Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8ep5ebb_RZJ99OZJvrTkFwJnEAU.roa
File: 8ep5ebb_RZJ99OZJvrTkFwJnEAU.roa (raw, json)
Hash identifier: 8SZgjn4kD0fBLEpmn4pikSfJAESdyxDoFbX9MijtuV8=
Subject key identifier: F1:EA:79:79:B6:FF:45:92:7D:F4:E6:49:BE:B4:E4:17:02:67:10:05
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CEBC75FEAA799C68DA25E33191BD17D6D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8ep5ebb_RZJ99OZJvrTkFwJnEAU.roa
Signing time: Tue 09 Jan 2024 01:12:41 +0000
ROA not before: Tue 09 Jan 2024 01:12:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 02:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:eb:c7:5f:ea:a7:99:c6:8d:a2:5e:33:19:1b:d1:7d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 9 01:12:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1ea7979b6ff45927df4e649beb4e41702671005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:84:9f:c5:b4:d9:58:c0:69:51:34:e8:7d:b0:
ed:0f:f3:fc:92:bc:91:e6:d4:35:dc:57:9d:ae:32:
cf:05:85:a6:45:55:13:4a:c6:e3:ae:f5:e1:60:a8:
af:89:06:a3:4c:e1:31:97:b2:a9:e0:3e:ee:c3:88:
39:e8:1d:04:73:18:c5:bc:e6:59:a5:1a:65:45:09:
16:17:c2:37:a2:4f:f6:7f:49:df:76:05:b2:1d:01:
a0:7b:53:a4:cc:bd:5d:a6:b6:a2:1e:a4:25:36:b9:
a3:0a:1f:78:87:6a:73:44:94:31:df:64:f9:b3:04:
58:12:53:02:c0:c8:e4:8f:3d:27:e6:c8:3e:e5:fa:
90:9d:c0:4f:c7:fa:09:da:7b:1c:1e:fd:3d:c8:9e:
db:87:fa:82:33:cd:a3:1d:27:69:a4:11:a5:31:c7:
a5:b4:f7:df:b8:48:a2:59:43:1d:df:f4:cf:c2:57:
fc:b4:e6:8c:42:35:cb:63:d1:98:fd:42:c8:d2:59:
13:7e:0f:cf:00:51:6f:16:1a:a5:33:bf:da:d1:b4:
37:30:76:c4:6b:a5:f4:b0:ae:62:c6:a1:44:5d:05:
12:44:be:47:e0:46:4a:a5:88:a3:88:a5:de:2d:76:
43:1e:46:07:10:84:47:fa:b5:5c:c7:53:08:bf:5d:
85:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EA:79:79:B6:FF:45:92:7D:F4:E6:49:BE:B4:E4:17:02:67:10:05
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8ep5ebb_RZJ99OZJvrTkFwJnEAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:9b:b9:2f:64:6e:30:ea:9d:7d:17:fe:c9:82:fd:f9:a1:5c:
f8:4f:cb:36:d0:84:3a:64:e1:6f:11:28:b5:13:41:e0:fb:4a:
b3:f6:9f:b3:34:91:b8:d4:64:02:aa:87:42:9f:a2:ae:bd:b6:
9a:c7:10:4c:3f:f3:f3:0a:7e:65:f9:73:f9:6c:ef:b9:94:5a:
1f:af:3a:cf:35:c4:6e:d5:33:43:a6:80:80:10:ff:7f:f3:b1:
ff:ea:c4:69:65:2e:52:8c:c2:9d:21:11:84:0f:15:8c:b9:24:
a9:c3:5a:6f:45:e8:05:08:9a:14:51:c8:b7:c3:27:f6:96:c6:
37:ca:30:4b:c3:40:49:a3:27:08:95:38:06:8c:ca:de:e6:00:
02:13:47:bc:ae:1c:35:05:e8:74:73:75:f8:30:61:5d:5b:6e:
73:ec:16:ba:c7:59:43:54:a1:c0:78:32:10:a6:96:df:38:c0:
a5:da:95:7e:36:3e:10:70:1b:16:aa:e1:4c:e0:53:79:76:1d:
48:b4:3a:88:b2:7b:c6:2c:3b:23:35:fa:f2:f4:ba:4d:de:33:
9b:ff:6e:9e:2d:a4:a8:c5:69:26:93:7a:aa:64:cd:05:66:e3:
b5:98:96:37:db:ea:15:49:58:cb:06:ba:dd:97:42:18:84:54:
5e:65:b9:60
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzrx1/qp5nGjaJeMxkb0X1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTA5MDExMjQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWVhNzk3OWI2ZmY0NTkyN2RmNGU2NDliZWI0ZTQxNzAyNjcxMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4SfxbTZWMBpUTTofbDtD/P8kryR
5tQ13FedrjLPBYWmRVUTSsbjrvXhYKiviQajTOExl7Kp4D7uw4g56B0EcxjFvOZZ
pRplRQkWF8I3ok/2f0nfdgWyHQGge1OkzL1dpraiHqQlNrmjCh94h2pzRJQx32T5
swRYElMCwMjkjz0n5sg+5fqQncBPx/oJ2nscHv09yJ7bh/qCM82jHSdppBGlMcel
tPffuEiiWUMd3/TPwlf8tOaMQjXLY9GY/ULI0lkTfg/PAFFvFhqlM7/a0bQ3MHbE
a6X0sK5ixqFEXQUSRL5H4EZKpYijiKXeLXZDHkYHEIRH+rVcx1MIv12FNQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPHqeXm2/0WSffTmSb605BcCZxAFMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvOGVwNWViYl9SWko5OU9aSnZyVGtGd0puRUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEObuS9kbjDqnX0X/smC
/fmhXPhPyzbQhDpk4W8RKLUTQeD7SrP2n7M0kbjUZAKqh0Kfoq69tprHEEw/8/MK
fmX5c/ls77mUWh+vOs81xG7VM0OmgIAQ/3/zsf/qxGllLlKMwp0hEYQPFYy5JKnD
Wm9F6AUImhRRyLfDJ/aWxjfKMEvDQEmjJwiVOAaMyt7mAAITR7yuHDUF6HRzdfgw
YV1bbnPsFrrHWUNUocB4MhCmlt84wKXalX42PhBwGxaq4UzgU3l2HUi0Ooiye8Ys
OyM1+vL0uk3eM5v/bp4tpKjFaSaTeqpkzQVm47WYljfb6hVJWMsGut2XQhiEVF5l
uWA=
Generated at Tue Jan 9 04:36:17 2024 by rpki-client on console.sobornost.net