Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fl02hMmIZyAbjU_9COrNcJUVxgU.roa
File: Fl02hMmIZyAbjU_9COrNcJUVxgU.roa (raw, json)
Hash identifier: SPvs6ejyaV30J7g3VtN8ndznzGwo9zP9t8g28BIIlMA=
Subject key identifier: 16:5D:36:84:C9:88:67:20:1B:8D:4F:FD:08:EA:CD:70:95:15:C6:05
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FCBBF5ED9E781A95C12C23E1151A795CD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fl02hMmIZyAbjU_9COrNcJUVxgU.roa
Signing time: Thu 30 May 2024 23:04:27 +0000
ROA not before: Thu 30 May 2024 23:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:cbbf:4d7b/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 30 May 2024 23:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cb:bf:5e:d9:e7:81:a9:5c:12:c2:3e:11:51:a7:95:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 30 23:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=165d3684c98867201b8d4ffd08eacd709515c605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:8c:83:47:b3:1d:bb:19:57:a3:db:96:fb:
10:11:72:a2:74:7e:b4:72:17:3f:60:b3:58:82:1c:
ee:8f:17:f5:64:21:21:78:d2:e0:51:df:08:1f:fd:
e2:c6:ff:3d:d8:1a:dd:d7:87:00:92:c4:11:1c:0d:
0b:c7:6a:e1:0a:9a:f0:b8:9f:b9:23:13:e4:01:1f:
03:6d:1f:04:bc:40:9c:4c:b9:b5:1f:49:7f:c4:41:
5f:d4:d1:8c:04:cd:a9:64:26:ab:76:d5:00:8a:fe:
75:18:f1:38:87:0e:7e:97:74:5d:ba:12:10:c1:31:
4e:00:84:33:69:f4:9d:86:1c:1f:bb:49:47:d1:59:
ea:ce:35:35:5e:86:8d:c3:4c:01:a0:40:ce:a5:ef:
b3:4d:77:7d:86:29:26:b1:36:ff:d7:60:c4:c7:c1:
4b:c3:6a:bf:1e:ad:43:89:a6:e6:46:a2:cf:4e:72:
82:66:47:5d:9d:96:46:fc:32:3c:40:18:f2:d7:47:
2e:6d:88:30:11:56:34:b4:8a:65:e6:36:21:2c:a1:
f5:51:50:11:f2:20:cd:ad:7b:05:48:45:05:88:4a:
16:6b:d5:d8:ad:14:f5:7f:ca:d3:63:b4:e8:14:c5:
b2:86:c5:40:48:27:f4:9d:25:46:65:28:cf:f3:ed:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5D:36:84:C9:88:67:20:1B:8D:4F:FD:08:EA:CD:70:95:15:C6:05
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fl02hMmIZyAbjU_9COrNcJUVxgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:64:09:21:b1:86:4f:d2:cf:0e:84:55:36:c2:0b:eb:b3:5b:
8e:68:5e:1f:3e:25:0e:c3:a3:34:5f:c5:91:45:31:e4:df:98:
36:cf:7b:7f:6b:26:06:f0:2e:7a:69:da:22:8a:b0:a0:0f:e9:
d6:1f:30:2e:d8:38:48:85:70:51:9c:76:aa:a3:c4:fe:9e:01:
55:2c:0a:34:a9:f9:2e:d1:34:62:88:0c:40:ac:a8:b0:dc:18:
15:e9:3a:fb:43:72:30:b5:53:b0:61:6e:ad:3d:43:5b:88:d7:
64:ec:08:a3:7d:78:f3:f8:0e:2a:f4:f5:e3:ec:ce:54:05:7e:
3a:87:ab:08:1e:9c:ea:e6:53:59:cf:3f:01:ac:95:c9:93:0c:
2d:e5:bd:67:8c:11:7c:1e:0d:fe:0d:24:d2:ef:63:e8:2a:d4:
4b:c8:79:22:0a:2c:b9:eb:56:c7:92:d0:f6:3e:f4:63:86:22:
d2:32:ee:e0:7a:a2:10:bb:18:88:cc:35:88:4c:35:11:cc:ee:
69:c0:f8:25:76:9e:c2:a0:38:48:3c:28:65:fd:66:19:4f:37:
93:66:4c:f4:d3:df:78:12:1c:20:3d:03:94:13:5e:6b:49:ba:
c1:b5:56:d2:ef:ec:52:88:fd:c2:24:ec:cd:b1:9c:dd:e3:a8:
1f:59:44:c5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/Lv17Z54GpXBLCPhFRp5XNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNTMwMjMwNDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjVkMzY4NGM5ODg2NzIwMWI4ZDRmZmQwOGVhY2Q3MDk1MTVjNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MqMg0ezHbsZV6PblvsQEXKidH60
chc/YLNYghzujxf1ZCEheNLgUd8IH/3ixv892Brd14cAksQRHA0Lx2rhCprwuJ+5
IxPkAR8DbR8EvECcTLm1H0l/xEFf1NGMBM2pZCardtUAiv51GPE4hw5+l3RduhIQ
wTFOAIQzafSdhhwfu0lH0VnqzjU1XoaNw0wBoEDOpe+zTXd9hikmsTb/12DEx8FL
w2q/Hq1DiabmRqLPTnKCZkddnZZG/DI8QBjy10cubYgwEVY0tIpl5jYhLKH1UVAR
8iDNrXsFSEUFiEoWa9XYrRT1f8rTY7ToFMWyhsVASCf0nSVGZSjP8+2yEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBZdNoTJiGcgG41P/QjqzXCVFcYFMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRmwwMmhNbUlaeUFialVfOUNPck5jSlVWeGdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADxkCSGxhk/Szw6EVTbC
C+uzW45oXh8+JQ7DozRfxZFFMeTfmDbPe39rJgbwLnpp2iKKsKAP6dYfMC7YOEiF
cFGcdqqjxP6eAVUsCjSp+S7RNGKIDECsqLDcGBXpOvtDcjC1U7Bhbq09Q1uI12Ts
CKN9ePP4Dir09ePszlQFfjqHqwgenOrmU1nPPwGslcmTDC3lvWeMEXweDf4NJNLv
Y+gq1EvIeSIKLLnrVseS0PY+9GOGItIy7uB6ohC7GIjMNYhMNRHM7mnA+CV2nsKg
OEg8KGX9ZhlPN5NmTPTT33gSHCA9A5QTXmtJusG1VtLv7FKI/cIk7M2xnN3jqB9Z
RMU=
-----END CERTIFICATE-----
Generated at Fri May 31 03:37:26 2024 by rpki-client on console.sobornost.net