Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8ygnFP6gvYEmbb3KUUREXFz5On4.roa
File: 8ygnFP6gvYEmbb3KUUREXFz5On4.roa (raw, json)
Hash identifier: MeZbDWSEdTEUHKa3HzAQ7xp66IxV9NWP51zM1yIxnCc=
Subject key identifier: F3:28:27:14:FE:A0:BD:81:26:6D:BD:CA:51:44:44:5C:5C:F9:3A:7E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB509FC183DD8BA5FB4DF94A8C862C756
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8ygnFP6gvYEmbb3KUUREXFz5On4.roa
Signing time: Sat 06 Apr 2024 20:11:54 +0000
ROA not before: Sat 06 Apr 2024 20:11:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 06 Apr 2024 21:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b5:09:fc:18:3d:d8:ba:5f:b4:df:94:a8:c8:62:c7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 6 20:11:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3282714fea0bd81266dbdca5144445c5cf93a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:7a:b9:8a:54:43:5e:35:30:89:2f:0c:aa:
88:8a:9b:7d:ee:bb:ee:36:f1:dd:dc:99:94:cf:f1:
d0:3c:c3:2f:e7:2f:b6:8f:db:4e:75:9c:ba:92:28:
71:c1:6e:f4:f1:1d:0f:eb:af:55:cb:3a:41:b7:b6:
dd:7b:65:e6:45:17:ae:3c:6c:96:23:ab:35:e6:07:
3a:a7:b4:ba:7e:c5:2c:94:f5:cb:17:9b:4d:d3:af:
57:00:9f:fb:00:ff:e8:75:60:7d:df:93:4c:4f:9e:
d7:61:61:22:67:2f:33:96:75:18:d7:9a:94:84:75:
09:45:8c:d6:76:9d:fd:4b:b0:74:45:b5:40:14:d2:
41:79:0b:27:26:4a:2a:72:ab:0b:da:6f:31:c2:72:
8b:fa:e0:ed:23:2d:8c:f1:69:57:4c:25:43:7c:9f:
c2:54:df:7b:7d:58:98:69:1e:29:0e:a8:82:b2:0e:
cb:26:95:0d:e3:70:1c:50:7d:b7:a8:70:6b:7a:f7:
b1:47:09:05:44:5f:d3:b4:99:52:4c:fc:a4:23:5a:
10:4c:01:8a:13:6e:31:72:32:0b:28:d4:99:78:1c:
68:93:2a:23:f3:4e:8b:42:6b:72:28:d7:43:bf:c0:
fd:57:36:63:ae:45:84:02:7f:69:67:d7:8b:2a:b8:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:28:27:14:FE:A0:BD:81:26:6D:BD:CA:51:44:44:5C:5C:F9:3A:7E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8ygnFP6gvYEmbb3KUUREXFz5On4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:f8:df:1a:3f:4a:c3:49:bf:41:6c:19:02:17:86:45:cf:5a:
24:57:90:26:71:2e:79:92:12:ae:5f:41:f4:e9:57:82:3b:65:
b5:fc:00:d0:eb:92:44:11:64:94:e3:5c:e0:cf:5b:04:bb:71:
97:20:73:77:13:6d:fa:5e:63:70:32:a7:ab:37:79:5a:db:7b:
5f:3e:65:f0:d0:05:62:9c:80:7f:68:1e:bb:8b:ab:e2:03:4e:
d1:df:1b:96:80:12:24:df:eb:ac:94:5b:33:5c:bd:c2:57:20:
30:dd:fb:74:9d:65:5c:14:55:ee:51:66:62:23:2a:5c:c1:2a:
e7:b8:33:20:65:b5:a5:66:7b:bd:81:f8:42:66:3b:77:5c:1a:
4b:c1:59:f5:02:0f:b4:d6:cd:e5:56:b8:69:31:5f:fc:2b:28:
b2:c9:f5:b3:54:22:75:b9:b7:f7:ed:12:13:d2:cf:5a:11:59:
85:3a:78:11:6e:e5:61:a2:20:31:12:c5:4a:5e:66:f3:36:46:
fd:37:f5:d9:d0:9a:38:77:66:a6:62:64:31:6c:46:b3:c0:4e:
b2:92:61:52:6e:ac:db:13:35:dd:10:00:5c:f2:3e:cc:c2:c2:
01:2b:e4:62:cd:c6:51:4f:0f:ef:47:c4:9e:95:cd:65:86:29:
b0:7d:e7:39
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY61CfwYPdi6X7TflKjIYsdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA2MjAxMTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzI4MjcxNGZlYTBiZDgxMjY2ZGJkY2E1MTQ0NDQ1YzVjZjkzYTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvJ6uYpUQ141MIkvDKqIipt97rvu
NvHd3JmUz/HQPMMv5y+2j9tOdZy6kihxwW708R0P669VyzpBt7bde2XmRReuPGyW
I6s15gc6p7S6fsUslPXLF5tN069XAJ/7AP/odWB935NMT57XYWEiZy8zlnUY15qU
hHUJRYzWdp39S7B0RbVAFNJBeQsnJkoqcqsL2m8xwnKL+uDtIy2M8WlXTCVDfJ/C
VN97fViYaR4pDqiCsg7LJpUN43AcUH23qHBrevexRwkFRF/TtJlSTPykI1oQTAGK
E24xcjILKNSZeBxokyoj806LQmtyKNdDv8D9VzZjrkWEAn9pZ9eLKrgjTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPMoJxT+oL2BJm29ylFERFxc+Tp+MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvOHlnbkZQNmd2WUVtYmIzS1VVUkVYRno1T240LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACv43xo/SsNJv0FsGQIX
hkXPWiRXkCZxLnmSEq5fQfTpV4I7ZbX8ANDrkkQRZJTjXODPWwS7cZcgc3cTbfpe
Y3Ayp6s3eVrbe18+ZfDQBWKcgH9oHruLq+IDTtHfG5aAEiTf66yUWzNcvcJXIDDd
+3SdZVwUVe5RZmIjKlzBKue4MyBltaVme72B+EJmO3dcGkvBWfUCD7TWzeVWuGkx
X/wrKLLJ9bNUInW5t/ftEhPSz1oRWYU6eBFu5WGiIDESxUpeZvM2Rv039dnQmjh3
ZqZiZDFsRrPATrKSYVJurNsTNd0QAFzyPszCwgEr5GLNxlFPD+9HxJ6VzWWGKbB9
5zk=
-----END CERTIFICATE-----
Generated at Sun Apr 7 03:14:15 2024 by rpki-client on console.sobornost.net