Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nx6F0h1AlcDyFD1Hxr4-ZVGF40I.roa
File: nx6F0h1AlcDyFD1Hxr4-ZVGF40I.roa (raw, json)
Hash identifier: a5MQCrYS076EsdieTvXTRqVbmI63zugvI+Yr9rEjo1g=
Subject key identifier: 9F:1E:85:D2:1D:40:95:C0:F2:14:3D:47:C6:BE:3E:65:51:85:E3:42
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01902C85A5368E33904AAE0D5352558BB210
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nx6F0h1AlcDyFD1Hxr4-ZVGF40I.roa
Signing time: Tue 18 Jun 2024 18:04:34 +0000
ROA not before: Tue 18 Jun 2024 18:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:2c85:67bf/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 18 Jun 2024 18:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2c:85:a5:36:8e:33:90:4a:ae:0d:53:52:55:8b:b2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 18 18:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f1e85d21d4095c0f2143d47c6be3e655185e342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:78:5c:78:3b:de:84:b8:8f:52:43:c7:51:
b7:0a:1a:b1:0c:74:ce:9c:ad:ea:82:79:e0:43:27:
d6:b0:24:91:ae:21:d4:75:ec:59:80:06:d3:81:b1:
7d:de:31:51:21:95:32:55:14:70:a8:9c:37:21:a1:
9c:a6:2c:53:2d:a4:96:92:25:e7:05:5e:02:90:63:
8e:b2:82:40:6e:03:17:02:1c:75:90:d4:aa:9c:1e:
f8:b9:2f:c0:ae:91:cb:36:12:16:dc:a6:80:28:ad:
43:e9:5d:64:5e:36:52:75:66:71:64:6d:04:79:2d:
bc:b7:21:64:68:5a:68:ba:64:93:de:a1:bd:f0:a4:
d6:e1:e0:44:67:65:b8:ca:50:28:67:0d:84:e8:6e:
7d:6f:47:fa:f1:45:5c:c1:21:05:04:75:25:9c:82:
4b:10:d6:43:ed:30:97:c1:f2:0d:a2:a2:3c:1b:5e:
1b:10:40:c1:21:00:42:84:34:cd:4e:2a:17:99:cf:
c0:bc:c0:61:f6:d6:d7:f1:5b:41:9e:b1:56:e0:62:
3d:0e:bf:52:e1:d6:0b:60:6c:07:38:44:d6:81:aa:
54:9f:a8:3a:ed:01:f3:ab:ec:1b:1e:83:c5:17:6f:
b6:1f:ae:1e:0d:b2:1d:43:10:3b:e0:ba:a9:0c:64:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1E:85:D2:1D:40:95:C0:F2:14:3D:47:C6:BE:3E:65:51:85:E3:42
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/nx6F0h1AlcDyFD1Hxr4-ZVGF40I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:76:45:c0:ac:af:da:b8:f2:20:53:8f:59:78:36:cf:72:c9:
28:72:ad:31:51:ed:86:25:90:32:b2:89:e2:24:5f:b4:be:0a:
68:cc:44:ae:ac:d9:1f:6f:03:0f:16:0c:2c:bb:ba:c9:9f:62:
e1:96:33:50:5d:a1:12:a8:6b:7d:2e:67:c9:93:dd:2a:48:24:
8c:6b:87:e3:1f:4b:c6:cb:7f:22:d5:8d:66:93:9e:a2:9a:c9:
66:08:04:00:8f:00:0f:e2:02:17:1f:f9:03:74:8a:77:8a:e2:
9f:41:60:26:9e:c7:6c:ef:1d:d8:65:60:17:d6:33:a1:f7:08:
97:b1:c3:4b:32:82:48:3f:31:cc:40:22:6f:f3:f8:20:38:15:
e2:c5:f7:ec:44:8e:3b:76:d6:5f:e8:20:81:b7:58:35:c7:92:
fb:f9:47:e5:70:d6:ef:bb:4c:7e:3c:53:7c:a1:b3:cb:2b:1d:
4c:24:71:b2:68:e7:83:ae:cc:82:57:07:f4:e4:fc:09:5c:d7:
c2:d7:bc:2b:8d:7e:c9:2a:60:31:3b:32:4e:8f:4e:1e:4c:71:
7f:e1:89:12:80:9e:33:0f:a6:6e:77:b2:ce:4f:b9:b3:6b:d1:
cb:86:a7:ed:41:78:d1:29:b1:c2:40:ed:b2:cb:b2:d1:f4:37:
9e:a2:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 22:10:16 2024 by rpki-client on console-fra.rpki-client.org