Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/742F4VKHrxMkQAh4DEeo70BLvuY.roa
File: 742F4VKHrxMkQAh4DEeo70BLvuY.roa (raw, json)
Hash identifier: U/+egbNguOZXVorHQ1Dt2jFP/MlCeydTeE0PKMPRK6Y=
Subject key identifier: EF:8D:85:E1:52:87:AF:13:24:40:08:78:0C:47:A8:EF:40:4B:BE:E6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FF22CB68DAF894C726C86CB3A1FFA30FE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/742F4VKHrxMkQAh4DEeo70BLvuY.roa
Signing time: Fri 07 Jun 2024 10:09:27 +0000
ROA not before: Fri 07 Jun 2024 10:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Jun 2024 11:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:2c:b6:8d:af:89:4c:72:6c:86:cb:3a:1f:fa:30:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 7 10:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef8d85e15287af13244008780c47a8ef404bbee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ac:c0:92:e2:1f:4e:8e:44:3e:32:c9:33:e1:
54:3d:4c:f4:8a:fc:0a:02:ea:50:c4:6a:56:94:2d:
91:19:9d:16:40:3a:5d:d9:f7:be:88:c0:f7:55:21:
4a:c2:cc:77:08:b5:d7:40:59:42:70:39:b4:d3:ab:
37:59:f5:a9:1b:a5:db:db:20:37:a1:01:24:57:91:
eb:a4:6d:4b:ee:af:b0:49:2c:f4:6c:01:a7:e7:b5:
f2:03:0c:86:ef:87:b0:da:0d:f7:80:f5:10:c7:fb:
8f:dd:64:0d:bc:95:0e:ac:5c:cb:ee:06:70:62:ae:
eb:fd:3b:c7:81:b7:18:d5:68:6c:d4:89:77:82:e7:
87:8a:a3:01:11:ea:f0:5e:1d:73:80:09:71:3b:3b:
b6:e4:b7:3e:9e:d0:92:12:5d:45:73:81:7a:b6:35:
3f:46:fe:1e:60:c5:0c:00:bd:fb:b2:ac:e8:62:6e:
c9:b7:73:8c:be:9d:61:14:f5:4d:44:79:87:ef:8e:
a3:71:ae:00:90:9a:88:45:27:6d:f3:88:31:aa:12:
a6:f0:fa:2f:19:82:dc:94:35:98:4b:68:47:21:ab:
25:60:ec:c1:b4:9a:38:0b:ac:a0:50:ad:61:a6:3e:
ed:b8:e1:45:ac:a6:1f:90:63:c6:33:43:4f:4b:5e:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8D:85:E1:52:87:AF:13:24:40:08:78:0C:47:A8:EF:40:4B:BE:E6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/742F4VKHrxMkQAh4DEeo70BLvuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:31:1f:de:c8:7d:31:45:d6:c7:e8:6d:9e:73:07:11:6a:f1:
79:bb:3e:bf:00:c0:19:4c:b4:19:c6:4f:45:39:2c:a3:7a:18:
fa:a9:37:ae:4a:ff:99:2c:05:b2:3b:5d:eb:7d:79:a8:b0:6a:
eb:3e:af:1a:a9:31:12:eb:42:e2:d0:b2:4f:46:56:52:11:9a:
15:d7:34:b2:0a:fe:23:d7:68:dd:cd:4d:72:96:ba:fb:03:8b:
45:9b:20:c6:81:31:40:f7:08:01:d1:a3:74:79:6e:45:6c:69:
35:0f:11:29:3b:45:04:41:3a:f6:a5:97:13:81:11:40:13:20:
86:59:25:01:a9:57:09:74:06:12:d3:fd:9c:0a:7d:3a:3a:3e:
7a:eb:8d:09:aa:a3:be:ec:b8:97:45:a4:34:88:2b:ad:d8:b9:
e4:d2:d7:c0:69:22:b3:6c:60:a6:02:31:f9:e6:4e:96:d2:1b:
3a:56:58:38:fe:78:82:32:eb:36:af:be:11:04:0a:40:6f:f1:
c7:d3:8e:56:e0:eb:2b:24:d9:ed:60:10:f9:42:30:80:83:43:
50:65:2a:58:8a:6b:d1:dd:d4:3e:1b:3d:22:d6:d6:86:84:d6:
34:74:f9:65:d0:0b:2e:f8:31:4b:5a:06:c5:11:eb:fc:59:a4:
fd:f2:cb:cf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/yLLaNr4lMcmyGyzof+jD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjA3MTAwOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjhkODVlMTUyODdhZjEzMjQ0MDA4NzgwYzQ3YThlZjQwNGJiZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36zAkuIfTo5EPjLJM+FUPUz0ivwK
AupQxGpWlC2RGZ0WQDpd2fe+iMD3VSFKwsx3CLXXQFlCcDm006s3WfWpG6Xb2yA3
oQEkV5HrpG1L7q+wSSz0bAGn57XyAwyG74ew2g33gPUQx/uP3WQNvJUOrFzL7gZw
Yq7r/TvHgbcY1Whs1Il3gueHiqMBEerwXh1zgAlxOzu25Lc+ntCSEl1Fc4F6tjU/
Rv4eYMUMAL37sqzoYm7Jt3OMvp1hFPVNRHmH746jca4AkJqIRSdt84gxqhKm8Pov
GYLclDWYS2hHIaslYOzBtJo4C6ygUK1hpj7tuOFFrKYfkGPGM0NPS16dWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO+NheFSh68TJEAIeAxHqO9AS77mMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvNzQyRjRWS0hyeE1rUUFoNERFZW83MEJMdnVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHsxH97IfTFF1sfobZ5z
BxFq8Xm7Pr8AwBlMtBnGT0U5LKN6GPqpN65K/5ksBbI7Xet9eaiwaus+rxqpMRLr
QuLQsk9GVlIRmhXXNLIK/iPXaN3NTXKWuvsDi0WbIMaBMUD3CAHRo3R5bkVsaTUP
ESk7RQRBOvallxOBEUATIIZZJQGpVwl0BhLT/ZwKfTo6PnrrjQmqo77suJdFpDSI
K63YueTS18BpIrNsYKYCMfnmTpbSGzpWWDj+eIIy6zavvhEECkBv8cfTjlbg6ysk
2e1gEPlCMICDQ1BlKliKa9Hd1D4bPSLW1oaE1jR0+WXQCy74MUtaBsUR6/xZpP3y
y88=
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:45:30 2024 by rpki-client on console-fra.rpki-client.org