Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8LksUrGlO1gbVkq0b_2RmRz0bYE.roa
File: 8LksUrGlO1gbVkq0b_2RmRz0bYE.roa (raw, json)
Hash identifier: 3o+abnjdOWEyt3sIXBwtGkneOdY099zi6ooGA1pkNo8=
Subject key identifier: F0:B9:2C:52:B1:A5:3B:58:1B:56:4A:B4:6F:FD:91:99:1C:F4:6D:81
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FB8A6AF46EF37CB6859CE69F192D2CAEF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8LksUrGlO1gbVkq0b_2RmRz0bYE.roa
Signing time: Mon 27 May 2024 06:04:42 +0000
ROA not before: Mon 27 May 2024 06:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:b8a6:983e/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 27 May 2024 06:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:a6:af:46:ef:37:cb:68:59:ce:69:f1:92:d2:ca:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 27 06:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0b92c52b1a53b581b564ab46ffd91991cf46d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:74:1e:c1:91:82:fe:92:ed:41:0b:99:05:
ab:1a:9e:57:4d:e7:f9:79:55:50:8a:6a:1a:58:a8:
91:c8:99:a0:ee:ea:7d:34:7e:c1:63:9c:be:e2:21:
e7:7b:37:5e:48:75:6e:c6:66:df:f9:0d:a6:c0:64:
2c:99:5c:ef:d9:91:02:83:d0:2d:88:76:ee:b8:67:
66:fe:1f:ed:8b:6a:55:48:e2:b6:22:c5:45:77:99:
27:3b:e0:10:a0:bf:30:39:94:2e:09:21:90:7e:e8:
9c:45:1d:da:1f:f3:c3:37:5f:40:f2:29:67:e5:67:
b0:3c:ff:44:22:d9:10:dc:a4:5f:7b:26:5a:61:33:
38:82:03:fb:d2:6b:0b:88:e5:49:81:0f:ed:46:20:
eb:3c:4e:59:23:0f:89:f1:3e:86:bf:91:bc:8e:40:
42:28:eb:c5:69:2f:6c:a8:53:c4:c5:e8:27:c6:a7:
f4:34:f2:cc:e9:0d:82:58:c5:26:16:d0:cf:56:f0:
5f:25:42:8f:b4:14:03:70:cb:2f:3b:87:7b:a3:00:
0a:14:d7:9f:3d:31:cc:f3:d3:7a:a8:f5:97:08:33:
0b:0f:97:13:d1:ed:10:59:8f:1a:01:bf:aa:99:61:
8a:67:d5:6b:f2:b9:8f:d3:97:f1:00:e4:87:59:d4:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B9:2C:52:B1:A5:3B:58:1B:56:4A:B4:6F:FD:91:99:1C:F4:6D:81
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8LksUrGlO1gbVkq0b_2RmRz0bYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:c6:3e:66:cd:8e:ff:3c:65:5f:cd:53:83:a2:d3:e0:7b:07:
b9:b0:6b:dc:20:fb:6c:6a:a7:4e:45:9d:00:5f:fb:ca:91:65:
6f:f2:f8:d9:76:b8:74:51:4b:ce:f0:90:0d:dc:02:3d:05:b0:
94:6f:91:3b:45:28:38:68:42:ce:80:e5:fa:7d:ee:f6:09:a8:
24:52:2b:d1:73:5b:00:98:cd:ca:4e:47:f1:7f:d5:7f:62:90:
da:f7:e7:cd:70:e6:bd:73:04:76:d1:59:4c:52:7f:f6:7d:45:
ec:1d:86:7d:4e:5b:61:3d:29:a9:25:ff:cd:82:3f:d3:e8:31:
62:44:b4:9e:96:4e:10:84:0e:07:97:d0:6c:c3:1a:89:06:5d:
1c:a5:29:e3:50:9a:ba:e2:c1:da:5a:bc:21:0b:5f:f2:69:36:
fd:49:2a:2a:49:46:b6:e7:27:c7:3d:86:24:47:ab:28:89:dc:
ae:0b:ee:8e:08:71:75:dc:c7:e0:12:0c:29:13:e8:39:ac:be:
ab:e6:d2:3a:ea:a2:8c:1e:b0:6d:6a:d6:d1:85:a9:dd:37:8a:
aa:b7:6d:7f:2f:eb:35:c1:a7:6f:98:c5:e5:8c:ca:9c:c8:f2:
fe:82:52:60:e6:98:aa:b5:78:d9:30:41:2a:10:42:99:9b:b6:
6d:94:99:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 14:19:07 2024 by rpki-client on console.sobornost.net