Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FYxdO6PcklfUs0tCdQTCBjbimQQ.roa
File: FYxdO6PcklfUs0tCdQTCBjbimQQ.roa (raw, json)
Hash identifier: DOoR0hFyevTJm4Ba0DnvoHfNiFbgn0dXxkmv8rgHvoc=
Subject key identifier: 15:8C:5D:3B:A3:DC:92:57:D4:B3:4B:42:75:04:C2:06:36:E2:99:04
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01908C7556B4EA34CA1CFA946E7DF2713FD8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FYxdO6PcklfUs0tCdQTCBjbimQQ.roa
Signing time: Sun 07 Jul 2024 09:10:18 +0000
ROA not before: Sun 07 Jul 2024 09:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jul 2024 10:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8c:75:56:b4:ea:34:ca:1c:fa:94:6e:7d:f2:71:3f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 7 09:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=158c5d3ba3dc9257d4b34b427504c20636e29904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:32:df:95:36:ef:5a:4d:37:7c:9f:7a:16:
d4:98:73:ad:97:30:cc:3a:9b:42:7d:f9:b4:1a:c6:
56:b4:73:ae:35:ac:3a:ba:35:a3:79:ea:23:88:b4:
7a:99:bf:dc:e4:8b:53:92:2e:bd:aa:70:21:d8:54:
65:2d:66:e1:ae:63:71:1d:6c:ef:fa:21:38:01:78:
37:61:a4:9a:f1:d4:60:2f:56:63:b4:a2:3b:58:94:
af:58:a2:ad:51:77:58:e3:85:9a:3f:90:4a:a3:00:
4d:21:6d:96:e2:80:e3:af:cc:b7:d9:df:80:0c:76:
cb:78:cd:08:62:5e:b3:83:c9:71:af:a7:4d:35:4c:
5a:15:a6:f4:4c:98:74:5f:e0:0d:d0:08:db:a4:0f:
f7:01:9e:f0:c3:f9:9f:d4:24:f2:0f:36:e5:c7:19:
d6:f0:46:86:60:df:63:00:e6:a7:89:d3:00:22:55:
14:2a:99:68:49:43:8e:45:63:b5:18:b4:f4:3d:9f:
fa:db:d4:bd:09:d1:17:d7:96:e6:7b:07:47:ee:95:
4b:73:03:59:e6:b6:bf:dd:aa:e7:02:8e:fe:44:88:
96:e1:e6:f6:2c:d7:22:48:a5:18:56:96:5d:ea:7a:
0f:7d:48:ac:02:85:55:48:c1:ce:4e:41:d5:ce:6f:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8C:5D:3B:A3:DC:92:57:D4:B3:4B:42:75:04:C2:06:36:E2:99:04
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FYxdO6PcklfUs0tCdQTCBjbimQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:fb:e6:f0:d5:ca:dc:5a:8a:8f:87:8d:c9:7d:1d:fa:c2:93:
80:9c:69:cc:9c:31:a7:5c:67:a5:7d:53:24:6a:aa:22:c5:be:
81:0b:d7:06:82:73:a1:5d:cf:72:a4:7a:64:e1:b7:1c:07:1d:
c1:69:26:ab:fa:7f:38:13:f4:26:40:c4:07:ac:6b:c0:c9:bf:
fc:13:43:24:b9:f6:a1:18:78:ba:b2:df:a8:83:20:7b:08:03:
9b:f7:94:6e:20:21:18:43:5d:3e:1b:a3:d9:ee:0f:71:88:06:
fe:13:17:30:4f:65:ee:f4:c6:c4:00:4f:6c:3f:fa:13:0c:e6:
b2:15:e2:e4:d7:75:1b:b8:d1:c1:21:f4:e2:4d:bf:1e:a2:ad:
e1:6f:86:39:b9:c5:47:4c:91:7e:be:53:3c:75:46:6b:9d:7a:
eb:d6:d9:0f:09:6d:5f:7b:5c:c5:48:55:19:0e:c4:ce:49:02:
7f:29:30:97:e5:44:1d:dd:71:65:56:70:c7:83:f5:64:c4:60:
49:2b:29:04:72:42:23:05:aa:5d:b5:7e:c1:83:de:f6:b4:c4:
6f:82:f6:6d:ab:58:68:25:6e:98:45:1d:eb:37:3c:ff:dc:fc:
21:a0:f9:fc:d8:22:e4:df:22:bb:85:f7:53:80:c5:ba:ab:49:
71:fd:b4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 11:32:54 2024 by rpki-client on console-fra.rpki-client.org