Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ribkaEFLZy8PvjgMjE9wNUuXkZU.roa
File: ribkaEFLZy8PvjgMjE9wNUuXkZU.roa (raw, json)
Hash identifier: AGBsghEcBKZdenh3vdKd6Rvl+fAZV0+yQRbFIr3JoIk=
Subject key identifier: AE:26:E4:68:41:4B:67:2F:0F:BE:38:0C:8C:4F:70:35:4B:97:91:95
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190678D18DFC966A8B3BB0B335C8FC45B88
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ribkaEFLZy8PvjgMjE9wNUuXkZU.roa
Signing time: Sun 30 Jun 2024 05:10:18 +0000
ROA not before: Sun 30 Jun 2024 05:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 30 Jun 2024 06:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:67:8d:18:df:c9:66:a8:b3:bb:0b:33:5c:8f:c4:5b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 30 05:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae26e468414b672f0fbe380c8c4f70354b979195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:27:23:ce:dd:40:02:6a:c5:01:99:12:95:
8f:89:a7:53:80:e8:24:d6:4c:a9:b7:3e:20:20:cc:
1d:b4:19:9c:61:5c:aa:38:28:4e:fa:e4:d4:8c:e4:
6d:6d:13:72:d4:fb:64:86:22:f8:bd:dc:8d:3b:72:
bf:8d:1b:bd:eb:91:8b:cf:39:c2:dc:d8:18:73:4c:
d1:2c:96:fb:fc:cd:8c:5d:24:a1:5d:6d:85:89:e7:
54:c4:4a:0f:76:6f:2f:b0:c0:8a:26:96:b7:37:61:
09:c4:b4:c4:c3:80:ce:2f:0e:7e:d6:e3:25:6e:ec:
55:0e:b4:5d:37:99:ac:7c:b7:9a:8b:61:ab:9b:4c:
6b:79:ed:1f:a2:85:7b:9a:99:88:1e:b0:ed:b5:20:
0b:14:4e:d3:b3:00:99:0a:03:18:55:ff:64:a0:90:
da:ac:1f:ee:6a:21:bb:de:79:2b:2e:a7:0a:54:48:
65:f0:5f:b0:fe:60:77:cd:ad:ad:d3:f3:2c:df:e9:
8f:8d:b9:68:6a:3e:46:9f:5f:e9:24:b5:6c:40:98:
9d:c7:c5:40:61:72:88:dc:4b:b7:65:b3:e0:8e:1e:
06:72:ef:26:0b:31:d3:fd:34:40:0b:0a:6a:95:aa:
43:66:f5:b4:95:c3:1f:42:b2:f2:b5:61:88:04:ec:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:26:E4:68:41:4B:67:2F:0F:BE:38:0C:8C:4F:70:35:4B:97:91:95
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ribkaEFLZy8PvjgMjE9wNUuXkZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:72:fe:fc:90:33:d4:f7:5e:52:e3:8f:b4:2d:be:5e:cb:83:
42:1a:3e:8b:3d:37:00:c0:55:ba:ae:44:6e:9d:a3:7f:b3:c9:
8d:70:10:06:f9:cb:2e:ca:5f:87:e7:b2:e5:11:d2:70:8a:ba:
42:7a:8f:f3:33:ab:7a:c5:7b:6d:a7:52:8d:67:8b:36:cf:04:
b3:20:b4:3a:01:d8:d7:81:74:c0:de:df:30:67:04:9b:85:4b:
92:70:34:83:55:d6:d8:5e:c7:f0:0c:f1:c3:06:a2:e6:a0:54:
1e:ae:d7:77:13:90:8a:9a:0a:36:f3:b5:fc:2b:23:91:5d:46:
a0:6e:ce:51:8f:9d:4c:04:e0:10:a1:58:7c:2f:c3:01:2f:f5:
3c:48:5a:64:4b:90:80:0a:2a:02:7f:5e:f4:dc:c1:79:4f:e4:
e8:28:a4:bf:87:fa:cc:25:97:4a:b6:10:d0:ff:88:98:f9:0f:
ac:54:05:98:ea:7a:21:55:82:60:21:c8:b0:25:77:92:b0:06:
40:b5:3c:82:ca:01:54:18:e5:42:27:96:20:04:fa:a9:b5:92:
2f:aa:ae:ee:ca:b6:e8:5c:8a:03:cc:ac:09:c8:6f:c7:62:22:
00:02:44:f4:78:1d:fd:0e:7c:92:3f:24:cb:e0:61:2b:4e:f8:
9c:09:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 09:53:53 2024 by rpki-client on console-ams.rpki-client.org