Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7Ug_rlai76xzJt8HkZBb-oNSZl0.roa
File: 7Ug_rlai76xzJt8HkZBb-oNSZl0.roa (raw, json)
Hash identifier: NPiDJnJ7RGd+57Wq9DAWT3dx8aqLgA8pmB2dQpfCwyw=
Subject key identifier: ED:48:3F:AE:56:A2:EF:AC:73:26:DF:07:91:90:5B:FA:83:52:66:5D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019085626D7414803CFFBF2CE99E96CAC9F6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7Ug_rlai76xzJt8HkZBb-oNSZl0.roa
Signing time: Sat 06 Jul 2024 00:12:18 +0000
ROA not before: Sat 06 Jul 2024 00:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 06 Jul 2024 01:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:85:62:6d:74:14:80:3c:ff:bf:2c:e9:9e:96:ca:c9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 6 00:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed483fae56a2efac7326df0791905bfa8352665d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:c3:36:95:25:b6:1e:15:80:6a:2e:60:bc:
e4:46:7f:4f:1d:5d:09:4f:9f:6c:09:ce:cf:6a:e6:
59:3d:16:26:a1:b7:61:2d:ac:33:2c:ee:88:04:b7:
0f:11:81:9f:bc:a6:b1:ac:05:e2:a3:78:54:4c:3d:
80:27:a9:03:b4:3a:b0:09:69:94:ca:07:0c:59:02:
a4:6a:6d:d8:3e:bf:8a:55:6b:0b:c2:0a:f9:7f:2b:
bd:83:a0:4d:00:ba:62:60:15:b5:ac:b9:1a:cd:36:
3d:c4:2a:35:dd:63:82:a0:5b:0c:93:13:ed:30:84:
14:34:40:76:fb:38:bd:96:5e:a8:1a:77:cf:5a:fc:
27:5d:2a:9b:55:a9:4a:2b:17:15:2a:61:60:d2:be:
3f:30:9d:3a:c3:65:c2:9b:f0:ee:8b:c3:20:38:f8:
7e:93:22:3e:da:76:4e:f1:19:86:2c:fe:ab:10:17:
c8:7f:7a:3f:56:1e:17:ed:e4:98:1e:9c:68:af:60:
b8:2b:9f:84:15:22:cb:6f:be:0a:aa:d1:5a:89:76:
f3:a3:67:f5:f4:a6:8d:0f:68:c4:a5:41:fc:b2:b1:
d1:43:32:62:b6:26:8f:fa:eb:76:b2:2c:26:85:5b:
38:65:9f:e6:12:a9:73:17:67:1d:cb:01:f9:cc:1c:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:48:3F:AE:56:A2:EF:AC:73:26:DF:07:91:90:5B:FA:83:52:66:5D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7Ug_rlai76xzJt8HkZBb-oNSZl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:e8:08:ec:2d:0e:bf:36:06:fa:8b:fe:7c:1e:83:fe:4a:00:
7c:c5:5e:e6:3a:e5:59:36:e8:8f:be:6f:d5:38:bb:c7:f3:3f:
b5:43:7d:6b:ea:aa:fd:05:58:56:fa:7c:5f:c9:c8:7d:bc:9f:
f0:13:ba:36:2e:3c:01:d5:36:03:d6:50:55:ac:64:2a:e0:30:
d8:25:f9:b8:a5:21:46:38:f2:2e:13:c2:73:c3:d6:6e:2c:2b:
5b:2a:2d:91:58:05:3e:a2:c7:a1:8b:63:8d:21:89:b4:d7:2d:
e2:d9:8c:9f:b6:68:4a:49:6e:f5:c8:d1:55:ff:d4:fe:4b:3c:
93:20:1e:b9:3c:df:13:e8:56:9a:32:59:88:59:17:23:00:8c:
3d:60:bf:52:9a:b1:c6:44:16:ef:64:7b:d9:bd:ae:67:5f:bd:
43:8b:52:11:d4:bc:ae:dd:85:bc:79:67:69:b9:33:b7:3d:ee:
41:82:a0:50:c0:a8:3f:77:a0:80:fb:1b:4c:77:56:d8:b8:37:
08:da:7a:e4:bf:6b:1a:a5:fa:59:55:91:d7:b1:48:38:90:b1:
49:4f:42:97:31:be:90:c5:d4:8e:5d:04:4b:81:22:a4:bc:0c:
c3:84:c6:05:2d:5c:87:fb:5f:d4:19:9c:58:45:c7:fb:5b:c4:
7c:88:d5:47
-----BEGIN CERTIFICATE-----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Generated at Sat Jul 6 03:01:31 2024 by rpki-client on console-fra.rpki-client.org