Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pW22oG9j8XbEU1TrG91Xd_7ceok.roa
File: pW22oG9j8XbEU1TrG91Xd_7ceok.roa (raw, json)
Hash identifier: hI7igZ68cOR3t6S1c2xEMmfDgqtMW55DOOGsJTJjltk=
Subject key identifier: A5:6D:B6:A0:6F:63:F1:76:C4:53:54:EB:1B:DD:57:77:FE:DC:7A:89
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019041C95EBCFE493210C6E7D908929E672C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pW22oG9j8XbEU1TrG91Xd_7ceok.roa
Signing time: Sat 22 Jun 2024 21:10:34 +0000
ROA not before: Sat 22 Jun 2024 21:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 22 Jun 2024 22:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:c9:5e:bc:fe:49:32:10:c6:e7:d9:08:92:9e:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 22 21:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a56db6a06f63f176c45354eb1bdd5777fedc7a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:08:de:3f:e5:85:2a:05:fd:52:cc:f2:c5:
7a:4d:be:21:a3:ce:a6:d5:66:79:9d:ef:8f:c6:39:
42:31:33:c3:01:16:92:e1:1c:6b:aa:b3:12:19:1b:
7a:3c:c6:7d:2e:be:35:c0:b4:29:1a:0d:80:29:22:
1e:9a:8c:d4:93:c7:11:d1:56:ca:ae:f3:6c:ac:d1:
66:0f:bd:85:0e:0a:f7:4e:0c:95:22:e9:a7:09:ff:
0d:c4:69:28:36:ae:17:bc:3f:aa:c2:6c:65:5f:78:
7e:49:2f:9f:4a:48:c0:fe:62:b5:64:ed:7b:5a:b1:
40:f6:15:70:14:b5:c4:bd:35:d9:6d:97:ab:54:41:
28:a8:44:91:a3:7d:f0:c4:5e:1b:44:ad:bb:93:6f:
ec:84:7c:46:0d:09:4b:64:77:2d:d9:9b:05:32:a1:
62:44:d4:ba:63:94:3f:9f:20:de:b9:6d:f8:e9:2c:
b6:af:59:fb:c0:bf:88:7c:39:51:3f:8e:af:ce:5e:
f1:f6:a1:7d:f2:6e:3b:02:9a:10:ed:88:cb:0a:c0:
f5:fa:18:cf:69:50:d3:00:97:00:a2:0e:ee:a9:60:
93:a4:fd:79:99:3d:b3:d5:f8:50:65:79:d3:e8:ee:
c9:68:13:02:61:04:87:00:88:e2:d1:68:b9:23:88:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6D:B6:A0:6F:63:F1:76:C4:53:54:EB:1B:DD:57:77:FE:DC:7A:89
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pW22oG9j8XbEU1TrG91Xd_7ceok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:32:6e:27:d2:e4:bb:60:a2:9f:14:ef:70:f1:82:1a:38:57:
6c:5e:ad:9d:40:27:7b:6c:b2:02:5a:2b:e3:5f:81:0d:8d:5d:
c1:ba:b0:bb:71:c0:9f:1d:0e:0e:c6:38:41:00:e8:d0:80:5c:
44:3a:51:07:16:eb:2e:71:81:93:ec:75:5f:ba:b6:2b:df:52:
27:f3:36:91:40:2c:22:55:cc:c0:10:4e:f1:11:6c:50:e1:21:
b5:a8:52:21:4b:22:fb:ec:fc:91:f2:c5:08:53:e2:be:0a:6c:
6a:41:73:42:0b:6c:ac:66:ce:64:fc:01:0d:a6:4e:61:a5:3d:
22:2d:ef:09:be:17:d3:33:01:99:09:40:c0:9e:c7:54:fd:24:
1f:3d:7f:23:75:8f:df:d2:90:63:76:4b:42:01:ab:be:34:0b:
6f:5d:67:27:a9:bd:fd:e9:23:c3:8f:28:47:1c:63:d6:b6:0a:
a2:34:d7:48:f6:0e:63:5d:42:d7:7a:b3:38:69:36:c5:ce:94:
c7:2f:91:3d:84:12:4c:3d:f8:f5:a8:dd:72:7a:25:7d:0f:75:
36:73:63:86:2b:1d:bd:0a:92:0e:29:b3:43:07:0d:a4:e3:0d:
7c:35:0a:4b:b1:ac:a8:eb:13:b5:91:a0:c3:fc:04:66:c5:93:
17:20:f3:04
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 22 23:15:54 2024 by rpki-client on console-fra.rpki-client.org