Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CJh3763ayKP1VyS4n7MuvaM95jA.roa
File: CJh3763ayKP1VyS4n7MuvaM95jA.roa (raw, json)
Hash identifier: gsLCVXPFPSXJM3xUx76V4AFnc19tC8YvZiOtoq1hSDM=
Subject key identifier: 08:98:77:EF:AD:DA:C8:A3:F5:57:24:B8:9F:B3:2E:BD:A3:3D:E6:30
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F002447B5A0F6ED5DBAE4D21C8F07DAF4
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CJh3763ayKP1VyS4n7MuvaM95jA.roa
Signing time: Sun 21 Apr 2024 10:12:08 +0000
ROA not before: Sun 21 Apr 2024 10:12:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 21 Apr 2024 11:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:00:24:47:b5:a0:f6:ed:5d:ba:e4:d2:1c:8f:07:da:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 21 10:12:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=089877efaddac8a3f55724b89fb32ebda33de630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:17:63:72:17:cb:59:cb:6d:b1:95:5a:36:
a0:f6:49:16:45:02:8b:41:2e:8b:52:de:5b:65:88:
b9:e9:41:0c:e1:3e:b9:19:ae:cc:1b:ad:b5:47:3b:
74:88:96:dd:6a:c8:5a:5d:fa:cb:ca:c9:4c:7f:0c:
5d:bf:b9:0d:8d:eb:51:f5:4d:28:fc:93:95:e1:b4:
e8:a2:57:82:b3:b7:33:c8:f2:c7:eb:30:ea:d4:1b:
05:4b:f6:6a:e4:2d:b3:9f:c7:56:fc:d8:47:64:cc:
a9:c0:c9:f3:0f:ca:47:aa:73:e4:ce:f8:ba:1a:7d:
e4:54:d6:c0:db:32:4f:c2:b7:37:e0:fb:00:b7:87:
0c:f1:8e:b8:a9:71:14:2c:7c:bb:34:65:b1:60:fe:
35:fb:bc:3d:5d:52:77:e0:2d:ea:dc:09:3e:f1:c4:
1c:d6:b1:52:e2:a1:79:6a:7f:9d:cb:ef:b0:3f:20:
08:c7:3e:0f:f9:2c:68:9e:58:66:ee:bb:63:ac:0f:
2c:4a:49:91:6b:2c:e3:a4:d2:d8:4d:ea:8d:46:79:
5e:1a:6d:0e:59:80:35:e4:a2:29:60:e9:2a:d6:8f:
ec:41:83:b0:e3:23:27:6f:6c:02:f2:d4:da:da:9d:
cc:a1:d7:1b:af:ef:3e:34:49:6d:2d:c8:6d:fc:cc:
47:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:98:77:EF:AD:DA:C8:A3:F5:57:24:B8:9F:B3:2E:BD:A3:3D:E6:30
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/CJh3763ayKP1VyS4n7MuvaM95jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
86:c2:96:2c:11:57:e1:12:ba:b6:04:89:42:9f:d5:40:32:3a:
6d:ba:fd:16:7a:93:3a:a0:36:0d:be:51:a6:9d:03:ad:74:16:
25:8a:b9:08:2d:8e:7e:0b:59:7f:5c:e7:3e:93:3a:b3:40:1b:
52:4b:4a:96:49:e9:26:d2:6d:00:5f:33:8c:db:80:68:3d:cc:
bc:24:75:98:8e:ef:d0:19:05:e6:36:c1:3a:85:c3:2d:26:d1:
c7:fd:79:19:79:f4:88:35:87:b5:38:7f:d2:2a:1d:c2:d0:cf:
de:16:b2:be:ac:a0:d4:92:d6:71:f5:f6:08:19:03:6c:2d:9d:
e5:2e:50:f7:a2:ab:29:40:28:b9:45:ee:e7:e7:d0:a9:af:7b:
0b:d2:03:e8:4c:3d:68:a8:40:fd:6a:5c:f9:46:f3:58:99:6c:
cb:ae:ed:43:96:e6:75:10:6b:77:dc:33:5f:c9:b7:23:a9:da:
8d:0c:20:ae:6e:4c:39:2b:4a:ca:3a:76:b5:6c:ac:6b:46:f6:
d1:be:b5:17:9e:3f:0b:b4:fd:0c:fd:ac:a4:0c:00:e3:20:b4:
d9:36:51:cc:81:b1:64:6a:e8:59:39:89:54:7c:2c:39:04:cc:
9a:69:e9:9b:55:37:54:fc:b4:b6:c1:f8:a7:13:f5:39:be:4a:
4b:ee:7e:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8AJEe1oPbtXbrk0hyPB9r0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNDIxMTAxMjA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODk4NzdlZmFkZGFjOGEzZjU1NzI0Yjg5ZmIzMmViZGEzM2RlNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHkXY3IXy1nLbbGVWjag9kkWRQKL
QS6LUt5bZYi56UEM4T65Ga7MG621Rzt0iJbdashaXfrLyslMfwxdv7kNjetR9U0o
/JOV4bTooleCs7czyPLH6zDq1BsFS/Zq5C2zn8dW/NhHZMypwMnzD8pHqnPkzvi6
Gn3kVNbA2zJPwrc34PsAt4cM8Y64qXEULHy7NGWxYP41+7w9XVJ34C3q3Ak+8cQc
1rFS4qF5an+dy++wPyAIxz4P+Sxonlhm7rtjrA8sSkmRayzjpNLYTeqNRnleGm0O
WYA15KIpYOkq1o/sQYOw4yMnb2wC8tTa2p3Modcbr+8+NEltLcht/MxHbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAiYd++t2sij9VckuJ+zLr2jPeYwMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvQ0poMzc2M2F5S1AxVnlTNG43TXV2YU05NWpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwQAYMA0G
CSqGSIb3DQEBCwUAA4IBAQCGwpYsEVfhErq2BIlCn9VAMjptuv0WepM6oDYNvlGm
nQOtdBYlirkILY5+C1l/XOc+kzqzQBtSS0qWSekm0m0AXzOM24BoPcy8JHWYju/Q
GQXmNsE6hcMtJtHH/XkZefSINYe1OH/SKh3C0M/eFrK+rKDUktZx9fYIGQNsLZ3l
LlD3oqspQCi5Re7n59Cpr3sL0gPoTD1oqED9alz5RvNYmWzLru1DluZ1EGt33DNf
ybcjqdqNDCCubkw5K0rKOna1bKxrRvbRvrUXnj8LtP0M/aykDADjILTZNlHMgbFk
auhZOYlUfCw5BMyaaembVTdU/LS2wfinE/U5vkpL7n6E
-----END CERTIFICATE-----
Generated at Sun Apr 21 17:47:08 2024 by rpki-client on console.sobornost.net