Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ebz6U2zelklzwwuUh8pRaVnwtSs.roa
File: ebz6U2zelklzwwuUh8pRaVnwtSs.roa (raw, json)
Hash identifier: b1S8uSgsyNQq+QDqILe+UKtGGip7nmUGhM/zP9qLAeA=
Subject key identifier: 79:BC:FA:53:6C:DE:96:49:73:C3:0B:94:87:CA:51:69:59:F0:B5:2B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FC822EA8BD2798FB76051D225505B28C5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ebz6U2zelklzwwuUh8pRaVnwtSs.roa
Signing time: Thu 30 May 2024 06:14:42 +0000
ROA not before: Thu 30 May 2024 06:14:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 May 2024 07:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c8:22:ea:8b:d2:79:8f:b7:60:51:d2:25:50:5b:28:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: May 30 06:14:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79bcfa536cde964973c30b9487ca516959f0b52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:45:4d:81:2a:73:2a:57:75:02:b3:e7:d8:96:
9c:44:fc:89:58:d9:31:d2:95:7b:e0:aa:41:d5:2a:
b4:c5:b6:4f:66:14:64:96:e1:cf:b6:8f:3c:57:3f:
cf:08:6a:fe:28:16:60:e1:f3:69:c0:4b:f8:c6:95:
13:ce:37:3b:72:1c:51:9b:9f:f3:e0:a2:47:ac:11:
b0:51:66:e3:cf:11:60:e5:48:1f:25:82:e8:70:8c:
f8:41:25:c7:43:80:e4:27:fe:4b:79:91:fe:3f:39:
6e:ad:5b:54:07:ea:18:89:2d:fe:a5:0f:04:a3:14:
09:56:8c:02:50:86:55:31:dd:6f:92:aa:75:ee:e3:
03:02:26:8c:81:ff:84:c7:a9:47:0f:bd:a9:ed:7d:
71:95:82:4c:06:8a:2c:55:0d:91:85:29:84:01:67:
07:23:7d:a1:4b:14:fd:1e:0f:b8:34:e8:1e:37:9c:
b0:8c:18:18:4e:ff:18:a6:b5:d9:69:eb:29:d9:05:
e3:7a:5c:18:7f:28:d4:62:75:56:54:38:e5:2b:34:
47:b5:4f:bf:6a:41:ac:e8:11:7b:a7:b4:ed:0e:35:
ee:11:82:ad:55:92:4c:d9:30:ff:8a:85:44:13:bf:
c1:b9:47:5b:64:7b:23:a8:de:eb:32:42:67:35:2c:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BC:FA:53:6C:DE:96:49:73:C3:0B:94:87:CA:51:69:59:F0:B5:2B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ebz6U2zelklzwwuUh8pRaVnwtSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:d7:e2:31:6c:5b:29:68:58:2a:de:90:a8:9c:5b:28:59:bb:
56:1c:77:88:7f:87:ea:37:68:a4:53:66:fc:25:2b:a7:94:84:
80:1f:83:8b:35:99:ba:78:75:ce:5d:81:9d:6c:72:bc:89:af:
c9:c1:38:c9:a8:2d:15:0c:b0:7d:cd:70:bb:94:fa:da:94:e0:
68:47:66:46:72:42:fc:87:4e:24:b5:52:0c:a8:36:d9:b2:c5:
a5:24:9c:4a:7d:7d:12:ce:7e:86:06:d5:fd:8a:2d:0a:98:a8:
92:3a:9b:c9:09:ed:a9:ee:b9:e7:d6:94:dc:37:a1:d7:49:fb:
21:de:1f:71:14:50:10:0e:db:ec:b3:0e:bf:f9:4e:b6:cc:bb:
73:3d:65:84:02:33:7b:c1:8c:08:24:af:06:a4:b4:3b:5d:95:
16:85:4a:4d:f9:71:69:b5:b2:56:5e:dd:33:68:3e:49:f8:40:
fb:85:1d:82:1c:21:63:60:d3:a9:4d:37:dc:00:d4:df:3a:83:
82:03:85:ac:ee:d1:2e:cb:2a:7c:d8:15:8a:59:cd:45:4b:fb:
4b:ee:fd:7e:fb:1e:06:be:8e:40:ff:46:d2:5d:6f:c7:46:85:
96:2c:a6:ae:e2:c9:56:45:35:8a:fe:ea:9c:5e:2e:27:a5:07:
84:70:64:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/IIuqL0nmPt2BR0iVQWyjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNTMwMDYxNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWJjZmE1MzZjZGU5NjQ5NzNjMzBiOTQ4N2NhNTE2OTU5ZjBiNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkVNgSpzKld1ArPn2JacRPyJWNkx
0pV74KpB1Sq0xbZPZhRkluHPto88Vz/PCGr+KBZg4fNpwEv4xpUTzjc7chxRm5/z
4KJHrBGwUWbjzxFg5UgfJYLocIz4QSXHQ4DkJ/5LeZH+PzlurVtUB+oYiS3+pQ8E
oxQJVowCUIZVMd1vkqp17uMDAiaMgf+Ex6lHD72p7X1xlYJMBoosVQ2RhSmEAWcH
I32hSxT9Hg+4NOgeN5ywjBgYTv8YprXZaesp2QXjelwYfyjUYnVWVDjlKzRHtU+/
akGs6BF7p7TtDjXuEYKtVZJM2TD/ioVEE7/BuUdbZHsjqN7rMkJnNSxWXQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHm8+lNs3pZJc8MLlIfKUWlZ8LUrMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvZWJ6NlUyemVsa2x6d3d1VWg4cFJhVm53dFNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC/X4jFsWyloWCrekKic
WyhZu1Ycd4h/h+o3aKRTZvwlK6eUhIAfg4s1mbp4dc5dgZ1scryJr8nBOMmoLRUM
sH3NcLuU+tqU4GhHZkZyQvyHTiS1UgyoNtmyxaUknEp9fRLOfoYG1f2KLQqYqJI6
m8kJ7anuuefWlNw3oddJ+yHeH3EUUBAO2+yzDr/5TrbMu3M9ZYQCM3vBjAgkrwak
tDtdlRaFSk35cWm1slZe3TNoPkn4QPuFHYIcIWNg06lNN9wA1N86g4IDhazu0S7L
KnzYFYpZzUVL+0vu/X77Hga+jkD/RtJdb8dGhZYspq7iyVZFNYr+6pxeLielB4Rw
ZFc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:52 2024 by rpki-client on console-fra.rpki-client.org