Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JqT3LG3m3i4gE9y4-9nu2UZkGlw.roa
File: JqT3LG3m3i4gE9y4-9nu2UZkGlw.roa (raw, json)
Hash identifier: +zMvRK0OcCLgbEq0OiiUcgSUfUxPYSZ5NytoQdnhel4=
Subject key identifier: 26:A4:F7:2C:6D:E6:DE:2E:20:13:DC:B8:FB:D9:EE:D9:46:64:1A:5C
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EF7C54AFBBFBA0DCB0063445E59F6C053
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JqT3LG3m3i4gE9y4-9nu2UZkGlw.roa
Signing time: Fri 19 Apr 2024 19:11:25 +0000
ROA not before: Fri 19 Apr 2024 19:11:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 19 Apr 2024 20:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f7:c5:4a:fb:bf:ba:0d:cb:00:63:44:5e:59:f6:c0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 19 19:11:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a4f72c6de6de2e2013dcb8fbd9eed946641a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:87:03:2d:84:b2:58:86:8e:59:29:51:fc:
a4:d8:d3:20:e0:60:05:12:0d:63:db:08:f2:d0:8b:
90:1e:44:e6:77:b5:46:d7:55:48:75:5d:77:e6:33:
cd:44:cd:90:85:40:b3:d5:02:13:cd:9b:73:a8:42:
c2:39:84:68:1a:c5:79:14:ed:10:9b:01:9f:cf:ec:
13:f6:89:b9:f8:37:e9:9f:99:59:60:1b:a8:dc:4a:
4c:78:41:78:2b:8a:33:b1:b8:a8:e7:5a:47:94:e1:
7a:c1:d2:de:97:46:83:fe:2c:b6:a8:e8:81:0a:55:
63:f5:28:99:9f:92:00:67:39:07:2a:3e:e8:63:b8:
a6:2b:75:c0:88:d2:4e:2c:a2:46:2e:f3:b8:c0:ba:
39:63:dc:4e:21:55:9a:72:42:8d:1b:7b:af:56:16:
f6:cd:b9:09:f1:a4:69:eb:1d:6e:e7:28:c8:b0:b2:
2b:45:4d:63:39:6e:b1:53:1a:4d:f7:c8:e6:90:27:
f3:f8:da:00:a5:2b:d3:18:3e:8b:2b:6f:21:a7:51:
83:3e:7e:67:96:e8:49:f3:b1:74:68:45:21:eb:94:
a0:27:35:9d:9a:b7:88:8a:10:b4:1f:67:69:a0:66:
60:ef:2a:28:c9:42:f8:0d:02:91:0a:50:4e:af:3b:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A4:F7:2C:6D:E6:DE:2E:20:13:DC:B8:FB:D9:EE:D9:46:64:1A:5C
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/JqT3LG3m3i4gE9y4-9nu2UZkGlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
78:ba:c7:a2:0d:44:96:67:78:fa:a6:b6:c6:f7:5f:33:6a:fc:
4d:1e:a9:bc:90:fb:2a:f6:ee:a3:5f:cd:4e:f2:05:3f:ea:18:
2d:21:44:e5:c8:24:3a:af:bd:fa:f6:46:36:87:29:e2:c8:c9:
5c:86:15:61:df:b1:33:47:3c:d7:e5:a2:38:1c:62:97:cb:2c:
3c:cc:e9:23:b7:64:d2:92:03:16:8c:e0:38:e7:7a:6f:6d:bd:
87:f0:de:cf:c1:25:e4:9c:5d:5e:6c:9f:e7:2f:d1:e6:f7:2f:
6e:29:c9:97:c1:6f:d2:c2:a7:0d:16:e9:5d:65:97:ab:d6:19:
04:0c:a7:67:43:e6:c2:44:c5:82:90:ac:43:11:e4:a6:d1:46:
56:ef:a0:f2:09:c3:55:c9:36:86:b9:ec:38:da:db:c9:46:74:
bc:14:30:76:82:7b:30:49:ff:98:ea:b6:47:d1:bf:9f:e2:b1:
12:8c:f4:d1:64:1b:b8:ab:cf:ed:40:55:da:d4:33:c5:8e:73:
24:46:dc:58:2d:c4:52:38:bc:70:91:de:4a:b6:8c:05:d5:60:
c3:18:41:fe:d8:c9:12:9f:28:a7:fc:14:2d:5a:2c:2c:f5:eb:
5d:d9:40:d3:1e:0f:a0:c0:a3:3a:a3:be:0e:4b:5c:1a:cd:c1:
df:69:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 15:20:46 2024 by rpki-client on console.sobornost.net