Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Ak4lwlv0SYNjUkRb602aW7xo0qs.roa
File: Ak4lwlv0SYNjUkRb602aW7xo0qs.roa (raw, json)
Hash identifier: Tv7rtbPxFWkJDog1RDJ/tcPYgSPoDkraOU/+yVaArdo=
Subject key identifier: 02:4E:25:C2:5B:F4:49:83:63:52:44:5B:EB:4D:9A:5B:BC:68:D2:AB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FFAF9D364BA23C89ED5AD5868431C511F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Ak4lwlv0SYNjUkRb602aW7xo0qs.roa
Signing time: Sun 09 Jun 2024 03:10:27 +0000
ROA not before: Sun 09 Jun 2024 03:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Jun 2024 04:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fa:f9:d3:64:ba:23:c8:9e:d5:ad:58:68:43:1c:51:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 9 03:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=024e25c25bf449836352445beb4d9a5bbc68d2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:9c:fe:02:e5:61:7a:8b:40:be:a5:c5:0f:
71:34:5d:18:bd:bd:22:08:15:5a:ba:57:47:f1:e8:
7f:e3:d2:03:0b:28:6f:51:72:1a:04:79:1b:31:34:
10:fa:5e:03:5f:3d:8b:bd:1e:0a:00:0e:dc:0b:89:
c9:a9:f8:dc:0b:22:79:85:31:99:b2:55:6e:1a:48:
8f:1b:98:fd:ac:b6:5e:2b:00:2b:bb:b3:e0:ae:5e:
58:ab:a0:16:58:84:4e:07:f6:85:ce:9d:4d:f2:a9:
18:5f:3a:da:06:1d:0a:2b:40:ff:3c:81:f6:2e:22:
11:85:dd:f0:6f:e6:a8:c0:68:46:ae:bd:f8:73:0c:
0d:46:cd:f7:b2:10:1d:9d:10:c3:f2:da:85:33:51:
62:70:2c:28:9c:c8:87:45:5c:69:64:90:30:fd:43:
90:21:b3:9f:93:68:21:fa:a9:c6:66:70:03:bb:18:
b9:01:b0:c6:dc:96:40:f9:ee:83:4b:a9:d2:8c:e6:
7c:5e:89:70:1f:2a:42:a0:40:1d:3b:19:e0:13:84:
df:c5:68:00:b9:2d:36:b6:47:c8:71:e9:be:5a:28:
cd:fc:52:83:3b:53:ff:f8:7f:12:4f:0d:74:46:8f:
b0:98:f2:14:51:97:f9:84:38:ec:e6:c1:9d:db:9c:
e1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4E:25:C2:5B:F4:49:83:63:52:44:5B:EB:4D:9A:5B:BC:68:D2:AB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Ak4lwlv0SYNjUkRb602aW7xo0qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:24:4f:4d:fe:e0:56:f2:be:fc:6f:a7:2d:40:84:8c:04:c0:
37:2e:51:b4:24:30:ef:6d:f9:e6:2b:c7:82:37:68:e3:28:93:
06:44:4d:1e:9f:1e:ac:57:3d:a6:ed:32:ab:0f:bd:3f:cb:5c:
d3:b5:d8:02:01:f5:c7:d9:d0:5f:94:ac:69:00:76:e7:94:22:
2f:e9:19:0b:6a:65:1f:96:1b:d9:14:c8:b7:38:8a:71:40:b2:
3d:29:61:61:0a:dd:68:c6:6e:39:60:f7:fe:18:9d:e5:6a:73:
69:bf:11:22:03:21:49:86:c3:1e:74:da:0a:2f:36:a3:56:50:
0f:7c:02:c4:73:38:fc:2b:e2:7f:ba:c9:a8:47:fa:20:33:1b:
dc:8d:c3:0a:da:8f:2c:e0:12:85:b3:54:84:71:66:72:81:9e:
00:79:95:b8:da:bd:81:c9:e7:8f:b1:4e:9d:0c:a8:72:98:e4:
36:55:d8:8c:cc:66:7f:6c:96:7c:67:dd:f0:30:2a:02:70:f6:
1a:47:49:72:c1:21:2a:f9:a2:2d:8f:5e:77:53:22:92:fd:e9:
88:09:95:28:82:66:36:6c:dd:c3:fc:86:3b:ec:f9:b5:1b:18:
50:9e:8b:ed:ae:75:89:93:c7:84:18:81:14:d0:b1:55:8a:f5:
70:2b:ec:54
-----BEGIN CERTIFICATE-----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Generated at Sun Jun 9 04:54:41 2024 by rpki-client on console-fra.rpki-client.org