Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ELF8LDfA-gFh5XWG-tT7ONY6OtU.roa
File: ELF8LDfA-gFh5XWG-tT7ONY6OtU.roa (raw, json)
Hash identifier: Oykw4XB5uiTzz3QrZOGFgxcBl5P1WVkF1gXZAGcuGjg=
Subject key identifier: 10:B1:7C:2C:37:C0:FA:01:61:E5:75:86:FA:D4:FB:38:D6:3A:3A:D5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019088CF808978AFB6C6B02B9BE9FFE495AC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ELF8LDfA-gFh5XWG-tT7ONY6OtU.roa
Signing time: Sat 06 Jul 2024 16:10:18 +0000
ROA not before: Sat 06 Jul 2024 16:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 06 Jul 2024 17:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:88:cf:80:89:78:af:b6:c6:b0:2b:9b:e9:ff:e4:95:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 6 16:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10b17c2c37c0fa0161e57586fad4fb38d63a3ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:05:19:0f:50:50:7e:b7:c0:21:57:a8:2c:
b2:38:54:f7:fe:dc:b3:dd:e6:44:90:05:ff:12:03:
dd:b8:b6:59:73:9c:20:3f:d5:46:1e:7a:e0:50:be:
30:44:66:f7:4b:1e:eb:c5:6f:41:0a:97:03:83:69:
3e:64:64:ee:b6:2b:77:bf:b1:04:c4:f6:98:79:0d:
bd:54:b4:6f:ba:2b:f0:93:8d:b1:8e:aa:91:c3:2f:
36:7f:62:c5:53:94:1d:66:a6:e7:be:09:6e:97:6c:
dc:35:9b:6a:a2:ed:78:e2:13:1d:3f:f9:48:51:e0:
b8:0c:c6:32:e2:0b:a6:0d:a5:c5:37:68:00:bd:55:
f2:91:17:4d:e3:4c:d2:c7:68:43:3e:6c:91:b5:86:
25:00:18:63:c7:06:af:a8:45:28:1e:5f:57:75:58:
67:03:fe:a8:ad:ed:aa:ca:3f:2d:52:dc:b9:3e:93:
e6:0c:b5:04:36:8d:67:ff:1c:2a:c9:12:fd:09:0a:
20:47:7d:a7:92:b3:02:eb:b1:a9:9d:3d:d0:4a:3a:
a3:2a:a5:d0:0e:04:d9:29:de:ef:46:df:48:c0:1e:
2d:1b:40:ee:4d:06:17:51:dd:e6:66:85:d4:55:78:
d5:cd:41:1d:8f:1f:d8:dc:c5:64:17:2c:21:88:fb:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B1:7C:2C:37:C0:FA:01:61:E5:75:86:FA:D4:FB:38:D6:3A:3A:D5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ELF8LDfA-gFh5XWG-tT7ONY6OtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:eb:a1:75:46:b2:5f:42:3c:06:11:8a:b9:b2:9a:50:e3:1b:
03:3b:b1:51:2e:4a:f9:76:79:e6:a3:b1:1d:6a:df:d1:8d:81:
2c:84:3f:ad:43:4f:ff:2b:c9:de:22:67:c7:77:dc:94:54:d0:
69:f8:9e:56:52:0f:4a:cb:14:d7:e2:68:bb:be:bf:68:93:dc:
18:98:6f:83:b3:94:88:71:8d:da:29:73:71:cc:4d:fe:34:2a:
b9:ea:a6:0a:95:99:35:94:61:4b:45:a9:10:2d:f4:d1:be:7a:
ac:dd:88:92:44:fc:94:c8:8d:0b:56:40:9b:7e:18:86:69:5a:
9d:72:34:c2:99:1e:be:53:8e:e1:10:42:ff:10:5b:e5:f4:50:
00:78:50:44:5a:d0:11:c5:bf:0d:1f:5d:22:9f:01:8c:89:a8:
26:46:0c:c7:ee:65:03:3a:52:2e:08:77:90:f3:24:a8:7e:0b:
40:b1:a4:d2:c9:b2:78:ea:ce:e3:49:09:0e:63:75:8b:d0:8d:
ac:f9:cc:81:84:c6:b8:e0:05:fd:04:19:73:30:bd:7d:aa:2b:
8a:4c:69:86:45:d7:13:ef:db:c4:e6:30:80:2c:11:6c:5b:b0:
84:b9:90:14:33:80:8e:bd:be:2b:db:25:4f:29:78:f0:2b:8b:
90:0c:40:9b
-----BEGIN CERTIFICATE-----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Generated at Sat Jul 6 18:47:19 2024 by rpki-client on console-ams.rpki-client.org