Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T_Ir2r9UqE4jFQQjP4APxi0NJBs.roa
File: T_Ir2r9UqE4jFQQjP4APxi0NJBs.roa (raw, json)
Hash identifier: 9B5ZsrMcPcwfdkeS6/UqLh8lvixlpVQf9RhnKHoi8Ak=
Subject key identifier: 4F:F2:2B:DA:BF:54:A8:4E:23:15:04:23:3F:80:0F:C6:2D:0D:24:1B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01901D18F9AEE3642C9D47B55E7B36C6B586
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T_Ir2r9UqE4jFQQjP4APxi0NJBs.roa
Signing time: Sat 15 Jun 2024 18:11:34 +0000
ROA not before: Sat 15 Jun 2024 18:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Jun 2024 19:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:18:f9:ae:e3:64:2c:9d:47:b5:5e:7b:36:c6:b5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 15 18:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ff22bdabf54a84e231504233f800fc62d0d241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:44:80:16:5b:f9:82:58:dc:05:3e:95:2d:
1a:9d:36:f6:0b:b5:8b:1c:0b:86:56:59:2f:3e:fa:
20:6e:7d:fd:4a:76:c5:ab:fa:fd:b7:18:58:c8:47:
6a:4f:b5:77:a5:ff:22:ec:2c:90:c9:5e:8f:2f:bf:
79:2a:60:8a:ca:ad:63:20:6c:e7:1d:3f:3f:47:fa:
8a:06:fd:90:d0:ce:60:90:50:20:7c:b2:fa:70:d1:
5f:3f:01:ce:ec:a9:a1:fc:a1:75:ce:af:82:89:e4:
98:cf:81:bb:61:e5:49:84:1d:cc:20:b5:34:4a:60:
0e:15:09:7b:32:ad:00:94:d3:15:bb:0b:3e:37:01:
44:61:13:4f:4f:09:92:d8:70:f6:7e:78:1a:f2:52:
c4:ba:9a:d9:2d:d6:1c:a7:bf:0c:59:1f:c7:cf:b4:
42:1f:bc:05:2c:51:26:1f:5d:83:4e:71:4e:5f:0f:
13:53:7c:4e:78:af:bc:c3:3c:9b:ff:fb:4c:ce:be:
f8:ad:5d:a1:55:6d:91:29:25:61:95:c6:24:ca:6e:
31:ad:a7:e5:f9:33:57:c8:81:b0:87:98:68:40:b4:
7a:a5:df:ae:94:ad:58:4d:e0:70:cb:21:39:db:9e:
65:17:d0:1e:de:66:af:aa:fa:95:a4:92:8b:d7:aa:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F2:2B:DA:BF:54:A8:4E:23:15:04:23:3F:80:0F:C6:2D:0D:24:1B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T_Ir2r9UqE4jFQQjP4APxi0NJBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:17:56:84:39:0a:97:91:1d:c2:0f:0f:e4:c3:94:30:97:eb:
8c:a1:b8:11:27:ce:ae:ed:6e:8f:61:73:a0:d9:f9:bd:44:f9:
6e:c8:9f:11:25:23:96:2d:56:2d:c7:80:7e:d1:64:ec:ac:63:
7c:04:16:f9:ee:21:d1:71:99:6b:b8:ba:f1:f7:7b:6e:d7:35:
07:18:30:4a:cd:6c:6b:2d:cc:e1:7d:16:68:8b:62:c6:b9:87:
0b:bd:74:f7:1f:10:17:03:60:8f:55:bc:f3:0a:2f:d3:12:46:
42:86:da:2f:98:6f:67:d3:50:02:e4:fa:40:f5:af:c5:db:0b:
f3:24:11:4a:61:1a:30:97:15:c5:47:69:56:e4:23:d7:06:ba:
d5:70:c8:4b:2b:77:53:a7:fc:b7:cd:45:05:aa:3d:74:f5:1c:
38:66:77:85:da:52:46:60:42:9f:2f:8c:c9:bd:51:84:54:9d:
2c:e1:c7:58:86:60:02:84:c1:6e:12:1e:79:d9:b6:60:33:0b:
74:34:81:47:ce:f7:33:c8:eb:57:d3:93:18:16:f2:e7:53:0d:
de:b7:c8:77:02:21:ee:f4:3b:29:ca:14:4d:69:0b:47:e6:2d:
03:b2:45:5e:95:fd:b6:26:76:61:13:01:98:01:77:46:3a:45:
40:e0:7f:76
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 15 20:55:25 2024 by rpki-client on console-fra.rpki-client.org