Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GXxdd4ofgxwfo3fw7dwNEPJ5FoY.roa
File: GXxdd4ofgxwfo3fw7dwNEPJ5FoY.roa (raw, json)
Hash identifier: QmABm5elD4AtvKC4nhR/GsgBBrwp01ma3wQBwviLr9k=
Subject key identifier: 19:7C:5D:77:8A:1F:83:1C:1F:A3:77:F0:ED:DC:0D:10:F2:79:16:86
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01900B49A6F7B967321CF2FCF2C56052B01D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GXxdd4ofgxwfo3fw7dwNEPJ5FoY.roa
Signing time: Wed 12 Jun 2024 07:11:34 +0000
ROA not before: Wed 12 Jun 2024 07:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Jun 2024 08:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0b:49:a6:f7:b9:67:32:1c:f2:fc:f2:c5:60:52:b0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 12 07:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=197c5d778a1f831c1fa377f0eddc0d10f2791686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:cf:d4:93:d6:37:cf:77:7c:3b:9b:68:cc:
12:11:e0:8d:06:44:e6:43:92:92:f7:65:7b:1a:48:
ec:e8:e8:ba:44:c8:c2:7c:82:5d:93:47:0b:bc:be:
1d:13:a8:7b:fb:ac:a3:8b:a6:38:3a:76:ca:9b:a3:
d2:41:d0:d7:a2:6f:78:df:74:69:85:b5:8c:ef:63:
8a:78:12:9e:bd:e4:26:64:aa:6c:b1:83:7f:e6:fc:
10:b6:43:71:b3:f4:c7:75:5a:da:10:87:bd:0f:d2:
99:4f:67:d4:1e:3e:e9:ac:23:e6:27:f0:c7:69:55:
40:91:10:61:8a:36:f2:15:80:8d:04:a1:f6:d6:26:
90:da:d7:4b:43:16:aa:0c:d3:0a:07:be:18:41:c2:
96:3c:95:16:69:2d:56:da:df:f9:a1:2b:d1:bb:75:
ae:a6:7d:25:56:1b:b4:86:09:5e:b9:a7:be:ca:fc:
07:fe:05:e4:03:06:ff:27:d2:07:fc:cf:8d:1d:3c:
7d:6b:11:47:34:eb:e5:98:4e:80:7f:86:97:a5:f9:
71:f4:0b:5c:68:ba:72:98:71:1c:9b:1c:75:13:50:
e6:29:5b:f0:ec:e4:d4:41:cb:2e:e3:75:2a:56:61:
1d:72:98:5f:5e:3d:70:ce:a2:c3:b2:e4:31:0e:b9:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7C:5D:77:8A:1F:83:1C:1F:A3:77:F0:ED:DC:0D:10:F2:79:16:86
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GXxdd4ofgxwfo3fw7dwNEPJ5FoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:01:e6:c7:79:73:17:40:7d:d2:83:06:d2:5c:dd:ca:94:07:
78:28:33:96:f6:4b:dc:e3:44:77:9d:01:4a:af:a0:fd:58:d3:
eb:b7:44:bf:70:0b:cf:02:0f:55:5f:f8:1f:bd:9e:6a:ee:c3:
0b:1b:e8:bb:eb:0a:cf:49:c2:c6:3e:8a:5f:fa:a7:bb:3f:cd:
cf:77:09:f3:62:88:32:67:06:40:77:d9:67:5b:cf:25:77:2f:
5e:d4:e9:d7:bb:37:b6:93:d5:7a:b2:00:01:ed:e7:52:92:c3:
fc:59:a5:ed:9c:a2:87:6c:8f:fe:cb:01:00:12:7b:76:6f:a2:
13:34:16:06:10:96:59:c3:e2:d5:25:00:31:52:6d:4b:07:74:
35:60:a0:0a:24:23:90:d2:66:d9:07:cc:70:0b:b5:ac:71:1e:
05:a4:93:71:4a:b2:2e:8c:46:0f:8d:1b:39:ea:dc:81:25:cb:
8f:12:b9:10:e5:65:35:2f:c4:e9:a0:d5:e9:6d:84:24:71:3b:
77:82:62:4d:de:9a:1f:5e:52:b1:28:50:a1:c4:4e:59:c0:b3:
6a:2f:45:43:91:ad:0a:6d:ec:15:a9:23:00:25:f7:70:c5:cd:
dc:eb:21:38:42:ae:00:af:c8:52:a2:55:2f:81:36:7e:4c:d6:
a0:2e:cf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 11:19:01 2024 by rpki-client on console-fra.rpki-client.org