Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EoeyOYkg_nktDgXhiwibXbqOsG0.roa
File: EoeyOYkg_nktDgXhiwibXbqOsG0.roa (raw, json)
Hash identifier: 7x82UHCpGTOlpDMCJrIBuyfn9Og6qJn189EQtQ6O+fM=
Subject key identifier: 12:87:B2:39:89:20:FE:79:2D:0E:05:E1:8B:08:9B:5D:BA:8E:B0:6D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01903A10BF63021CFAAF4192F2EC43813BD6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EoeyOYkg_nktDgXhiwibXbqOsG0.roa
Signing time: Fri 21 Jun 2024 09:11:34 +0000
ROA not before: Fri 21 Jun 2024 09:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Jun 2024 10:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:10:bf:63:02:1c:fa:af:41:92:f2:ec:43:81:3b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 21 09:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1287b2398920fe792d0e05e18b089b5dba8eb06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:b5:60:6c:f1:2e:81:a0:95:87:0d:ce:51:
22:68:4e:7b:1e:33:33:da:e2:2d:a4:9d:04:65:39:
19:91:28:b3:91:8a:c2:07:e6:69:93:2c:18:a2:df:
04:2a:5d:75:d5:13:a9:10:36:cf:65:c8:98:b4:be:
35:9d:17:79:26:c0:a0:92:60:e5:c1:eb:89:6a:41:
77:0d:1c:9d:05:f7:d6:4b:ab:05:7c:04:84:f8:fd:
c8:d9:22:7b:a8:53:1a:fa:f9:93:15:98:69:25:94:
2f:f1:f3:3f:07:75:f5:97:85:39:15:10:e1:5a:b3:
f4:92:5f:50:53:40:a2:d9:a2:36:6c:24:fa:c5:7b:
69:d3:e0:95:c4:7e:c3:82:15:5f:0f:47:81:74:f8:
7d:b1:22:65:60:9c:c1:58:28:fa:05:a8:b8:4f:3a:
8d:d9:5a:07:ce:80:78:26:e3:b0:d7:f0:b6:62:b4:
4a:3a:2e:59:64:45:26:d1:cd:d3:97:7a:4d:cc:c7:
07:f0:63:3e:21:a8:d5:a8:07:de:38:ff:cc:f7:0c:
c6:d0:03:d3:8b:84:d0:a1:53:6f:6e:55:75:1c:c6:
39:56:7d:58:a2:07:01:de:18:da:5f:41:da:2d:46:
e0:61:e5:2c:05:fc:b2:36:a3:e3:38:8a:16:fa:3d:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:B2:39:89:20:FE:79:2D:0E:05:E1:8B:08:9B:5D:BA:8E:B0:6D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EoeyOYkg_nktDgXhiwibXbqOsG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:7c:f1:14:64:fa:db:75:cb:20:a7:db:fc:6e:72:2a:87:06:
37:99:4a:de:d4:2b:0d:d2:fd:93:3e:9d:97:9d:43:c3:a4:4a:
b0:5f:f6:60:e0:e8:de:f1:e9:03:12:b1:07:ce:48:25:0c:d9:
da:8e:96:c4:e5:36:2a:73:5f:13:e9:fa:cb:4d:da:dd:77:b9:
8b:f3:87:34:07:5c:c1:b1:26:39:5e:1c:80:1e:87:8e:79:66:
2f:c3:e8:d2:b2:2e:e5:63:10:56:ad:cd:46:c9:97:71:ee:30:
21:c4:37:71:a6:45:69:f4:86:72:67:8d:f3:ba:7f:d4:3e:99:
0a:c2:82:56:fd:26:0d:60:87:79:15:e6:57:41:a1:b2:ed:b7:
c7:d4:cf:f0:e9:25:c1:9a:a0:4f:4e:18:6e:9f:05:ed:c5:3b:
ec:5f:6c:1d:35:4e:3b:be:33:1f:6f:e1:00:af:62:ab:e5:72:
af:bb:16:3b:ab:db:e1:03:41:56:e5:1c:53:cc:12:d4:f5:2f:
fe:89:e6:79:c7:88:2b:60:31:29:99:71:f7:11:c3:77:6f:15:
c0:f7:29:58:2d:7e:d5:93:48:fd:ef:b1:9a:6f:16:2d:36:d1:
5c:94:5e:5f:8d:5b:39:0b:d6:54:78:5b:1c:1c:e5:ec:ed:5a:
50:43:47:c9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZA6EL9jAhz6r0GS8uxDgTvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjIxMDkxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjg3YjIzOTg5MjBmZTc5MmQwZTA1ZTE4YjA4OWI1ZGJhOGViMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiC1YGzxLoGglYcNzlEiaE57HjMz
2uItpJ0EZTkZkSizkYrCB+ZpkywYot8EKl111ROpEDbPZciYtL41nRd5JsCgkmDl
weuJakF3DRydBffWS6sFfASE+P3I2SJ7qFMa+vmTFZhpJZQv8fM/B3X1l4U5FRDh
WrP0kl9QU0Ci2aI2bCT6xXtp0+CVxH7DghVfD0eBdPh9sSJlYJzBWCj6Bai4TzqN
2VoHzoB4JuOw1/C2YrRKOi5ZZEUm0c3Tl3pNzMcH8GM+IajVqAfeOP/M9wzG0APT
i4TQoVNvblV1HMY5Vn1YogcB3hjaX0HaLUbgYeUsBfyyNqPjOIoW+j1AuQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBKHsjmJIP55LQ4F4YsIm126jrBtMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRW9leU9Za2dfbmt0RGdYaGl3aWJYYnFPc0cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACh88RRk+tt1yyCn2/xu
ciqHBjeZSt7UKw3S/ZM+nZedQ8OkSrBf9mDg6N7x6QMSsQfOSCUM2dqOlsTlNipz
XxPp+stN2t13uYvzhzQHXMGxJjleHIAeh455Zi/D6NKyLuVjEFatzUbJl3HuMCHE
N3GmRWn0hnJnjfO6f9Q+mQrCglb9Jg1gh3kV5ldBobLtt8fUz/DpJcGaoE9OGG6f
Be3FO+xfbB01Tju+Mx9v4QCvYqvlcq+7Fjur2+EDQVblHFPMEtT1L/6J5nnHiCtg
MSmZcfcRw3dvFcD3KVgtftWTSP3vsZpvFi020VyUXl+NWzkL1lR4Wxwc5eztWlBD
R8k=
-----END CERTIFICATE-----
Generated at Sat Jun 22 02:13:46 2024 by rpki-client on console.sobornost.net