Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/shCXSmdprwhmYVgTu86P-x49tIg.roa
File: shCXSmdprwhmYVgTu86P-x49tIg.roa (raw, json)
Hash identifier: 7YjlYQBHAVgfAdV/x+1vfre/l6ZQdzsuby4zg7z1IWA=
Subject key identifier: B2:10:97:4A:67:69:AF:08:66:61:58:13:BB:CE:8F:FB:1E:3D:B4:88
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01903F371B5A145B051D831167210C835E19
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/shCXSmdprwhmYVgTu86P-x49tIg.roa
Signing time: Sat 22 Jun 2024 09:11:34 +0000
ROA not before: Sat 22 Jun 2024 09:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 22 Jun 2024 10:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3f:37:1b:5a:14:5b:05:1d:83:11:67:21:0c:83:5e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 22 09:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b210974a6769af0866615813bbce8ffb1e3db488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:db:d1:b1:41:ae:83:3d:30:45:8d:65:e5:
89:43:ad:ea:97:12:7c:cd:87:a7:87:e9:06:cd:44:
a1:36:61:ad:4b:00:9f:98:14:47:56:64:8c:4d:89:
4f:14:eb:02:bb:1f:8f:ec:7a:a1:c4:e7:98:63:07:
2d:2d:bd:bb:d9:7b:e5:06:20:c5:36:d4:78:47:58:
62:e4:cc:00:ee:08:b6:ab:55:b7:e2:05:2f:28:0f:
37:83:ab:16:fa:bf:89:b3:2b:5c:70:6f:d1:2c:8d:
89:46:b6:ee:25:bb:31:59:24:fb:11:80:56:be:e1:
d4:6a:83:67:22:56:cc:99:5f:80:e8:c6:1a:2d:1e:
fe:71:c8:40:6a:87:61:eb:60:ba:c3:b0:b8:4d:68:
3c:b9:a9:37:e7:24:89:91:14:f8:6d:0b:80:8b:8d:
93:90:c4:a2:66:ad:18:10:bb:06:73:53:c4:b9:be:
67:46:cf:15:b8:8d:53:22:98:fa:1e:9b:ef:b9:09:
6e:32:48:ed:dd:c9:46:40:3e:f4:9a:7e:d1:5c:da:
3e:14:e0:ec:5d:29:2f:17:cc:99:0e:26:02:16:d8:
bf:6d:15:96:bf:a2:30:31:86:a6:89:1f:06:13:a8:
a9:23:9d:be:e2:36:c5:ee:6c:39:38:4f:d3:ae:d5:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:10:97:4A:67:69:AF:08:66:61:58:13:BB:CE:8F:FB:1E:3D:B4:88
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/shCXSmdprwhmYVgTu86P-x49tIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:a2:3b:00:f3:2b:d2:32:4f:82:2e:45:d4:a5:0e:13:b5:b6:
04:00:a5:60:92:6b:17:a9:72:cf:c5:bf:e4:07:3e:35:42:3e:
03:6e:26:1a:3d:a3:86:4c:39:d4:fb:29:e1:b5:4b:87:28:de:
aa:ae:ab:c2:aa:ae:18:10:2a:5f:3f:42:64:f5:4e:a5:f5:d8:
1c:77:bd:33:ae:02:5c:0b:38:4d:03:5b:cf:f0:f0:66:ee:a2:
95:e7:01:f6:43:7f:c1:78:a5:51:d1:dc:84:10:10:b7:8a:86:
a2:8b:06:48:99:44:c3:ff:01:10:20:9a:be:fa:bd:5b:5d:ef:
72:fd:b3:6c:d8:4e:09:7b:db:6b:15:d1:63:98:15:a3:8f:01:
8f:5e:28:e9:08:e7:12:be:f1:49:2f:aa:d1:ed:3c:3a:cb:e7:
58:4d:e4:3d:62:f2:98:37:26:1f:7b:0e:6c:21:45:76:62:97:
45:d9:d7:c5:89:21:33:b5:ec:a9:ff:2d:6a:b6:1c:18:8a:d9:
49:b9:7b:e9:f4:4c:45:e3:ab:de:fe:10:43:5a:96:77:3c:1b:
6c:1c:2b:f4:b6:ef:ee:6e:5e:57:cc:8d:37:42:5c:fb:0d:3e:
5a:01:b2:89:1f:d1:93:64:25:82:e8:4a:40:83:bd:40:f9:e2:
b4:59:35:04
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 22 11:11:38 2024 by rpki-client on console-fra.rpki-client.org