Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n_kwcX2pVv0VA0_DsMHKggNx-4M.roa
File: n_kwcX2pVv0VA0_DsMHKggNx-4M.roa (raw, json)
Hash identifier: 8VOrdfxM58UJhv1U/gkblT8nf6BeKTR+yuoXmTjaNZU=
Subject key identifier: 9F:F9:30:71:7D:A9:56:FD:15:03:4F:C3:B0:C1:CA:82:03:71:FB:83
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190BA2A051837CA1617728FE6ACA461BA8D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n_kwcX2pVv0VA0_DsMHKggNx-4M.roa
Signing time: Tue 16 Jul 2024 06:10:34 +0000
ROA not before: Tue 16 Jul 2024 06:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 16 Jul 2024 07:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:2a:05:18:37:ca:16:17:72:8f:e6:ac:a4:61:ba:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 16 06:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ff930717da956fd15034fc3b0c1ca820371fb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5c:66:06:7e:cc:13:4d:e4:d7:26:33:7e:61:
a7:e1:a5:5a:42:60:c9:34:c3:c5:68:ad:ff:77:f2:
b9:59:22:cb:fe:34:57:67:2b:cd:ee:4e:d9:5a:c7:
36:d8:3e:52:bb:83:5f:9c:93:f2:c2:7a:df:a9:96:
2c:de:ce:0e:e6:0e:a5:ca:94:91:10:3a:2d:25:44:
2f:60:7c:ef:ca:20:b9:35:12:02:50:47:6b:58:26:
4c:07:29:9e:cb:c5:34:2a:4a:ec:e2:29:76:67:b4:
f8:63:41:8d:f4:71:45:7b:f9:80:b1:e5:40:0c:aa:
8b:6f:18:0a:55:74:18:0e:62:d3:39:e9:20:b0:f3:
a2:9d:06:1b:63:d9:89:70:b9:df:d1:c8:9d:6a:22:
63:67:d2:9f:fe:cc:8a:1e:9f:31:0d:cd:b8:10:e7:
2d:c4:7b:bb:3a:a5:93:94:14:b5:79:21:d8:6f:f4:
c8:2d:7c:a2:24:7c:f4:5d:6f:2f:4f:1d:53:22:4e:
fa:bd:e2:0c:92:98:07:b8:db:b2:70:e0:b3:15:1f:
cf:0e:99:07:0a:b1:35:c4:2b:76:53:9c:c9:84:5f:
50:56:5e:db:98:80:36:56:77:d9:1e:4e:20:7c:60:
e6:1b:93:92:a0:f6:ec:bc:dc:b9:4e:98:13:36:6d:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:30:71:7D:A9:56:FD:15:03:4F:C3:B0:C1:CA:82:03:71:FB:83
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n_kwcX2pVv0VA0_DsMHKggNx-4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:71:34:65:0b:72:7c:a9:ee:41:c4:11:97:94:66:9b:0a:bc:
69:45:38:e9:9e:2a:34:ca:c2:fd:26:45:0b:e9:d4:ce:99:d8:
92:e4:43:ab:f1:ac:f5:ae:ab:3e:7c:6d:20:7e:59:5e:b1:b0:
4d:6a:0d:31:51:2e:52:90:5a:87:8f:b4:45:b8:73:32:07:95:
91:24:ef:8f:df:14:eb:9f:cb:94:a5:5c:6c:0b:de:b0:ad:07:
d4:cb:43:87:78:0e:5d:c4:1a:74:ca:dd:23:7e:40:70:87:5a:
54:32:b9:45:53:94:02:3b:83:ac:a0:41:7e:f9:f4:7d:f8:90:
f4:49:16:03:b2:45:fe:47:ae:c3:de:6b:37:50:c3:63:45:17:
f2:aa:63:41:15:3c:65:b2:2e:b4:d0:6e:96:b6:64:9b:cc:9f:
25:1e:44:6d:7f:ec:c4:57:6e:87:9a:1d:4b:c4:47:31:c7:4c:
64:19:5b:8e:02:46:6f:ac:b5:12:5e:02:5d:7c:74:ba:ec:ac:
af:a4:13:4c:1a:b8:d9:32:2b:80:52:8c:a5:58:57:86:cc:c0:
83:f0:e7:7e:03:17:d3:30:1e:4b:ba:a5:42:e1:da:0f:f2:b4:
ae:7a:7d:31:b4:1e:48:6d:4d:d5:8a:58:78:59:fe:12:10:ac:
93:67:16:ef
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZC6KgUYN8oWF3KP5qykYbqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzE2MDYxMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmY5MzA3MTdkYTk1NmZkMTUwMzRmYzNiMGMxY2E4MjAzNzFmYjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VxmBn7ME03k1yYzfmGn4aVaQmDJ
NMPFaK3/d/K5WSLL/jRXZyvN7k7ZWsc22D5Su4NfnJPywnrfqZYs3s4O5g6lypSR
EDotJUQvYHzvyiC5NRICUEdrWCZMBymey8U0Kkrs4il2Z7T4Y0GN9HFFe/mAseVA
DKqLbxgKVXQYDmLTOekgsPOinQYbY9mJcLnf0cidaiJjZ9Kf/syKHp8xDc24EOct
xHu7OqWTlBS1eSHYb/TILXyiJHz0XW8vTx1TIk76veIMkpgHuNuycOCzFR/PDpkH
CrE1xCt2U5zJhF9QVl7bmIA2VnfZHk4gfGDmG5OSoPbsvNy5TpgTNm1yLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ/5MHF9qVb9FQNPw7DByoIDcfuDMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvbl9rd2NYMnBWdjBWQTBfRHNNSEtnZ054LTRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF5xNGULcnyp7kHEEZeU
ZpsKvGlFOOmeKjTKwv0mRQvp1M6Z2JLkQ6vxrPWuqz58bSB+WV6xsE1qDTFRLlKQ
WoePtEW4czIHlZEk74/fFOufy5SlXGwL3rCtB9TLQ4d4Dl3EGnTK3SN+QHCHWlQy
uUVTlAI7g6ygQX759H34kPRJFgOyRf5HrsPeazdQw2NFF/KqY0EVPGWyLrTQbpa2
ZJvMnyUeRG1/7MRXboeaHUvERzHHTGQZW44CRm+stRJeAl18dLrsrK+kE0wauNky
K4BSjKVYV4bMwIPw534DF9MwHku6pULh2g/ytK56fTG0HkhtTdWKWHhZ/hIQrJNn
Fu8=
-----END CERTIFICATE-----
Generated at Tue Jul 16 10:03:40 2024 by rpki-client on console-ams.rpki-client.org