Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GAQW6ZhFbKHAjODshAiv70P_1Qc.roa
File: GAQW6ZhFbKHAjODshAiv70P_1Qc.roa (raw, json)
Hash identifier: +6SuYCMHp+MklCd4cCXR/CUWpmaKYVIFeFf7iYyzBT4=
Subject key identifier: 18:04:16:E9:98:45:6C:A1:C0:8C:E0:EC:84:08:AF:EF:43:FF:D5:07
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FEB897EC064B269A5EAD20C20BAD53A05
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GAQW6ZhFbKHAjODshAiv70P_1Qc.roa
Signing time: Thu 06 Jun 2024 03:13:27 +0000
ROA not before: Thu 06 Jun 2024 03:13:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 04:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:eb:89:7e:c0:64:b2:69:a5:ea:d2:0c:20:ba:d5:3a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 6 03:13:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=180416e998456ca1c08ce0ec8408afef43ffd507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:e1:62:db:c3:76:46:39:3c:41:5a:c2:07:
90:2e:c4:14:ac:41:2b:3c:4f:b7:42:66:38:53:05:
4e:36:a2:9f:4a:44:79:ac:a0:c1:ba:d9:0a:5a:10:
f4:03:26:8b:5a:92:33:d9:d9:c6:38:7d:d1:7b:01:
8d:9a:59:c2:f1:a5:46:42:5c:f9:d3:d2:06:36:b4:
a1:5d:65:69:71:52:72:66:1a:1d:68:8f:8e:86:b7:
59:81:74:52:e9:3d:ac:81:f2:83:2a:be:28:8a:a4:
11:fb:16:dc:10:3d:c0:19:a6:e4:68:74:0f:8f:fc:
b9:a6:1d:d4:06:ba:9a:31:47:70:c3:b9:78:7a:9e:
cf:29:9c:9e:73:2a:dd:3e:dc:4c:ff:d7:ee:c2:ba:
b0:9d:74:e6:e2:93:d2:c1:15:1d:c7:83:3c:a1:fb:
e8:21:df:62:7d:6a:14:39:b0:16:6b:ab:d1:3e:ab:
8e:e0:0c:b7:ee:b4:80:a6:5f:56:19:f7:09:83:87:
63:7c:68:99:cd:b0:51:f6:ab:cb:bf:32:5c:81:a6:
32:09:41:35:8b:1f:a8:bd:49:32:d8:bc:13:82:29:
a8:a8:42:db:03:84:0e:df:29:33:2b:d0:e2:b6:74:
22:d2:9f:b0:1e:e5:3c:b3:6e:bc:65:94:f5:c5:02:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:04:16:E9:98:45:6C:A1:C0:8C:E0:EC:84:08:AF:EF:43:FF:D5:07
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GAQW6ZhFbKHAjODshAiv70P_1Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:e3:c6:11:e8:e4:f4:b5:7d:ea:9d:5f:ad:fc:8d:81:53:38:
be:a9:42:69:7a:28:b6:9f:27:ea:91:88:d5:19:e9:3d:14:7a:
e4:5b:98:2f:f7:17:85:86:f6:79:23:c7:f2:27:e2:40:20:cd:
f2:b3:01:91:42:c2:76:59:c7:44:bc:8f:d0:95:5d:8b:25:43:
d7:c6:79:8f:70:23:02:f2:d2:e0:25:fa:6d:33:8e:78:21:02:
4f:e0:88:75:9d:c9:fd:49:ee:29:54:7f:a6:41:63:90:86:30:
57:05:a6:1a:d2:0b:3a:31:0f:23:a3:24:fe:97:25:34:f7:88:
fb:d0:41:4f:e8:94:e3:ba:a8:81:a0:cc:13:b0:69:5c:cf:49:
1b:ab:96:86:57:01:c4:ca:f4:d3:51:6f:ee:4c:7b:b0:b2:9a:
4b:03:3b:1a:41:48:11:c5:ec:7b:bc:55:9d:24:fb:2c:c1:a8:
77:77:7a:91:0e:ab:c4:3d:15:d5:17:61:0c:eb:5d:36:de:5b:
27:31:f0:6c:6d:42:28:9b:12:d2:eb:f7:51:fc:87:c7:ef:12:
5a:3b:04:cf:9a:7b:9e:55:08:3d:f0:fe:8c:2f:54:1c:00:f1:
15:a3:56:4c:40:c6:88:0c:34:4c:2d:a9:b7:f2:07:40:d3:f0:
41:cc:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:51 2024 by rpki-client on console-fra.rpki-client.org