Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KxRjy2zZigbTMDXsQQ9Px6judsw.roa
File: KxRjy2zZigbTMDXsQQ9Px6judsw.roa (raw, json)
Hash identifier: 39v8h4+GBWvP1/jAUDfm644g8HErToriAhXEuWOLf5g=
Subject key identifier: 2B:14:63:CB:6C:D9:8A:06:D3:30:35:EC:41:0F:4F:C7:A8:EE:76:CC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019042DB1D1B90870B2E78D5028982AE515F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KxRjy2zZigbTMDXsQQ9Px6judsw.roa
Signing time: Sun 23 Jun 2024 02:09:34 +0000
ROA not before: Sun 23 Jun 2024 02:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 23 Jun 2024 03:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:42:db:1d:1b:90:87:0b:2e:78:d5:02:89:82:ae:51:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 23 02:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b1463cb6cd98a06d33035ec410f4fc7a8ee76cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:66:87:ed:8f:5d:38:b7:e5:4e:d1:70:64:
7f:f5:cd:b1:ba:a5:3b:b7:e0:dd:e1:e9:84:bb:71:
9e:eb:11:4a:54:34:ca:d5:be:b2:21:a2:f7:c7:8e:
ed:f5:4a:03:bf:a6:6b:42:cb:93:b4:1a:a4:5b:0c:
fc:4f:03:95:ce:ea:54:23:52:b3:d5:49:17:b4:64:
8f:0f:fe:dd:6f:58:f9:79:2f:26:dc:4b:41:d2:a7:
f2:f9:29:f4:45:a3:6a:fc:b0:13:1a:19:48:96:69:
18:ce:ed:a3:1f:39:54:9a:bb:7a:4e:a5:7e:b0:81:
e9:ec:23:f9:ce:12:ba:b1:bc:3c:6a:61:5d:1d:b1:
f6:03:66:e3:7a:6a:ff:b4:fc:92:29:15:e6:b7:68:
0c:d6:69:bc:52:1e:ef:59:2b:c4:ce:c2:3f:b6:e1:
f3:f1:3b:47:60:19:7f:5f:6c:15:4b:7b:06:4e:9e:
8b:eb:9b:76:7d:97:aa:73:dd:72:fa:3d:85:7f:56:
e2:82:81:7e:2c:54:9e:2d:60:09:19:60:05:09:6a:
70:df:5f:10:1f:c8:51:8e:26:ba:29:a5:51:9b:57:
f0:2f:ec:c6:0e:1d:af:a8:59:e5:42:f8:b6:54:38:
e2:eb:10:24:03:ad:5e:99:ed:7b:a5:5d:ab:f6:7f:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:14:63:CB:6C:D9:8A:06:D3:30:35:EC:41:0F:4F:C7:A8:EE:76:CC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KxRjy2zZigbTMDXsQQ9Px6judsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:27:14:17:91:b1:8e:d3:16:5a:64:b1:21:c6:3b:d8:bc:40:
37:18:f9:2d:d1:d3:c2:5d:d9:bc:4f:e5:40:0f:e0:33:74:03:
5a:7d:46:04:bf:52:21:6a:2c:a8:12:48:f7:bc:c5:e2:ab:b3:
9b:c2:70:75:35:8c:7c:7a:f2:48:31:8c:d7:d2:87:6b:45:89:
1b:56:14:f5:61:bf:e7:62:1a:08:64:7d:a9:b4:cd:98:ae:b8:
75:00:b4:30:88:de:a0:8a:8a:39:65:bf:b1:8b:c9:a4:95:21:
91:d7:5f:01:1f:51:c3:fb:ac:da:c4:48:76:05:bc:34:2d:0e:
b9:7a:02:5c:d1:d1:88:3f:03:cc:37:51:a0:8d:ea:84:81:ef:
8d:41:e1:4c:92:e7:79:3f:02:b0:77:00:32:64:7f:dc:e5:3b:
8b:2e:2d:51:a4:4f:d3:c5:3c:66:79:41:f7:ec:80:5f:61:20:
7a:d3:b1:81:7a:27:19:10:4a:15:27:41:ca:5c:41:4c:bd:c4:
d3:2b:12:86:44:09:0f:d7:b0:6d:c1:f1:ff:48:d6:88:3c:a1:
71:4b:e7:b1:52:d8:8f:66:ad:62:2a:99:e1:30:0c:22:db:40:
9e:c4:c2:a9:ee:18:81:c1:90:64:4e:c2:6c:4a:52:cb:c5:83:
79:94:cd:c3
-----BEGIN CERTIFICATE-----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Generated at Sun Jun 23 04:11:23 2024 by rpki-client on console-fra.rpki-client.org