Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DkLB1N4t4WM9N97ZeWi7KZm2FeQ.roa
File: DkLB1N4t4WM9N97ZeWi7KZm2FeQ.roa (raw, json)
Hash identifier: kONUm5iim4jyz0poxEx6tqjb0Ulkb3ppmcuXojj2itw=
Subject key identifier: 0E:42:C1:D4:DE:2D:E1:63:3D:37:DE:D9:79:68:BB:29:99:B6:15:E4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01901E2BA22CA8E4ADAE4403F1A786C69758
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DkLB1N4t4WM9N97ZeWi7KZm2FeQ.roa
Signing time: Sat 15 Jun 2024 23:11:34 +0000
ROA not before: Sat 15 Jun 2024 23:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Jun 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:2b:a2:2c:a8:e4:ad:ae:44:03:f1:a7:86:c6:97:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 15 23:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e42c1d4de2de1633d37ded97968bb2999b615e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:57:ae:ae:58:41:e3:08:80:66:09:a8:6c:
87:50:a6:ad:a4:2f:b0:54:34:f0:0a:76:61:af:bb:
e2:3b:e8:01:41:56:a6:17:68:71:63:3c:fe:4b:ce:
59:f9:0a:6e:85:94:e5:d8:f0:71:8b:27:74:59:13:
28:de:b8:0a:b3:12:d7:e8:94:1d:1c:41:0c:7f:75:
d2:f0:4a:ab:a7:6b:fa:2d:9f:a1:4c:62:a3:1c:5e:
a7:4f:b8:93:06:47:eb:86:14:6c:c1:a6:4c:bc:11:
be:63:50:ca:57:4b:e4:a8:93:2e:86:02:51:cb:37:
6b:e2:26:c7:cc:5e:c0:27:ce:7d:14:9b:f1:56:39:
4b:f9:bb:a2:2d:c9:d6:20:3f:fa:25:b9:6e:9e:3f:
b0:8b:82:8b:95:a1:4e:de:dd:7c:c3:e8:a4:3a:db:
6c:32:61:11:8e:fa:e4:17:29:46:4f:2f:04:88:1a:
d3:0d:0f:87:f8:17:dc:af:bd:db:c6:29:44:ce:3b:
09:24:c0:1e:2f:9d:6d:5c:8e:42:52:60:27:a0:17:
ed:f1:23:a7:14:35:4b:6c:18:a4:87:1c:9c:5f:39:
62:2d:93:8f:1b:ac:a9:05:6d:11:8c:f6:d9:15:c2:
70:4b:ed:0b:c3:4d:bf:6b:a6:e0:59:f9:28:70:0d:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:42:C1:D4:DE:2D:E1:63:3D:37:DE:D9:79:68:BB:29:99:B6:15:E4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DkLB1N4t4WM9N97ZeWi7KZm2FeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:75:75:cb:b8:7b:90:9e:65:01:ea:ef:19:8b:c9:1e:7a:47:
4c:97:87:bd:14:0e:c0:a4:e7:b7:a6:d1:11:25:77:4c:f1:bd:
8c:64:a8:7a:95:2d:85:fe:3c:aa:86:6b:b8:b4:d0:e1:37:c4:
b3:a2:eb:73:cb:21:f7:b4:48:58:9d:b5:51:2a:da:38:01:80:
7e:98:4d:6e:41:1e:cb:4a:fa:36:01:5d:e3:69:10:5f:21:9c:
1b:dd:b6:7c:c5:1c:6c:19:85:ff:c0:fa:92:cb:0d:18:af:67:
e3:fa:01:13:19:b1:8b:3b:dc:47:d7:ad:ce:27:92:f0:fc:93:
62:37:15:5c:76:cb:38:cf:32:4b:71:14:e2:1e:a0:2a:9a:cf:
22:c0:63:fc:70:3a:a0:25:1d:bf:dd:39:d6:b8:c8:5a:e2:37:
ce:55:ff:58:9a:1b:30:76:18:36:82:2e:66:fd:d7:d7:92:23:
bb:e5:2d:e0:de:89:94:dd:10:c4:07:c2:56:ec:9c:6e:34:10:
1a:e4:54:90:80:ea:c8:a0:65:47:ff:74:35:34:90:32:7f:09:
40:fa:6a:11:16:38:9d:62:54:5d:ae:1d:ad:42:7f:89:1b:42:
7d:b1:73:4d:72:67:13:d4:f5:40:21:5a:58:e2:c7:9a:69:4e:
26:3f:e6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:00:03 2024 by rpki-client on console.sobornost.net