Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oyTHztrWVhBdWGCl_GUCUAODOxY.roa
File: oyTHztrWVhBdWGCl_GUCUAODOxY.roa (raw, json)
Hash identifier: IfvDBD2tHomGEMh+YwzvtTjxu5xldfBjMHAFZg/xwLE=
Subject key identifier: A3:24:C7:CE:DA:D6:56:10:5D:58:60:A5:FC:65:02:50:03:83:3B:16
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FF151E70A01E27EE024C1FB4A9432D1E6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oyTHztrWVhBdWGCl_GUCUAODOxY.roa
Signing time: Fri 07 Jun 2024 06:10:27 +0000
ROA not before: Fri 07 Jun 2024 06:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Jun 2024 07:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f1:51:e7:0a:01:e2:7e:e0:24:c1:fb:4a:94:32:d1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 7 06:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a324c7cedad656105d5860a5fc65025003833b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:a6:7e:9b:f7:b5:6c:8d:40:f9:e6:7d:aa:
49:3d:ab:a4:fe:4d:2d:81:07:1e:25:aa:da:53:9c:
12:c6:38:fb:83:2b:4e:86:e1:59:98:d5:b9:d3:96:
c7:21:a9:17:b6:50:e7:43:68:86:43:e9:ab:d3:cd:
2f:a7:41:e8:9d:b5:ed:6a:70:94:a3:e1:b6:f5:35:
4c:d3:17:2f:6d:03:c2:1e:36:f2:ba:d6:1c:6b:15:
b0:68:84:6e:e0:ae:ab:ec:71:bd:d4:f7:6a:da:e7:
76:ad:34:1d:58:b9:b8:0c:ab:de:17:97:ff:14:8b:
d5:ea:d5:1c:d1:77:15:ab:f6:b3:b4:68:47:6d:bc:
27:fd:0d:dd:9e:2c:53:03:7d:86:35:4f:e2:16:76:
99:c0:36:ca:a2:29:ce:b0:eb:5f:94:fc:f3:eb:a1:
1d:ad:a3:44:f4:3b:7f:47:d6:15:78:1d:b7:13:60:
50:70:63:f3:46:e3:83:6d:95:65:85:1b:36:85:b7:
7d:6d:19:73:c8:1f:da:4d:97:18:e0:2e:81:15:25:
00:ac:ca:01:08:bb:05:e2:55:7e:94:98:58:ab:07:
96:d5:24:f8:36:5a:78:b5:84:8a:8c:1e:bc:21:f6:
22:fb:fd:36:0c:18:5f:cd:90:a8:2d:80:53:98:25:
53:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:24:C7:CE:DA:D6:56:10:5D:58:60:A5:FC:65:02:50:03:83:3B:16
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oyTHztrWVhBdWGCl_GUCUAODOxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:7d:79:c9:69:fa:e5:9a:8e:16:a6:4e:51:f9:65:c6:91:5a:
83:3e:34:9d:e0:d0:06:9d:df:5f:50:e0:2d:89:12:0f:9c:af:
51:4b:7c:83:09:94:3e:52:0a:2e:4a:53:c3:13:f2:c6:a4:8b:
f5:7e:73:96:ad:6c:a4:49:95:79:2b:75:49:93:5e:55:28:48:
72:a1:ca:00:39:27:2f:c6:94:51:6c:ec:21:c6:ae:12:9b:91:
30:23:bf:59:3b:c9:a5:1d:cf:55:63:3a:70:1a:90:ae:c3:c5:
8f:ac:e6:e9:f6:9e:c2:ee:fa:27:b9:6a:f5:21:24:21:47:93:
98:f8:ba:05:9e:c1:21:78:b9:ac:4b:31:90:37:e7:31:7f:a0:
25:94:28:c8:15:ae:ae:07:ec:5a:50:18:19:3c:f2:37:2a:ad:
42:fc:06:72:41:ca:70:1c:bf:33:f8:6c:c9:ad:d4:ae:4e:79:
80:03:2c:60:3a:de:34:6f:73:e1:ad:40:bd:43:ff:f7:31:ce:
29:22:67:93:86:4b:f2:8d:e3:2b:f7:7e:f9:5d:46:89:29:17:
15:de:f5:7f:a1:3a:c0:33:97:8f:c6:8d:54:6b:bc:aa:13:ce:
d4:82:b7:2b:d3:ee:4c:2a:75:40:88:e0:a0:39:74:84:d5:e3:
3d:d3:ac:ca
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/xUecKAeJ+4CTB+0qUMtHmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjA3MDYxMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzI0YzdjZWRhZDY1NjEwNWQ1ODYwYTVmYzY1MDI1MDAzODMzYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD6mfpv3tWyNQPnmfapJPauk/k0t
gQceJaraU5wSxjj7gytOhuFZmNW505bHIakXtlDnQ2iGQ+mr080vp0HonbXtanCU
o+G29TVM0xcvbQPCHjbyutYcaxWwaIRu4K6r7HG91Pdq2ud2rTQdWLm4DKveF5f/
FIvV6tUc0XcVq/aztGhHbbwn/Q3dnixTA32GNU/iFnaZwDbKoinOsOtflPzz66Ed
raNE9Dt/R9YVeB23E2BQcGPzRuODbZVlhRs2hbd9bRlzyB/aTZcY4C6BFSUArMoB
CLsF4lV+lJhYqweW1ST4Nlp4tYSKjB68IfYi+/02DBhfzZCoLYBTmCVTfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKMkx87a1lYQXVhgpfxlAlADgzsWMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvb3lUSHp0cldWaEJkV0dDbF9HVUNVQU9ET3hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGx9eclp+uWajhamTlH5
ZcaRWoM+NJ3g0Aad319Q4C2JEg+cr1FLfIMJlD5SCi5KU8MT8saki/V+c5atbKRJ
lXkrdUmTXlUoSHKhygA5Jy/GlFFs7CHGrhKbkTAjv1k7yaUdz1VjOnAakK7DxY+s
5un2nsLu+ie5avUhJCFHk5j4ugWewSF4uaxLMZA35zF/oCWUKMgVrq4H7FpQGBk8
8jcqrUL8BnJBynAcvzP4bMmt1K5OeYADLGA63jRvc+GtQL1D//cxzikiZ5OGS/KN
4yv3fvldRokpFxXe9X+hOsAzl4/GjVRrvKoTztSCtyvT7kwqdUCI4KA5dITV4z3T
rMo=
-----END CERTIFICATE-----
Generated at Fri Jun 7 10:21:46 2024 by rpki-client on console-fra.rpki-client.org