Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/o-721ejrYxsLF763W8Yui2wqggc.roa
File: o-721ejrYxsLF763W8Yui2wqggc.roa (raw, json)
Hash identifier: wy5u6nkCAmStasPLz9J5yeOkpDym/zXSIcJIbar8IK0=
Subject key identifier: A3:EE:F6:D5:E8:EB:63:1B:0B:17:BE:B7:5B:C6:2E:8B:6C:2A:82:07
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01909EE9B4CB995605C98D49D0BBD73B2FBA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/o-721ejrYxsLF763W8Yui2wqggc.roa
Signing time: Wed 10 Jul 2024 23:10:34 +0000
ROA not before: Wed 10 Jul 2024 23:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jul 2024 00:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9e:e9:b4:cb:99:56:05:c9:8d:49:d0:bb:d7:3b:2f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 10 23:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3eef6d5e8eb631b0b17beb75bc62e8b6c2a8207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:4f:44:ab:84:40:11:9b:3d:2d:dd:48:20:
45:c6:2d:50:37:d3:fd:0b:9a:9c:88:58:cb:ce:a9:
72:51:4c:d3:ef:c2:c9:35:24:f3:8c:ea:1d:56:af:
58:4c:d4:de:10:a3:05:b9:0a:99:60:9f:91:4d:c3:
85:08:ae:65:2a:d6:6d:95:e3:bb:d3:a9:66:6c:3a:
4e:8f:85:ae:e0:b3:d3:37:12:67:4c:4e:3f:0a:a8:
88:95:ea:5f:09:7a:0b:a4:9b:af:93:08:24:52:83:
a8:a6:7a:88:8e:57:5f:9a:14:cc:8f:03:33:19:65:
72:7d:0e:f0:b7:a0:8e:b1:61:5c:a0:4c:c7:a4:00:
7c:59:29:c4:e4:53:bd:4f:2f:bd:63:07:9f:37:82:
60:db:7a:20:e9:c3:f4:7d:91:ad:7a:bd:1e:14:5b:
82:0c:14:eb:bc:d3:ab:b1:f4:70:8b:18:91:92:88:
37:b9:ef:47:83:b1:09:44:84:ce:25:26:f6:8e:af:
f9:3c:1a:6e:d2:73:32:88:0c:9f:63:0f:d9:24:17:
47:68:1e:0f:17:0e:76:77:fe:11:39:f0:c7:cf:90:
6f:1a:a3:8c:e0:74:6c:4d:5e:5a:f7:88:32:06:71:
bf:e5:ad:19:6a:5d:81:8c:ab:57:90:43:d9:a7:69:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EE:F6:D5:E8:EB:63:1B:0B:17:BE:B7:5B:C6:2E:8B:6C:2A:82:07
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/o-721ejrYxsLF763W8Yui2wqggc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:3a:e3:17:d6:ac:90:89:d2:45:db:94:e7:c3:b0:fa:6b:80:
aa:0a:f3:a4:e0:7f:87:c2:aa:21:60:c9:e5:66:5b:74:07:c6:
f7:41:ac:4c:17:9f:e4:17:99:91:79:d2:38:61:f4:77:02:bf:
c7:5f:25:37:37:c6:cf:33:08:a4:63:cc:3b:84:f0:d1:3d:76:
a1:2f:0f:1e:fe:e6:3b:c2:d1:be:7f:26:f0:ad:3d:01:bb:c7:
09:ab:d9:75:5f:b4:b3:f3:b5:2e:65:ad:3a:be:cd:8f:60:a4:
f0:9d:fe:b8:e4:5b:60:5b:b3:77:03:69:87:f6:26:c3:dc:4c:
5e:0a:78:69:40:03:15:6d:98:d1:15:01:4e:58:c3:7c:f6:5f:
29:92:a8:48:54:2f:43:08:0f:a9:cc:86:45:f9:27:77:43:31:
bc:c1:7d:73:07:a4:f6:16:b4:45:75:c2:1f:61:22:a6:44:10:
7e:ca:6d:1f:74:17:3b:40:10:1e:61:63:da:12:84:b1:b2:df:
82:b3:26:7d:5e:4a:b8:88:d0:64:d6:21:fe:03:d7:df:5e:f8:
b5:71:02:18:30:37:dc:65:51:2f:4b:4b:f9:4a:c6:73:42:28:
1f:bd:08:2d:f4:26:41:99:a2:76:d6:5a:51:1b:a6:93:55:a6:
31:0d:04:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 01:30:08 2024 by rpki-client on console-ams.rpki-client.org