Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7zx8QauGw27eErtMfn5QknhLxrg.roa
File: 7zx8QauGw27eErtMfn5QknhLxrg.roa (raw, json)
Hash identifier: RyQrLsolaDQ8lFIbsmmBqhqSnAq2zcf/BM1csNeHB3k=
Subject key identifier: EF:3C:7C:41:AB:86:C3:6E:DE:12:BB:4C:7E:7E:50:92:78:4B:C6:B8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB989BBD7C6716DA0265C44C6FF056A39
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7zx8QauGw27eErtMfn5QknhLxrg.roa
Signing time: Mon 27 May 2024 10:12:42 +0000
ROA not before: Mon 27 May 2024 10:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 27 May 2024 11:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:89:bb:d7:c6:71:6d:a0:26:5c:44:c6:ff:05:6a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 27 10:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef3c7c41ab86c36ede12bb4c7e7e5092784bc6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:af:9f:52:a9:68:a5:d6:1d:f1:32:99:f4:
f9:0c:a2:2f:63:50:c3:8b:2e:04:f2:d5:d3:37:71:
3e:43:4c:b4:93:c9:d0:2a:e9:a2:97:38:e4:88:66:
56:35:47:8d:04:00:5a:ef:bb:b7:96:20:55:d1:31:
e2:6e:ed:2d:db:18:4b:56:04:fd:ce:8f:c9:8b:7c:
92:90:e3:c9:86:78:a7:79:af:02:72:99:7a:4b:73:
4b:04:31:c8:b1:a6:d7:8c:c2:5c:b0:99:1e:82:e6:
d8:50:84:73:a2:4d:f5:57:a2:cb:0a:d5:18:8c:b8:
99:8c:cd:60:01:53:94:99:de:b5:f7:09:9d:ec:be:
16:61:23:37:6a:fb:75:95:9e:ff:40:c2:d7:29:a1:
b9:e9:dd:78:a6:9e:aa:e7:2f:63:ad:24:15:a3:b5:
bf:ce:d1:6d:b1:61:dd:fa:09:bb:7d:5d:2f:7b:73:
c7:b8:ec:21:13:d2:bf:57:12:04:ed:17:2f:8c:d7:
1b:95:8b:60:29:c3:fc:ed:de:5a:ee:34:c6:17:e6:
bc:43:f4:3a:23:8f:07:f6:3a:0c:07:ec:5f:88:c6:
82:20:5f:dc:9c:51:58:29:58:f9:7b:66:2a:a1:b7:
d2:65:1a:a6:06:11:19:0f:44:c0:af:9b:cd:ee:db:
41:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3C:7C:41:AB:86:C3:6E:DE:12:BB:4C:7E:7E:50:92:78:4B:C6:B8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7zx8QauGw27eErtMfn5QknhLxrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:de:66:b0:13:26:31:8f:81:9a:17:d6:ec:f6:89:81:5c:96:
db:85:31:55:ef:37:fd:7e:f0:0e:4e:a2:e5:6e:a1:54:bb:aa:
52:0c:c3:4e:c3:c2:69:f1:81:fc:6b:7c:5a:d1:99:b9:68:b4:
d9:cb:2b:94:a3:22:e2:1a:3b:86:5a:49:22:51:f3:1e:17:bb:
36:3c:45:ec:08:6a:60:0e:cf:52:c2:2f:84:48:94:ae:37:79:
43:99:fd:7f:ad:1b:7b:df:c7:2f:75:2a:f1:ad:7a:8f:4a:78:
79:64:47:78:c2:bb:5f:ce:9e:fd:ea:38:69:b9:7a:dd:29:34:
2c:6f:c5:c8:eb:25:02:c3:8e:b2:50:ed:dd:c9:99:9a:b9:74:
0c:aa:a2:c1:d5:37:c4:a5:a8:2c:08:04:0e:01:71:6f:9b:4d:
5e:e3:07:63:88:17:de:95:a1:87:06:e7:ca:6b:df:80:c8:d2:
95:9a:a0:6a:aa:e3:92:75:a1:96:78:b8:d0:a6:49:93:32:83:
36:51:2e:ec:58:80:05:c9:69:b8:ca:92:25:65:4b:af:c1:53:
09:be:93:34:67:c6:39:81:69:4f:e2:b6:28:fc:2b:10:e7:b1:
c5:88:44:21:99:92:4a:9e:28:f8:a8:fc:91:9c:74:96:9e:54:
b2:c2:07:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 18:33:58 2024 by rpki-client on console.sobornost.net