Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/q8I0UWcMOuJXuGOajLOUUUA6qVg.roa
File: q8I0UWcMOuJXuGOajLOUUUA6qVg.roa (raw, json)
Hash identifier: W27+ILcaopVTL0gbMxwwpUPyMn9afnwE4BgNdcGwgkg=
Subject key identifier: AB:C2:34:51:67:0C:3A:E2:57:B8:63:9A:8C:B3:94:51:40:3A:A9:58
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FAE2970BD0C031786C0B987EF283FFB9A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/q8I0UWcMOuJXuGOajLOUUUA6qVg.roa
Signing time: Sat 25 May 2024 05:11:42 +0000
ROA not before: Sat 25 May 2024 05:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 25 May 2024 06:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ae:29:70:bd:0c:03:17:86:c0:b9:87:ef:28:3f:fb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 25 05:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abc23451670c3ae257b8639a8cb39451403aa958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0f:a7:db:0a:db:c4:61:5a:8d:37:04:24:56:
c4:54:3e:90:d2:58:02:e6:67:ac:4d:14:8c:70:14:
b1:56:df:30:fd:d8:14:4e:e6:aa:44:36:1a:a3:17:
be:c7:b6:1c:67:f2:3c:cb:9d:03:f7:4b:b7:d7:2a:
14:4d:e4:85:81:a5:ad:e1:b8:b2:2d:b1:77:f3:32:
85:33:3c:0b:1e:6b:76:94:8a:f6:4c:11:8d:d8:b7:
66:bc:6d:69:c0:0f:95:5c:10:94:04:68:65:3f:d8:
94:e0:fe:5e:9d:3a:36:a0:6c:a3:c9:f5:8f:1f:91:
81:41:52:25:21:a6:db:3c:e2:8f:e2:96:c8:0a:d2:
e3:b4:df:4e:61:3b:15:ce:e4:2b:b4:ab:09:d9:68:
78:bb:e3:03:8c:64:00:44:bb:f8:84:46:56:bd:78:
25:64:0e:07:ce:ae:0f:f0:31:9f:a4:9f:fc:ff:c6:
e0:83:22:61:10:42:8a:e3:ce:6a:c0:95:93:15:03:
78:7c:77:40:71:28:fb:3d:0c:98:77:02:83:7a:3e:
53:0b:ed:08:fb:b3:40:36:4f:7a:81:56:28:00:1c:
43:45:34:6e:70:1d:40:0a:ee:6e:53:47:63:e0:3d:
c9:c6:ee:ed:7f:9e:13:2f:18:53:e3:75:2a:fc:c0:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:34:51:67:0C:3A:E2:57:B8:63:9A:8C:B3:94:51:40:3A:A9:58
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/q8I0UWcMOuJXuGOajLOUUUA6qVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:1b:5a:3e:b1:ca:45:36:d7:78:b0:5c:c7:a7:5d:3d:ff:55:
e9:ec:56:2f:05:c5:b1:f9:cd:e8:e8:cc:e6:75:35:f6:47:e5:
f5:61:10:4f:b8:72:cc:19:e3:73:b8:5d:90:ef:bd:41:3e:07:
6a:ae:fa:2f:87:0b:8c:fe:5d:68:2d:39:a3:68:1a:3a:27:5c:
e6:c8:29:d4:4a:d9:c2:e1:7c:f7:ce:8b:da:07:6b:ef:3f:61:
41:1e:59:be:1d:83:af:31:71:10:96:83:a8:fc:20:4d:13:9b:
e8:9e:76:a2:db:4c:5d:1f:5b:f0:d6:55:36:24:99:e0:9e:77:
44:a6:9a:d0:f3:bd:07:c7:5b:18:bc:62:b9:e0:ec:a9:ae:6e:
8c:d5:82:85:50:ea:5b:55:ac:e7:61:29:43:ec:91:75:cd:9f:
ff:eb:ce:86:36:79:e6:14:25:c4:1e:3f:f2:16:4b:dd:52:ec:
91:a6:06:c6:9d:56:bf:1b:82:29:0a:bc:fd:49:2d:12:b5:81:
03:1e:05:4d:37:a5:db:f1:8f:d2:2f:33:ab:a9:47:04:2c:5b:
61:a2:b0:b2:2b:b7:d0:90:3a:9e:7d:83:51:b3:68:f2:65:d2:
3f:01:e7:38:d8:87:33:62:26:28:5b:6e:a6:6a:50:7d:1f:6d:
6a:8f:34:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org