7:3a:d4:e0:aa:f5:70:03:fe:52:51:53:
37:da:ff:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 13:46:34 2024 by rpki-client on console-fra.rpki-client.org