Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yi-Hw7O6WYL--PVAUUlxD7w8_8E.roa
File: yi-Hw7O6WYL--PVAUUlxD7w8_8E.roa (raw, json)
Hash identifier: Luvm7O54vJNVjIFe2Jphtd7oDcf0f5YLMF/LnfvxcpU=
Subject key identifier: CA:2F:87:C3:B3:BA:59:82:FE:F8:F5:40:51:49:71:0F:BC:3C:FF:C1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E5C9C849C801117B52B2952B81039DA26
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yi-Hw7O6WYL--PVAUUlxD7w8_8E.roa
Signing time: Wed 20 Mar 2024 16:05:45 +0000
ROA not before: Wed 20 Mar 2024 16:05:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:5c9b:ba64/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 20 Mar 2024 16:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:9c:84:9c:80:11:17:b5:2b:29:52:b8:10:39:da:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 20 16:05:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca2f87c3b3ba5982fef8f5405149710fbc3cffc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:28:a8:64:d8:c0:f2:04:d8:6e:13:39:aa:
7d:5b:ee:df:1e:90:fa:c8:7c:5b:6e:00:13:d0:68:
dd:e6:61:dc:fb:5f:80:95:81:e6:39:84:aa:7b:40:
23:12:02:23:a9:ab:f4:cf:c0:b4:b3:54:b3:c9:2a:
0d:82:9f:42:c4:df:f2:7c:31:2e:39:d2:a9:1e:9d:
28:e7:de:26:9c:d0:04:1a:5c:17:82:5b:bf:c1:3c:
06:3a:fb:37:5f:49:e7:2e:4d:b6:b5:dc:2e:cc:d4:
86:3a:33:5d:f4:0f:d7:06:fd:c5:3a:f9:aa:0c:b7:
b7:d1:a4:11:d8:2e:64:70:a9:8d:80:27:e7:d2:90:
d6:8b:60:1d:9d:f3:7f:24:d0:05:e0:d5:51:60:9d:
c4:d5:a0:10:8a:d4:b2:2b:58:5a:2a:04:ca:6a:d3:
92:84:b5:8f:de:cb:a0:65:21:54:cd:81:b0:86:9b:
f0:48:8d:ff:68:0d:d0:f8:4e:76:65:58:10:34:6f:
84:51:a3:b5:89:39:9d:79:a0:d9:ce:2c:39:57:2e:
cb:dc:3c:92:17:b5:50:e4:96:3d:bb:19:90:05:77:
12:aa:8f:51:80:39:45:cb:89:98:b4:9c:de:24:4c:
59:e5:63:6a:01:51:5a:37:3c:9b:a3:28:65:dd:24:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2F:87:C3:B3:BA:59:82:FE:F8:F5:40:51:49:71:0F:BC:3C:FF:C1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yi-Hw7O6WYL--PVAUUlxD7w8_8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:11:d9:12:d4:f8:5d:d0:31:1e:1d:b3:f7:69:17:40:12:4d:
7b:c9:75:ec:01:ff:19:2f:6f:dc:de:43:f6:fa:6e:c9:1b:44:
ba:48:9e:ad:28:2e:06:93:0d:4a:b6:68:e8:ef:13:55:d4:b9:
fe:e5:29:55:b7:f0:57:8d:a7:ec:d3:6e:7d:71:6d:bb:ea:c3:
62:4e:51:8f:5f:54:53:af:5b:42:54:61:5b:a6:e8:9b:00:87:
0c:9d:94:83:b7:59:c5:31:78:b4:14:2e:0c:e5:ac:b7:d9:62:
74:22:34:6f:98:6f:d8:d4:d0:2a:b4:c9:01:3b:aa:bc:d3:df:
50:9c:52:27:80:6c:59:ce:5a:90:60:a8:81:a4:d7:a5:de:d7:
37:2b:47:2a:66:e1:92:0d:7c:56:db:0c:15:c7:ce:62:54:0d:
3d:a7:81:7b:c5:49:86:15:4a:ec:c4:26:4d:97:be:18:d7:7c:
d5:1f:c1:7c:08:af:e1:16:c2:d9:26:83:13:e2:da:3c:56:5d:
e8:c9:be:4e:a9:5b:97:7e:96:94:c3:84:be:a3:c6:6d:58:5d:
b5:a6:02:6c:49:35:9f:e5:9d:92:76:30:d0:1f:fd:e3:1b:18:
87:89:7e:c4:78:16:f6:cd:fe:9b:24:00:8f:0e:6c:9e:33:eb:
ec:5e:f0:20
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5cnIScgBEXtSspUrgQOdomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzIwMTYwNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTJmODdjM2IzYmE1OTgyZmVmOGY1NDA1MTQ5NzEwZmJjM2NmZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RMoqGTYwPIE2G4TOap9W+7fHpD6
yHxbbgAT0Gjd5mHc+1+AlYHmOYSqe0AjEgIjqav0z8C0s1SzySoNgp9CxN/yfDEu
OdKpHp0o594mnNAEGlwXglu/wTwGOvs3X0nnLk22tdwuzNSGOjNd9A/XBv3FOvmq
DLe30aQR2C5kcKmNgCfn0pDWi2AdnfN/JNAF4NVRYJ3E1aAQitSyK1haKgTKatOS
hLWP3sugZSFUzYGwhpvwSI3/aA3Q+E52ZVgQNG+EUaO1iTmdeaDZziw5Vy7L3DyS
F7VQ5JY9uxmQBXcSqo9RgDlFy4mYtJzeJExZ5WNqAVFaNzyboyhl3SQv5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMovh8OzulmC/vj1QFFJcQ+8PP/BMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEveWktSHc3TzZXWUwtLVBWQVVVbHhEN3c4XzhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGsR2RLU+F3QMR4ds/dp
F0ASTXvJdewB/xkvb9zeQ/b6bskbRLpInq0oLgaTDUq2aOjvE1XUuf7lKVW38FeN
p+zTbn1xbbvqw2JOUY9fVFOvW0JUYVum6JsAhwydlIO3WcUxeLQULgzlrLfZYnQi
NG+Yb9jU0Cq0yQE7qrzT31CcUieAbFnOWpBgqIGk16Xe1zcrRypm4ZINfFbbDBXH
zmJUDT2ngXvFSYYVSuzEJk2XvhjXfNUfwXwIr+EWwtkmgxPi2jxWXejJvk6pW5d+
lpTDhL6jxm1YXbWmAmxJNZ/lnZJ2MNAf/eMbGIeJfsR4FvbN/pskAI8ObJ4z6+xe
8CA=
-----END CERTIFICATE-----
Generated at Wed Mar 20 22:53:09 2024 by rpki-client on console.sobornost.net