Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G4yjKujS85Sg5GpJYCZGMwwE9zE.roa
File: G4yjKujS85Sg5GpJYCZGMwwE9zE.roa (raw, json)
Hash identifier: v4t1qEGT30qYwaANlw4tOPCZXMKiMxduywG8iGXXxtc=
Subject key identifier: 1B:8C:A3:2A:E8:D2:F3:94:A0:E4:6A:49:60:26:46:33:0C:04:F7:31
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019030300FBDDDBB35F62F2BDB5C6B8CE919
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G4yjKujS85Sg5GpJYCZGMwwE9zE.roa
Signing time: Wed 19 Jun 2024 11:09:34 +0000
ROA not before: Wed 19 Jun 2024 11:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Jun 2024 12:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:30:30:0f:bd:dd:bb:35:f6:2f:2b:db:5c:6b:8c:e9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 19 11:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b8ca32ae8d2f394a0e46a49602646330c04f731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:bc:4b:a4:a1:63:fe:38:72:b6:14:d3:76:
3c:35:22:51:d0:5a:6c:dc:27:7a:59:4d:82:a5:8b:
2c:27:af:cf:ee:58:44:9e:07:45:11:8b:aa:14:75:
73:dc:1a:fe:e0:9a:a4:0b:73:ea:a2:a0:17:97:a0:
38:80:d2:bb:e4:77:58:9e:dd:6b:51:91:e1:1e:e1:
45:72:d6:ee:d7:16:b0:c8:6a:71:a4:39:ca:e0:65:
f9:64:36:66:a1:2a:8d:a5:24:2f:e4:92:2b:92:1a:
50:3e:28:f0:cd:70:22:ed:97:9c:2b:9c:eb:aa:ac:
66:1c:c7:d0:69:7b:e6:b7:47:61:28:6d:2f:58:03:
2d:b4:80:fd:12:1d:d8:33:52:80:49:86:ce:5c:8a:
90:c5:01:5b:10:bd:be:de:9e:06:37:48:20:bd:60:
17:ba:68:cb:46:92:fa:50:48:af:74:2e:a8:19:4b:
65:ae:1a:08:bb:c3:29:95:ba:be:f5:19:9b:ae:51:
0d:88:22:c7:81:5c:6f:d4:cc:fb:61:d9:05:db:64:
b4:49:30:1f:bf:25:85:a7:4b:c9:5b:7d:d4:a8:8f:
91:51:6d:09:53:ba:c2:53:a0:32:f3:d6:47:6f:77:
d9:fe:9d:23:35:4e:ac:c6:cd:e8:8a:ca:9c:ce:3a:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8C:A3:2A:E8:D2:F3:94:A0:E4:6A:49:60:26:46:33:0C:04:F7:31
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G4yjKujS85Sg5GpJYCZGMwwE9zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:ae:24:6e:86:b7:99:b0:18:9f:a8:cf:d5:98:2b:f5:93:c2:
26:34:91:f8:51:3a:6b:f3:a5:ca:4b:65:c4:78:00:00:89:d0:
dd:c5:28:3c:4d:99:64:98:eb:f6:60:87:33:08:e5:1b:a9:4d:
f7:08:80:97:bb:fa:c1:fa:79:4c:83:b9:6f:36:56:1a:99:6a:
e6:cd:b8:1f:91:2e:3a:95:64:ea:8f:4f:b8:a1:9f:61:b6:1b:
22:f6:05:a6:09:59:8e:a5:4e:e5:95:0d:9f:e2:98:77:c1:39:
b2:55:dd:a4:0d:83:5c:22:25:11:17:06:07:90:9b:e5:ff:00:
15:d8:e5:22:86:ae:e7:dd:1c:fb:36:c0:e1:f3:bb:21:3e:84:
eb:31:70:ba:f1:f8:f6:16:6f:0e:62:4c:ea:30:93:8b:2d:33:
32:07:bb:f2:c3:b2:b4:79:62:40:27:fc:12:ac:4e:1f:bc:77:
03:91:d8:cf:d4:ec:a4:94:77:46:d3:4d:b0:cf:d6:c7:a0:22:
2e:71:da:3c:1d:26:8b:3a:09:02:1f:b3:4c:5e:72:3e:3b:55:
e3:dc:4a:cb:39:52:60:77:2b:d9:2a:19:c5:fb:b9:1d:a7:b5:
a6:62:5d:3f:5b:f0:f1:0f:8d:6e:bf:78:ea:80:bc:d3:9c:3b:
29:87:3a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 15:54:36 2024 by rpki-client on console-fra.rpki-client.org