Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZWp-PoIQW5GHHBxF9In3HG48-Ow.roa
File: ZWp-PoIQW5GHHBxF9In3HG48-Ow.roa (raw, json)
Hash identifier: OjTuGOwqZ9YXajXrtSSSPyPcAOPskBduKHZA8tyDJ+c=
Subject key identifier: 65:6A:7E:3E:82:10:5B:91:87:1C:1C:45:F4:89:F7:1C:6E:3C:F8:EC
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018FA0743AA2B20A6861EBEDC9FF88D1A9E3
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZWp-PoIQW5GHHBxF9In3HG48-Ow.roa
Signing time: Wed 22 May 2024 13:18:42 +0000
ROA not before: Wed 22 May 2024 13:18:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 22 May 2024 14:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:74:3a:a2:b2:0a:68:61:eb:ed:c9:ff:88:d1:a9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 22 13:18:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=656a7e3e82105b91871c1c45f489f71c6e3cf8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:cc:c3:0d:ee:af:d6:55:de:a2:83:24:80:
62:ec:51:fe:a7:99:2f:6f:20:8c:fe:2e:51:64:6f:
94:8d:72:20:c0:11:8f:94:1f:c7:3e:fd:69:47:89:
aa:3e:c5:13:68:e5:34:49:f6:d0:15:89:fd:1a:2f:
4f:11:6c:b6:e7:a0:e1:f1:b2:16:35:e7:1a:ed:38:
04:46:19:75:18:f2:b7:3e:49:6f:be:52:f7:4b:b8:
39:7e:3f:d2:fe:7d:bd:46:e8:c9:21:e0:08:24:e1:
02:7b:93:bb:65:79:40:5e:ae:61:0d:4e:26:75:fa:
96:02:60:a2:cc:bb:ff:87:97:09:1a:f4:9c:e4:7a:
1a:77:a5:8b:3b:9c:35:43:6c:ed:2e:44:42:36:d2:
56:31:d2:d5:8b:04:80:98:26:cd:86:f2:a0:cf:e5:
9f:df:4f:26:9f:f6:cd:07:77:43:af:f3:2f:51:71:
cf:1a:82:40:af:af:36:23:ed:d2:b2:61:bb:b7:5c:
36:a6:db:e0:d9:d6:5b:c7:aa:8b:38:11:d0:38:9a:
26:83:f2:0c:f8:ba:c5:fd:6a:80:6a:77:79:50:3e:
6f:44:f7:64:e4:70:e9:1d:21:b4:17:8f:f7:a6:cb:
79:11:3f:a3:f9:b6:f9:47:ee:48:58:cb:02:a6:15:
c2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:7E:3E:82:10:5B:91:87:1C:1C:45:F4:89:F7:1C:6E:3C:F8:EC
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/ZWp-PoIQW5GHHBxF9In3HG48-Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:10:1e:02:d8:0f:4b:fc:18:a3:b2:8b:2a:49:d0:d8:4f:b7:
45:fa:87:99:e6:ba:bb:0a:96:9d:59:8e:c8:9f:cd:5e:3a:a9:
ae:7a:92:3c:33:6f:15:7d:1e:d7:c4:ba:e0:08:ac:89:00:71:
86:d7:08:2b:c0:41:dc:23:fc:ca:3f:dc:d1:f0:4d:be:70:54:
00:8f:78:6c:5c:9a:58:ee:75:db:6f:d7:76:c6:5c:e6:a1:a3:
2f:1c:7f:bf:e3:62:1e:f8:0d:5e:a3:06:81:5a:13:9d:5b:81:
ea:3d:bb:ca:28:70:8e:f0:79:f1:87:42:b7:ea:12:e1:ac:c6:
4a:dd:d2:5b:a6:52:6b:93:86:01:48:e5:96:f5:d9:14:27:dd:
5a:34:84:41:f3:e9:87:bb:91:d1:30:ee:b9:46:f3:68:2d:5b:
be:c9:88:24:c5:02:72:7e:06:fc:1f:95:ed:11:d1:ec:ed:65:
a1:1f:5f:f6:03:e2:1f:e7:9b:a8:74:98:80:7b:d0:c5:52:44:
81:8e:5f:83:6a:f6:c9:a0:d1:46:e4:67:a5:58:20:f3:68:6d:
f3:b8:c5:fa:52:ba:bc:df:d3:82:05:3c:c9:0e:b6:19:a9:ac:
09:8c:a7:be:7f:9e:9c:e5:91:80:3c:c9:4c:98:00:b2:4a:48:
78:3e:01:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 21:18:56 2024 by rpki-client on console.sobornost.net