Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NDbnzgkbvFgx1bI0Aow79NmS-1E.roa
File: NDbnzgkbvFgx1bI0Aow79NmS-1E.roa (raw, json)
Hash identifier: 8iCt15TlFltcnQ8bK5xiJTnHpVsSznHTpuSWGnykh3g=
Subject key identifier: 34:36:E7:CE:09:1B:BC:58:31:D5:B2:34:02:8C:3B:F4:D9:92:FB:51
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F85D1B77F7EF133CB807F5BF9580AB7CD
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NDbnzgkbvFgx1bI0Aow79NmS-1E.roa
Signing time: Fri 17 May 2024 09:11:04 +0000
ROA not before: Fri 17 May 2024 09:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 17 May 2024 10:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:d1:b7:7f:7e:f1:33:cb:80:7f:5b:f9:58:0a:b7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 17 09:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3436e7ce091bbc5831d5b234028c3bf4d992fb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:3a:9b:60:d1:25:d8:4a:fa:8a:8a:60:51:
1b:d1:24:69:1e:50:ea:85:46:b3:d9:79:21:a7:d7:
f3:ca:a9:cb:5a:19:a7:74:eb:49:1b:b7:76:13:8d:
ab:77:59:d6:4d:3c:fd:dc:d8:9f:31:ac:96:ab:40:
d6:20:bd:c3:a1:81:b4:e2:3c:0d:71:ad:ff:f1:d6:
8d:69:73:46:26:44:23:3c:bc:38:af:d6:a8:17:bc:
75:6f:71:31:19:45:e3:48:6b:8d:af:69:48:9e:30:
92:e5:ff:88:9d:46:04:38:63:87:43:94:fe:49:0f:
31:79:26:f0:36:0d:90:01:1c:80:f8:46:0a:9e:70:
cb:97:f6:de:76:ab:cc:0d:4a:aa:b7:28:2d:d7:5c:
e5:3f:42:9a:dc:ca:00:be:2a:75:90:24:59:d1:d7:
5b:79:92:6b:04:64:ec:bf:56:65:f9:b2:9b:ff:dd:
a4:f2:83:6e:e4:7f:6d:28:8b:61:00:e1:ae:bf:2c:
e8:dc:09:38:63:5b:f7:96:8b:b0:41:c5:54:24:15:
97:a6:fc:03:d0:27:54:27:d8:ff:56:22:8a:2a:66:
f2:62:d9:fa:33:2d:0d:dc:68:54:01:ab:11:f9:3d:
9d:0e:1f:c9:57:98:9f:17:99:45:43:d3:8c:f3:59:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:36:E7:CE:09:1B:BC:58:31:D5:B2:34:02:8C:3B:F4:D9:92:FB:51
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NDbnzgkbvFgx1bI0Aow79NmS-1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:94:a1:ec:0a:dd:8b:2a:5e:2c:c7:ad:fe:5e:bc:41:97:ea:
29:f6:33:81:3e:bc:22:93:62:32:69:34:b2:98:94:64:43:de:
73:e3:73:dc:42:bd:05:f8:bd:85:c8:41:80:64:d8:76:12:0b:
03:f7:ab:80:12:2b:c6:5a:a0:5b:7b:77:f6:d7:49:ea:10:db:
95:9c:54:67:ab:57:19:c0:03:00:1e:4c:b7:f0:12:f9:d7:2d:
ca:50:76:77:c6:60:da:33:92:63:cd:22:46:fd:c4:28:c1:6e:
31:9f:0d:29:79:d3:a7:04:a1:ec:82:e4:72:48:02:f5:19:7d:
35:72:fa:fa:a7:82:85:24:5e:2b:40:0b:41:00:da:01:e9:6f:
3d:db:8d:64:77:c9:41:71:eb:11:42:a5:c3:36:15:6c:3f:b0:
4e:89:da:69:d0:f5:c0:67:0d:73:60:10:f9:a9:95:ac:e6:ff:
ee:14:3a:6e:fe:83:9c:cb:35:67:cb:c8:89:07:49:4b:fd:2a:
ca:da:91:06:98:89:24:f7:8e:31:1e:2f:bc:ac:ba:99:4a:a4:
48:87:05:be:85:89:6e:80:4e:de:fe:a0:ce:e8:61:4b:96:01:
e0:c5:99:64:87:dc:fc:98:2e:b5:c3:dd:aa:83:e1:9d:96:54:
d6:7a:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:39:05 2024 by rpki-client on console.sobornost.net