Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Cx0ZsFWEDRS0uWCkMzwrB2Eun9Y.roa
File: Cx0ZsFWEDRS0uWCkMzwrB2Eun9Y.roa (raw, json)
Hash identifier: CSL9mE9aKPymapvTJHRMQ1ggSh9MR7+1vDMeDxwbydU=
Subject key identifier: 0B:1D:19:B0:55:84:0D:14:B4:B9:60:A4:33:3C:2B:07:61:2E:9F:D6
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA148A0CE505DCAA3A223E5BC54199B74
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Cx0ZsFWEDRS0uWCkMzwrB2Eun9Y.roa
Signing time: Wed 22 May 2024 17:10:42 +0000
ROA not before: Wed 22 May 2024 17:10:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 22 May 2024 18:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a1:48:a0:ce:50:5d:ca:a3:a2:23:e5:bc:54:19:9b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 22 17:10:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b1d19b055840d14b4b960a4333c2b07612e9fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:83:43:0d:fe:71:fa:38:d9:50:04:22:8f:
a5:2a:30:01:c0:0d:7d:93:c5:58:b9:e2:9a:aa:d1:
b4:83:4a:d4:2a:a2:62:32:17:01:bb:74:dc:e6:71:
a1:a2:63:98:95:85:75:06:55:78:ee:84:f9:4d:5a:
89:1c:70:e8:a8:7f:5a:dc:ac:a6:3b:b2:80:d1:aa:
8a:66:45:d0:6e:34:1b:43:eb:57:0d:29:fe:cb:f4:
72:d3:09:20:df:90:d7:6d:02:c3:28:c7:49:a7:0f:
47:6c:2d:8a:9b:6b:c5:39:f9:f4:67:58:43:9d:ae:
5b:e1:82:3f:8a:25:39:74:ee:b6:47:45:39:05:98:
be:7a:b1:24:53:cf:21:ef:d4:32:a7:ef:49:11:ed:
f3:c8:38:ca:36:49:0f:67:6e:89:c4:33:92:72:ab:
8c:f1:66:ed:6d:ef:fd:0a:b1:ac:6c:ad:9b:87:7b:
5f:73:b3:a2:f7:2e:80:91:81:5a:a5:13:ea:2c:4f:
4d:76:5d:b5:29:55:0e:41:15:d0:3d:f0:9c:9a:6e:
e8:fa:70:0d:2f:52:18:6b:70:b5:2a:d6:bd:4b:dd:
66:89:b1:86:c4:29:f3:db:c8:c2:4e:6f:5f:c5:03:
e6:87:a4:f3:3b:bb:cb:35:e3:58:89:8f:aa:e0:d4:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1D:19:B0:55:84:0D:14:B4:B9:60:A4:33:3C:2B:07:61:2E:9F:D6
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Cx0ZsFWEDRS0uWCkMzwrB2Eun9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:ef:03:32:65:a2:95:de:6a:60:1e:a1:c7:ae:96:7c:a6:8e:
9d:8a:f8:97:08:f3:49:21:a8:6a:41:c8:ab:b6:af:21:a5:54:
79:88:0d:52:46:7f:6f:f4:8d:d0:e8:e9:e7:fe:eb:3a:49:30:
2f:0d:78:56:fc:0a:88:bc:37:78:5f:fa:16:8a:2e:a4:c7:7e:
95:30:ed:77:31:27:01:43:6a:b9:de:77:a2:6d:99:58:cb:13:
29:7a:64:d8:00:46:71:c7:ab:27:75:43:c7:7d:54:64:70:84:
47:59:34:c5:28:e3:5e:a3:7a:e2:5c:23:a1:16:44:61:10:d8:
57:33:83:cb:33:c6:f7:83:34:11:de:e8:78:fd:1c:b6:20:72:
9f:c2:3e:1d:44:83:3f:e2:fd:f5:fb:1b:0d:d6:37:fa:9c:9d:
0e:41:7b:81:9d:6a:8b:12:5b:88:a4:78:82:94:03:b7:51:4e:
fd:a3:ce:87:3f:da:d1:71:23:d3:89:86:4a:bd:75:90:f6:99:
a1:4e:f6:d3:60:5f:79:ce:6a:a3:bb:65:b9:d8:ac:1e:77:10:
4b:8b:7a:dd:1d:09:a4:20:ca:4f:6e:c0:cf:25:76:c0:70:a4:
1a:e9:10:82:6e:65:b5:de:fc:37:f8:2c:de:00:4d:09:23:af:
5d:ba:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 09:35:53 2024 by rpki-client on console.sobornost.net