Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/M3RtxikaZGfWD12LihQ7NwZSUDA.roa
File: M3RtxikaZGfWD12LihQ7NwZSUDA.roa (raw, json)
Hash identifier: HamDv44YSW+XmYXFurV6iRjeK81Bt+SAPvN3VXYIGaA=
Subject key identifier: 33:74:6D:C6:29:1A:64:67:D6:0F:5D:8B:8A:14:3B:37:06:52:50:30
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190001F45088341E4CDC4E492BA8A78BE98
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/M3RtxikaZGfWD12LihQ7NwZSUDA.roa
Signing time: Mon 10 Jun 2024 03:09:27 +0000
ROA not before: Mon 10 Jun 2024 03:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Jun 2024 04:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:00:1f:45:08:83:41:e4:cd:c4:e4:92:ba:8a:78:be:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 10 03:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33746dc6291a6467d60f5d8b8a143b3706525030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f6:ac:38:d2:df:b3:7d:b7:f5:eb:8b:c3:48:
4a:e9:a5:5c:17:1b:50:fa:54:77:e7:e5:48:39:e6:
fe:21:6e:85:03:04:22:86:52:7f:13:57:37:0e:c8:
a2:29:0e:4e:d6:1c:67:91:f4:48:d0:98:32:43:3b:
7d:1d:60:b2:b0:ac:ff:4a:a4:78:a4:3a:87:0b:a8:
78:be:6a:ff:05:a6:1e:86:8c:91:b9:f6:1e:75:a5:
9a:35:9f:79:d4:a2:13:f3:19:73:de:de:d7:61:9c:
4d:c8:2e:81:cc:d2:a8:a8:d4:d1:0f:8b:d2:ac:47:
82:27:df:dc:ea:84:94:14:7d:63:ee:cd:fd:3c:66:
4d:11:1f:19:d2:67:d4:fe:8e:26:e7:6a:3d:1c:d1:
eb:d6:9d:71:ea:fb:db:a0:d9:a7:30:b1:a3:c2:df:
e3:d4:21:54:02:e6:12:f9:0d:6c:1c:2b:b0:13:51:
59:ac:a4:dd:07:f8:c0:d3:42:16:93:a0:d3:ea:c9:
57:5e:ca:a2:a2:bd:1d:6d:cb:1c:25:56:3d:f0:cc:
79:5a:97:08:99:86:43:57:7b:1e:83:44:4e:c5:47:
9d:44:2d:b1:d9:15:6d:30:f9:cd:d4:ac:9a:67:5c:
47:26:5a:c2:a3:3a:e6:1d:18:a3:8d:20:9d:18:29:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:74:6D:C6:29:1A:64:67:D6:0F:5D:8B:8A:14:3B:37:06:52:50:30
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/M3RtxikaZGfWD12LihQ7NwZSUDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:4a:f7:e6:25:41:47:8a:1a:06:3d:9c:53:14:2f:82:f6:3b:
de:79:7c:ba:d4:21:b6:af:d6:fa:4e:b5:1f:db:3f:0d:6e:f7:
eb:8e:8e:c7:65:78:a3:2e:0a:72:6c:32:d8:3a:7c:83:d7:82:
50:34:f9:8f:9c:56:ad:36:f5:18:71:35:16:1f:4a:eb:bc:1d:
67:c2:76:3d:ae:25:a7:38:ec:1d:72:fa:ee:a7:44:e4:25:11:
e8:ad:db:83:b3:7a:63:b5:6e:ec:a5:b0:1c:13:34:b5:a4:54:
f1:c3:88:5a:aa:6b:de:14:c9:2a:ee:0b:73:59:fe:c3:eb:07:
ff:89:be:09:d5:da:38:97:64:2d:00:7c:e5:d5:04:a2:d1:08:
3d:03:6c:95:02:63:21:e9:1a:82:c3:0b:38:aa:d9:04:39:b1:
ef:78:3e:fa:59:48:ba:9a:18:28:76:1d:c2:4c:14:3c:18:a1:
b5:b4:ca:37:77:17:33:a6:c2:1a:fa:f1:5d:c5:61:79:30:f7:
db:00:06:9f:01:ee:88:ee:36:3d:9a:91:af:26:b4:d0:0e:8a:
de:93:3e:e1:81:80:61:a5:d7:07:1b:d6:3e:85:1c:90:c4:61:
b1:0f:aa:83:b6:2c:44:d6:08:e6:af:2b:72:52:65:fb:ec:3f:
ce:11:8c:e8
-----BEGIN CERTIFICATE-----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Generated at Mon Jun 10 04:53:26 2024 by rpki-client on console-fra.rpki-client.org