Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cK8eKMkYNaeN-WzU-IiALbgWDeY.roa
File: cK8eKMkYNaeN-WzU-IiALbgWDeY.roa (raw, json)
Hash identifier: mg/AyXTd2x0rVDbnbqtRyi5ah0WdbzX6PB++YhoOrGA=
Subject key identifier: 70:AF:1E:28:C9:18:35:A7:8D:F9:6C:D4:F8:88:80:2D:B8:16:0D:E6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190AB1F505DD36C45D1A4115AA61774E8E0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cK8eKMkYNaeN-WzU-IiALbgWDeY.roa
Signing time: Sat 13 Jul 2024 08:04:34 +0000
ROA not before: Sat 13 Jul 2024 08:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:ab1f:3ca/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 13 Jul 2024 08:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ab:1f:50:5d:d3:6c:45:d1:a4:11:5a:a6:17:74:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 13 08:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70af1e28c91835a78df96cd4f888802db8160de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:70:f2:34:5d:a5:eb:37:e9:ae:1a:13:7f:
10:6b:56:21:3a:6c:09:dc:08:a1:fb:b1:2b:df:a8:
ac:6b:8b:12:cb:72:84:50:91:a3:79:30:75:0d:97:
2f:4a:9c:8c:41:63:2d:80:dc:a2:17:75:93:86:2d:
ec:19:50:44:2d:92:79:3f:54:a5:f3:b1:cd:be:ce:
b3:34:85:b2:40:b0:7c:4b:fd:f2:38:c8:ab:9f:45:
8e:e0:74:90:4e:42:25:25:47:29:fe:9a:a6:2e:ab:
31:64:5e:5a:bf:6b:19:15:56:ae:c2:27:90:56:ea:
53:40:1d:08:aa:a2:9c:44:7e:fb:29:9e:b9:ba:f0:
0f:b2:89:cd:07:60:e8:a2:cd:be:ff:f1:d3:0d:51:
71:dc:e4:02:0d:c7:6f:47:95:bd:82:3c:a9:fa:fb:
91:48:b0:fa:4e:d3:a6:1b:37:90:7f:93:96:ab:64:
01:7e:63:e9:8b:bc:27:ce:3b:33:49:67:04:8e:f0:
d5:f4:37:7d:17:76:8d:24:b9:45:1b:af:6b:20:60:
41:b1:56:41:1f:28:8b:ea:93:57:5f:5e:26:01:0b:
84:f5:83:a9:9a:bb:f5:4f:fc:73:de:da:70:69:ff:
d0:19:b2:f4:91:88:1f:4a:89:44:34:5b:33:34:e6:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AF:1E:28:C9:18:35:A7:8D:F9:6C:D4:F8:88:80:2D:B8:16:0D:E6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cK8eKMkYNaeN-WzU-IiALbgWDeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:12:53:1e:d9:06:56:d2:9a:97:a6:62:9e:5e:7b:74:d0:c5:
80:27:c3:a7:65:a5:c2:1a:10:cf:1b:b6:bd:d6:62:82:b0:a2:
b8:6c:ac:fb:73:59:68:b2:ec:8f:aa:24:6f:fd:0f:20:66:ad:
16:31:d7:19:dd:a0:b4:2e:ea:8e:b9:89:54:1e:83:83:e0:01:
79:68:b8:04:f1:8c:fc:a8:b3:dd:39:19:a0:ff:00:0f:24:87:
ec:6b:73:91:03:0d:fd:93:b5:43:65:13:43:99:64:70:ab:2e:
9b:bb:10:58:25:e0:6b:ca:fe:44:ce:92:d1:ea:60:26:aa:17:
8c:59:a0:d1:94:24:d8:4e:5a:4e:0a:1b:67:d7:68:99:3a:0b:
de:76:a5:5d:09:b5:9b:3b:15:11:96:b0:78:af:36:58:c2:0e:
33:16:11:f7:9d:12:ce:f6:94:6a:0e:86:47:24:9d:e9:aa:57:
65:cb:c1:d4:88:11:1a:7c:50:ee:19:d3:af:f6:83:f7:ea:f3:
50:e3:b4:8b:15:fd:73:70:ff:82:4c:ec:01:6b:56:e0:b0:83:
94:24:c7:6c:f5:65:c4:be:62:bc:1e:b6:c1:fd:8f:47:8b:f7:
7d:09:18:51:f2:a3:d2:ce:26:cd:07:c0:fa:99:d8:fa:ba:53:
3c:fd:5b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 14:40:01 2024 by rpki-client on console.sobornost.net