Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EtuqWWCXWIg1uLFswlXRwR6rs6A.roa
File: EtuqWWCXWIg1uLFswlXRwR6rs6A.roa (raw, json)
Hash identifier: NmRx8865xPgLVtWS7dzpGpMDcZ8z0D7qc+TfKnyTN8k=
Subject key identifier: 12:DB:AA:59:60:97:58:88:35:B8:B1:6C:C2:55:D1:C1:1E:AB:B3:A0
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01908226CA0332B2A624B2ECD781DCD7DBE3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EtuqWWCXWIg1uLFswlXRwR6rs6A.roa
Signing time: Fri 05 Jul 2024 09:08:18 +0000
ROA not before: Fri 05 Jul 2024 09:08:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 05 Jul 2024 10:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:26:ca:03:32:b2:a6:24:b2:ec:d7:81:dc:d7:db:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 5 09:08:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12dbaa596097588835b8b16cc255d1c11eabb3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:26:97:fa:41:9d:c8:be:40:80:4f:ab:92:
0a:ca:18:0a:d7:36:19:57:01:12:36:4f:a5:42:37:
9b:2b:d9:5b:4a:95:6e:14:3d:a9:82:8d:aa:f3:04:
a2:bb:32:78:75:4b:3a:93:70:92:d4:b0:ee:2c:23:
93:cd:a6:00:37:39:25:ea:a7:76:04:c2:16:25:c2:
63:be:92:08:63:2d:66:4d:70:c6:46:4c:57:6a:60:
92:a9:b0:90:eb:46:00:af:f3:a8:2f:90:54:56:23:
e7:c4:4c:09:67:c2:59:99:29:b9:11:5f:7c:9e:40:
11:1c:3d:ee:ed:26:99:c0:fb:f6:c7:b1:3e:3f:a5:
0e:6c:1b:e8:f6:93:3b:42:7d:2a:07:1f:b1:4a:81:
ef:0e:e7:ed:93:85:d8:9c:43:ee:1c:70:71:3e:90:
e2:f3:40:32:17:ec:a3:09:cc:e0:f6:38:71:85:87:
95:f6:04:26:1f:07:78:87:9b:ca:b4:83:1b:19:d9:
d4:88:74:5f:f4:7e:08:38:5e:c3:e7:6d:41:53:be:
c8:f2:7f:9a:f1:f8:fa:8a:28:ca:d2:0a:34:a1:c7:
f3:26:c2:38:e4:45:c7:6b:d2:56:5f:25:11:ae:ae:
a5:01:a2:c6:1b:e2:dd:c5:0d:5a:72:75:61:43:67:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DB:AA:59:60:97:58:88:35:B8:B1:6C:C2:55:D1:C1:1E:AB:B3:A0
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EtuqWWCXWIg1uLFswlXRwR6rs6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:38:67:ff:c3:fd:c1:84:1c:2b:ff:c4:64:d5:fd:ad:e7:9b:
a2:d5:ec:5d:e0:8a:bd:8a:83:71:b3:96:da:5b:61:e3:79:f5:
63:e0:19:53:b8:49:db:48:81:16:ae:6b:71:56:05:f9:9e:46:
68:c1:ec:47:c8:53:03:4f:b3:84:45:61:66:f2:0a:c2:2d:22:
bd:cf:15:38:52:c8:a8:6c:65:ec:fe:43:22:f6:3a:03:22:95:
f2:56:d0:8d:3f:3a:d9:2e:a7:f4:bd:6d:2f:57:8a:d0:f8:9d:
b8:08:eb:7a:28:29:ce:ba:a7:cf:ed:fb:3f:67:01:68:47:b0:
88:ef:54:5b:ee:ba:c6:2d:44:00:a2:35:82:b3:6b:95:f3:b7:
e6:ba:05:31:ba:08:3b:1b:4a:dd:61:d1:6b:14:5a:e4:89:36:
4c:60:96:85:57:ee:ce:24:2a:fb:c8:a9:5c:e0:98:dd:d9:7e:
76:56:33:cb:27:27:15:e5:e8:63:29:51:fd:93:45:cb:62:26:
51:3f:81:c7:ff:06:f3:84:e9:d3:e0:62:3e:6d:7b:92:9f:68:
5b:c2:4d:64:62:be:4c:43:35:17:6d:ca:19:09:e7:34:cc:39:
2e:62:e9:61:9b:0f:65:6b:18:00:15:62:58:16:5f:5d:f8:21:
2d:2d:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 11:54:20 2024 by rpki-client on console-fra.rpki-client.org