Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E2b2NMx0flJBIeKzaFWIRBOd8nA.roa
File: E2b2NMx0flJBIeKzaFWIRBOd8nA.roa (raw, json)
Hash identifier: 0QJHrBCVDaXkcIePSyRZrjpmKwYKtagvHcNwjTdyzfE=
Subject key identifier: 13:66:F6:34:CC:74:7E:52:41:21:E2:B3:68:55:88:44:13:9D:F2:70
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A032619C3780486C6287399A5AA20C83
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E2b2NMx0flJBIeKzaFWIRBOd8nA.roa
Signing time: Thu 11 Jul 2024 05:09:34 +0000
ROA not before: Thu 11 Jul 2024 05:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jul 2024 06:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a0:32:61:9c:37:80:48:6c:62:87:39:9a:5a:a2:0c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 11 05:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1366f634cc747e524121e2b368558844139df270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:1a:f3:9c:e7:de:1b:9c:e9:ea:ee:f0:69:
ea:8c:02:d1:1b:82:37:b2:1f:60:49:59:e0:9a:be:
e9:46:e4:02:56:58:a3:5e:68:19:73:70:ec:6e:ec:
23:43:d0:c6:30:66:01:99:63:60:8a:ae:2c:84:27:
4a:52:75:e2:19:d8:86:40:b2:f4:2a:5a:9d:95:fa:
22:74:fd:b7:56:23:2d:0a:f1:cc:77:ee:d7:a3:0a:
8f:24:5c:b6:a1:05:df:1d:56:89:18:6b:e5:bc:9a:
a1:6e:b2:77:e6:2c:ca:40:01:ac:c6:6d:48:9f:d4:
e5:c6:c8:2c:4f:c9:c3:2c:59:73:d4:27:d0:1a:f1:
4c:25:9b:bb:f3:2c:a2:c2:0c:83:06:59:f5:48:4c:
2a:61:47:1e:52:5a:9d:ad:f8:88:25:a9:f3:4c:80:
2c:fe:b8:7b:7a:dd:84:28:bd:88:5c:8a:88:73:31:
2a:33:7d:d2:41:59:7b:c3:ad:35:c2:1f:42:5b:ce:
63:7b:18:f3:f9:ed:77:d0:50:ba:52:2d:fe:85:62:
87:b4:e2:3b:8a:21:7b:e5:1f:f6:33:01:d2:a4:5f:
7b:77:69:a7:b9:54:fb:e7:ad:a6:a1:8d:4f:ea:01:
75:2e:ee:09:96:1b:24:bd:e8:64:6b:ba:82:25:1e:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:F6:34:CC:74:7E:52:41:21:E2:B3:68:55:88:44:13:9D:F2:70
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E2b2NMx0flJBIeKzaFWIRBOd8nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:e8:e3:03:a5:41:fd:26:ea:30:1a:23:a8:7f:74:37:da:18:
c7:ab:38:c4:1d:f8:d1:38:56:13:34:c4:be:b0:ff:03:45:8a:
22:be:f4:38:d1:8e:da:43:85:2a:75:bb:f1:88:ae:4d:44:9f:
cc:2d:cf:cd:d3:ec:e7:e1:db:17:60:10:dc:e1:c0:4b:09:fc:
b4:9f:13:20:aa:d2:24:75:5a:d1:49:56:a1:01:34:12:b5:a8:
c3:39:c2:74:87:55:3e:e6:35:ec:18:86:42:cd:33:cd:ce:0c:
a9:60:7f:d1:f7:40:c2:4c:3d:75:7e:7f:82:33:ca:f3:e3:d2:
36:51:ef:35:5e:bb:2d:91:37:ea:5a:b9:a9:c8:67:5c:92:26:
0e:aa:80:fb:4d:d8:2c:00:a6:a0:71:2e:e9:b9:13:91:55:bb:
a1:73:7d:f1:28:c0:8a:21:c9:e9:45:cd:1d:7a:01:df:c0:8e:
fe:82:65:89:ce:15:80:75:d5:1f:9e:2b:d3:7b:e2:9b:c9:a6:
10:c9:18:88:15:64:fd:cc:2e:9d:4d:61:31:ba:39:f0:46:a5:
b2:7f:95:ff:c1:07:0e:07:8a:d7:0e:82:90:b5:b8:bd:60:99:
89:36:8f:5a:8f:96:48:0a:8c:6e:da:d4:52:ec:4f:99:fd:66:
ea:9d:c0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 07:51:13 2024 by rpki-client on console-fra.rpki-client.org