Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/p4kOKaVG26A0_J_DHS5V_6UTXec.roa
File: p4kOKaVG26A0_J_DHS5V_6UTXec.roa (raw, json)
Hash identifier: ejfif4oUfz14TGHeeQYJct/t1ULq/7ivw36/Q8CVVts=
Subject key identifier: A7:89:0E:29:A5:46:DB:A0:34:FC:9F:C3:1D:2E:55:FF:A5:13:5D:E7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8943CB2726726763308A67B1D4944314
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/p4kOKaVG26A0_J_DHS5V_6UTXec.roa
Signing time: Fri 29 Mar 2024 08:11:45 +0000
ROA not before: Fri 29 Mar 2024 08:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 29 Mar 2024 09:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:89:43:cb:27:26:72:67:63:30:8a:67:b1:d4:94:43:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 29 08:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7890e29a546dba034fc9fc31d2e55ffa5135de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:b2:4a:65:5c:a9:03:16:29:c0:d4:a8:d0:
6d:28:30:91:53:cb:44:a1:19:9f:d4:60:01:18:90:
4b:49:a4:25:a3:24:ac:84:48:6f:50:f2:81:30:0d:
28:12:55:df:99:4b:f7:4e:b6:37:df:fb:24:69:78:
1e:24:4b:a0:1a:0f:bb:39:f7:5b:94:c6:84:45:85:
95:3e:8e:bb:36:6d:f4:dd:c8:08:38:0d:7b:fd:f0:
38:53:df:e5:9d:ef:8a:81:3d:4c:33:2d:12:16:af:
a6:ea:e3:df:de:30:64:17:35:00:1c:94:6d:48:e7:
a3:40:0f:9d:58:02:3b:e5:95:64:f6:37:1c:43:9f:
a6:90:a6:1c:8e:d7:84:1e:82:43:84:3f:87:2f:4d:
1e:56:cb:1b:8f:39:21:4d:9b:63:91:4e:9b:25:8b:
dd:12:e0:13:97:a7:cb:cd:f1:f3:28:36:47:75:18:
2d:bf:e6:42:1f:97:42:6d:1a:c5:11:54:08:17:12:
f3:81:8f:6a:2e:e4:28:b0:07:42:3a:1d:40:c4:a2:
88:a8:0f:8f:8a:a8:f2:84:53:72:42:ed:19:56:af:
83:bd:d7:e7:58:d1:e3:9c:6d:2e:4b:c8:d9:4b:76:
d8:74:64:10:e5:ea:84:b9:77:c9:6d:0e:1a:ef:94:
12:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:89:0E:29:A5:46:DB:A0:34:FC:9F:C3:1D:2E:55:FF:A5:13:5D:E7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/p4kOKaVG26A0_J_DHS5V_6UTXec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:87:b3:30:86:ac:58:6c:38:1b:b3:f2:09:ca:e1:c3:e2:c7:
22:33:ea:a2:82:1e:d6:1a:c9:54:8a:a2:81:1e:94:d8:08:b9:
94:e6:d1:81:58:88:55:26:eb:1f:a5:be:e0:2b:a0:83:59:cf:
be:ce:7b:69:5f:58:9f:c3:fd:5f:88:8f:86:b5:a2:8e:53:e6:
dc:e3:f0:a5:bc:45:62:a7:72:46:77:d3:f5:8f:c9:5e:8e:7c:
34:6f:48:e0:0f:00:81:1b:bb:b5:52:f3:9e:5f:ed:4e:45:89:
14:36:b3:5e:a8:a9:27:2e:e2:42:8d:3e:d5:be:d0:21:ab:ae:
87:47:cf:62:c9:76:dc:73:fc:75:16:c0:08:a5:10:f7:6e:9d:
52:74:27:f6:46:6f:d4:f0:48:12:89:62:1b:f1:38:2a:8f:1f:
fe:c8:e3:f7:43:f1:9e:ee:d6:6e:67:fb:74:51:8b:71:fc:aa:
4b:78:3c:d3:a8:fc:56:06:9d:60:2d:c0:35:aa:3c:3b:40:66:
7f:bb:36:25:14:e5:e1:6f:ac:4d:de:39:d8:5f:ca:29:9c:d1:
cf:84:44:eb:b2:de:48:70:47:8b:65:d6:34:a6:84:62:ce:c3:
e0:b4:40:04:79:5b:42:60:d5:6d:12:02:8a:b6:80:1d:92:5b:
92:61:ed:3c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6JQ8snJnJnYzCKZ7HUlEMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzI5MDgxMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzg5MGUyOWE1NDZkYmEwMzRmYzlmYzMxZDJlNTVmZmE1MTM1ZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/yySmVcqQMWKcDUqNBtKDCRU8tE
oRmf1GABGJBLSaQloySshEhvUPKBMA0oElXfmUv3TrY33/skaXgeJEugGg+7Ofdb
lMaERYWVPo67Nm303cgIOA17/fA4U9/lne+KgT1MMy0SFq+m6uPf3jBkFzUAHJRt
SOejQA+dWAI75ZVk9jccQ5+mkKYcjteEHoJDhD+HL00eVssbjzkhTZtjkU6bJYvd
EuATl6fLzfHzKDZHdRgtv+ZCH5dCbRrFEVQIFxLzgY9qLuQosAdCOh1AxKKIqA+P
iqjyhFNyQu0ZVq+DvdfnWNHjnG0uS8jZS3bYdGQQ5eqEuXfJbQ4a75QS5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKeJDimlRtugNPyfwx0uVf+lE13nMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvcDRrT0thVkcyNkEwX0pfREhTNVZfNlVUWGVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIiHszCGrFhsOBuz8gnK
4cPixyIz6qKCHtYayVSKooEelNgIuZTm0YFYiFUm6x+lvuAroINZz77Oe2lfWJ/D
/V+Ij4a1oo5T5tzj8KW8RWKnckZ30/WPyV6OfDRvSOAPAIEbu7VS855f7U5FiRQ2
s16oqScu4kKNPtW+0CGrrodHz2LJdtxz/HUWwAilEPdunVJ0J/ZGb9TwSBKJYhvx
OCqPH/7I4/dD8Z7u1m5n+3RRi3H8qkt4PNOo/FYGnWAtwDWqPDtAZn+7NiUU5eFv
rE3eOdhfyimc0c+EROuy3khwR4tl1jSmhGLOw+C0QAR5W0Jg1W0SAoq2gB2SW5Jh
7Tw=
-----END CERTIFICATE-----
Generated at Fri Mar 29 14:29:06 2024 by rpki-client on console.sobornost.net