Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u_3vSliGd1-mXlO63_dUVHXFPBI.roa
File: u_3vSliGd1-mXlO63_dUVHXFPBI.roa (raw, json)
Hash identifier: V1gd3/GwNUO9rqrapNTnwHUMgaoRD/cKninjQjqsR2A=
Subject key identifier: BB:FD:EF:4A:58:86:77:5F:A6:5E:53:BA:DF:F7:54:54:75:C5:3C:12
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB87629199CB2B217D8B9E84EF2179166
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u_3vSliGd1-mXlO63_dUVHXFPBI.roa
Signing time: Mon 27 May 2024 05:11:42 +0000
ROA not before: Mon 27 May 2024 05:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 27 May 2024 06:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:76:29:19:9c:b2:b2:17:d8:b9:e8:4e:f2:17:91:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 27 05:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbfdef4a5886775fa65e53badff7545475c53c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:f5:d3:bb:54:3d:0c:e2:d0:5f:e9:e0:d7:
a9:c6:0f:47:50:28:c8:e7:4c:63:de:c1:c3:e9:c2:
38:8f:ce:a4:10:c0:d5:88:8a:ea:ee:65:85:25:46:
e3:91:2d:17:10:54:8d:9c:d7:bf:86:b9:64:47:76:
a7:9a:2a:86:f5:03:a6:1f:30:8e:65:ae:23:6c:f5:
c0:aa:91:58:bc:8e:a5:33:29:aa:0d:75:3e:e3:59:
2a:0b:67:51:a1:cb:83:16:47:8a:34:90:86:f5:33:
cc:a1:8c:73:67:ce:81:27:4d:42:98:d1:5d:b3:e4:
23:27:8a:26:d3:37:14:f2:e4:6f:25:90:55:3a:3f:
05:a5:bd:dc:40:86:12:fe:55:2c:09:49:e6:db:0a:
25:2f:b0:5e:ce:f6:12:90:f7:97:e2:e5:1c:40:db:
00:40:f8:e2:2f:79:53:8e:44:dc:6e:f5:98:6b:52:
74:ed:93:54:cc:a1:7a:eb:9a:2e:e5:fd:fc:43:d2:
c9:e4:4b:25:0c:67:d2:48:a0:06:8b:37:de:7c:97:
75:b6:84:c3:0f:b8:c0:c9:7c:02:29:19:98:79:1b:
a8:ce:57:ef:43:71:bf:2e:38:42:e1:c6:a2:1e:2b:
8b:bb:21:bc:2e:bc:ae:0c:ce:bc:f3:24:3e:15:6f:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FD:EF:4A:58:86:77:5F:A6:5E:53:BA:DF:F7:54:54:75:C5:3C:12
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/u_3vSliGd1-mXlO63_dUVHXFPBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:56:53:eb:a3:c1:ad:1c:d6:68:7e:bf:61:67:7f:69:f7:c0:
2f:72:c5:8a:52:31:a8:26:5b:14:57:e9:7d:ad:06:22:56:29:
34:aa:80:80:1a:e1:0b:bf:d0:51:77:ea:ea:07:d4:01:b0:f6:
90:ce:1b:f6:44:73:50:06:e0:be:96:3c:b2:04:0e:ff:40:72:
fd:45:96:29:d3:f3:9d:a2:7b:1c:62:7b:16:66:51:4b:ba:8c:
47:6b:d0:38:7f:6b:e6:bb:0b:c3:1b:04:06:95:ec:e7:0a:bc:
80:9b:3b:fd:b4:03:14:b0:dc:59:f7:ca:70:96:95:2f:32:6d:
90:74:07:01:fc:19:ce:d8:9a:8c:7f:b6:71:7f:4e:5f:88:7e:
78:75:fb:4e:1b:09:a7:f6:eb:f4:d7:d5:28:c2:ad:8b:2b:3a:
c6:ac:64:4c:8b:90:b8:21:1f:9d:fa:15:71:e3:70:50:26:27:
dc:6c:d2:ad:8f:92:4f:d9:5d:e3:fd:26:66:b4:89:44:22:a8:
91:24:e4:ca:2c:60:b0:53:2d:49:2b:f6:4b:20:65:9d:67:aa:
7e:8c:67:ee:15:a8:16:6a:c0:4c:38:c4:37:5b:3e:5c:22:5a:
bf:ea:0d:fe:0e:2e:a3:a3:52:04:0f:60:8c:ca:40:3e:53:9a:
e4:d4:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org