Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mEeBrFOkGUvNXOznR6c42LjwiIE.roa
File: mEeBrFOkGUvNXOznR6c42LjwiIE.roa (raw, json)
Hash identifier: uPQP52Ys86BcAsq23+JekEJ8jSmKMArJqviYPfidYXA=
Subject key identifier: 98:47:81:AC:53:A4:19:4B:CD:5C:EC:E7:47:A7:38:D8:B8:F0:88:81
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FAFA90C33E6F482A1C9773EE51453B3F5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mEeBrFOkGUvNXOznR6c42LjwiIE.roa
Signing time: Sat 25 May 2024 12:10:42 +0000
ROA not before: Sat 25 May 2024 12:10:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 25 May 2024 13:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:af:a9:0c:33:e6:f4:82:a1:c9:77:3e:e5:14:53:b3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 25 12:10:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=984781ac53a4194bcd5cece747a738d8b8f08881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:f9:e3:e5:fc:c6:a2:a6:a7:02:c7:4c:90:
4e:b4:7f:92:f0:3e:6d:53:48:b9:57:0f:44:a3:3e:
03:07:a2:21:8e:81:86:2a:4f:51:90:85:45:40:3e:
1e:20:f6:8f:cd:4f:17:4f:95:be:12:8a:65:11:43:
66:28:b0:f3:a5:a3:5a:21:6e:13:9a:e6:cb:0d:cc:
0b:6b:76:22:63:83:fa:8d:18:1e:f2:d9:2b:44:f1:
5f:d1:1d:0d:a0:69:de:64:b0:e4:68:fb:ba:a4:70:
a6:79:f5:0c:3e:76:81:77:a1:c6:fc:fe:e9:f0:ea:
a0:d8:8c:fa:c8:04:11:fc:ed:89:21:b9:9e:4c:72:
51:35:a2:12:d1:d6:72:a7:f4:ed:a1:80:46:1f:94:
86:c5:93:b4:38:01:6c:b3:46:e4:a4:16:8e:5c:bc:
11:e9:ba:c3:d0:07:c1:85:9f:66:4b:03:56:36:72:
34:3c:7e:68:a5:a4:4d:f0:8e:c3:b4:fe:94:af:9d:
c6:ef:c1:2b:be:cf:38:69:53:56:22:a4:ef:b9:c0:
b9:60:61:d0:2a:78:85:09:08:31:ff:89:75:f8:9b:
d2:78:d8:a0:0c:d1:a8:06:42:d3:4b:c1:9b:f1:6d:
ae:3a:6c:77:28:56:21:f2:28:40:4c:fa:b3:0a:75:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:47:81:AC:53:A4:19:4B:CD:5C:EC:E7:47:A7:38:D8:B8:F0:88:81
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mEeBrFOkGUvNXOznR6c42LjwiIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:17:56:81:22:67:88:1e:d2:d2:3c:fb:78:4e:55:65:c5:95:
f2:7d:7c:b7:e7:51:00:ac:97:d7:8d:b1:72:94:56:4d:3f:0d:
d2:df:4a:cb:d9:31:75:b7:ba:1c:b7:65:77:a3:76:40:76:40:
86:bc:9e:04:eb:90:db:7a:fd:08:5a:31:f3:e3:b6:ad:90:af:
65:4b:a6:ff:a9:18:fc:bd:64:8a:cc:77:aa:b1:b7:fd:4a:7b:
df:94:82:27:61:38:f5:3c:c4:6a:22:a2:97:c7:03:31:b6:5e:
8b:b5:8f:d1:a3:9b:3b:61:5d:e3:07:fc:45:a2:65:84:6c:c2:
08:5e:b4:90:18:27:96:1f:c1:22:6d:79:ae:fb:16:34:3e:c5:
84:5b:e2:ed:53:0e:1e:18:f3:d1:d4:d3:79:b5:59:af:76:7a:
36:35:2a:30:7b:8c:e4:0f:cc:92:a4:d6:0e:46:8a:02:82:e2:
97:bf:9e:92:03:08:81:cf:35:16:7b:ef:c8:55:df:99:d2:ab:
fc:f7:62:c6:c0:8c:2d:54:04:71:5f:45:c9:ed:04:07:f4:cf:
12:3b:22:d5:fa:0f:1f:0e:cb:23:b6:2b:b3:3b:e9:5e:06:c4:
e9:80:a3:52:d2:b2:38:08:c4:12:b9:3e:3a:78:b9:dd:38:44:
d8:14:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org