Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/quQhmx_ilq1Nbt2peRv2w6UGAso.roa
File: quQhmx_ilq1Nbt2peRv2w6UGAso.roa (raw, json)
Hash identifier: 2jjDJW70YVhxwJF15v2f6hKaTwT4UtetDEuRYUOC3/4=
Subject key identifier: AA:E4:21:9B:1F:E2:96:AD:4D:6E:DD:A9:79:1B:F6:C3:A5:06:02:CA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019020F5BEF2D34FF21723321AAAA559E1A9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/quQhmx_ilq1Nbt2peRv2w6UGAso.roa
Signing time: Sun 16 Jun 2024 12:11:34 +0000
ROA not before: Sun 16 Jun 2024 12:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Jun 2024 13:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:20:f5:be:f2:d3:4f:f2:17:23:32:1a:aa:a5:59:e1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 16 12:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aae4219b1fe296ad4d6edda9791bf6c3a50602ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:b0:56:1a:91:f4:f8:62:2b:7c:39:f6:bb:
10:ab:9e:4d:59:42:36:5b:e1:86:10:77:40:e4:9c:
52:e3:e9:49:f6:69:98:96:25:20:77:28:b2:19:d1:
bd:3d:2b:ab:ae:34:43:bf:2c:a7:ae:51:39:37:89:
57:76:f5:9e:64:06:dc:85:4d:87:fd:bf:30:2b:3d:
67:58:a5:d7:ac:6c:01:37:46:2a:8a:40:3a:98:36:
87:11:c8:bd:ae:31:2a:99:66:ed:f9:1b:9b:5f:0b:
5e:79:52:d6:80:2d:f7:03:48:8f:0a:53:38:2e:85:
ba:5b:5f:be:85:5c:82:04:6c:d1:09:24:dc:30:14:
f4:79:10:9f:9d:14:7f:40:97:d2:8b:f1:30:9c:11:
d2:d2:d2:d1:d5:49:25:2f:da:ae:2b:54:e6:66:43:
b6:04:c3:0d:92:dc:68:1d:c7:2c:67:cc:91:c8:43:
ca:06:79:5f:76:ef:fc:1f:12:27:bc:e3:d4:88:ed:
75:74:17:f4:3b:8a:97:9a:9a:6a:29:4f:14:4d:bb:
d8:50:00:5d:dc:a6:31:5f:60:c3:c7:66:f4:b9:03:
48:0a:89:8a:b9:37:eb:b7:88:b5:12:fa:92:20:fc:
ce:47:82:63:f0:fa:10:79:f8:6e:b2:00:09:5c:c6:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E4:21:9B:1F:E2:96:AD:4D:6E:DD:A9:79:1B:F6:C3:A5:06:02:CA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/quQhmx_ilq1Nbt2peRv2w6UGAso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:24:8c:4d:70:49:aa:f1:83:95:9d:93:53:e8:3a:5b:1a:8d:
7f:70:d8:95:0d:43:20:a2:9a:cc:e9:96:b4:58:76:a8:fc:f1:
06:be:60:a6:db:b2:e0:37:72:4f:12:06:26:15:07:05:b8:fa:
01:fb:8c:8b:e7:35:c6:19:cb:37:18:b2:ed:7d:38:42:45:ac:
f1:34:98:10:ea:be:28:67:84:83:3e:ba:f2:1f:86:5d:73:d4:
6f:7f:7c:ba:f8:2e:09:9a:7e:35:c8:90:98:01:88:b6:a2:42:
63:81:8e:0d:bc:17:67:a7:0d:3b:a0:33:c1:de:0a:b9:65:22:
fe:85:5b:7f:7e:79:48:58:a2:9a:21:ac:49:b1:b2:90:02:9b:
f9:2d:02:9c:bb:f9:21:49:ae:4a:78:20:a3:57:fb:7f:e1:d8:
88:5b:57:28:cd:fb:30:f6:9c:84:4d:97:57:0c:5a:eb:01:89:
5f:4f:2c:2c:10:e9:60:7a:ce:a1:64:c7:7b:8f:96:d1:94:89:
7a:09:95:08:9e:30:85:61:2e:63:79:66:6a:e5:83:c3:f9:4e:
22:10:6a:e0:4c:77:2d:cf:b1:8a:a0:8b:6a:a0:8f:a1:55:2b:
0c:48:c1:3b:73:01:d2:43:cd:a4:b8:e4:e1:55:81:6f:16:e5:
2a:14:5c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:50:09 2024 by rpki-client on console-fra.rpki-client.org