Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/kzqazzDwgJ-srrErBhW7XCdK75E.roa
File: kzqazzDwgJ-srrErBhW7XCdK75E.roa (raw, json)
Hash identifier: YOtQLEtZ/RA65GxMwe5UiHqcnoG870fmUrA1YB/50ww=
Subject key identifier: 93:3A:9A:CF:30:F0:80:9F:AC:AE:B1:2B:06:15:BB:5C:27:4A:EF:91
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F5C68B40CC75B7D43B110178E20EAD65B
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/kzqazzDwgJ-srrErBhW7XCdK75E.roa
Signing time: Thu 09 May 2024 08:11:56 +0000
ROA not before: Thu 09 May 2024 08:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 09 May 2024 09:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5c:68:b4:0c:c7:5b:7d:43:b1:10:17:8e:20:ea:d6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 9 08:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=933a9acf30f0809facaeb12b0615bb5c274aef91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:93:03:b9:7a:94:0c:7a:12:61:3a:de:2d:
c1:72:7c:85:d7:47:f2:5b:cf:e3:73:f3:5d:f7:ec:
9a:9d:13:dd:45:a5:a8:f5:66:76:2e:4b:1f:5c:e4:
74:65:2a:7e:c2:b2:b1:4c:5c:f1:d5:65:65:8d:ea:
52:1e:03:e1:97:0a:f4:e4:e7:0b:f4:d7:2d:4d:7f:
c4:bb:6e:e2:e9:87:d0:4d:a3:49:d3:e9:89:6f:f5:
c3:8c:18:3b:31:38:b0:e6:c9:da:4b:bf:d4:d5:84:
96:41:45:4f:47:89:6a:19:ee:6f:77:ad:fe:2c:4c:
fd:5a:f7:6e:f6:fa:a9:cf:25:3f:63:8e:50:f4:d3:
28:41:d1:ea:a9:a1:75:7d:50:35:a8:3c:0d:be:59:
5f:e0:cc:ae:39:36:38:cd:7c:74:2c:cd:73:bc:0a:
31:4e:a8:c1:ee:5f:a2:b7:b3:6d:ce:ef:80:43:fe:
64:b2:e3:1b:ed:f6:a4:3f:97:c7:5f:01:f7:55:e1:
1a:92:f9:af:72:05:5b:1f:7b:f8:47:26:86:f4:f9:
87:ba:b4:c2:e2:cb:21:90:ed:3b:26:72:1b:8a:aa:
49:c7:b4:c3:39:a2:df:00:19:a0:db:85:c3:3f:1b:
35:eb:08:f4:67:0f:0e:e8:d9:88:36:76:85:2c:c0:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3A:9A:CF:30:F0:80:9F:AC:AE:B1:2B:06:15:BB:5C:27:4A:EF:91
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/kzqazzDwgJ-srrErBhW7XCdK75E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:0a:c4:db:41:05:d2:7b:ec:49:13:20:96:7b:34:7e:2a:4f:
e2:3f:37:65:db:59:60:49:5a:36:95:ac:d1:c1:14:00:68:ec:
1d:b6:3e:f2:08:ed:d8:70:8f:bb:2b:05:5a:20:4d:13:0f:39:
a5:c4:25:17:35:89:6b:ea:b2:ff:5a:81:b9:48:a7:ac:e4:84:
7c:29:35:d6:7c:19:10:08:05:38:c8:9c:0b:ba:80:2e:4d:1b:
9a:92:93:d7:62:7c:e1:7a:94:23:03:49:8c:0c:d1:94:f7:d3:
cc:cf:16:e0:bb:f1:e1:12:df:db:6d:a8:1d:37:22:df:31:99:
33:a7:b0:c7:9c:a8:fb:76:19:ca:c9:5b:33:a2:59:ec:39:31:
d5:0d:e2:d9:b6:cb:40:a6:ce:d9:e2:05:83:de:d1:35:8b:b5:
25:d2:d0:04:49:89:e5:b2:11:f5:8c:09:a6:90:f8:1b:ea:68:
21:c4:c3:0e:c7:68:87:e7:30:5c:aa:f1:e2:30:72:b3:89:2d:
e2:bb:12:67:e5:dd:d4:dd:59:57:13:d0:e1:36:03:89:01:13:
e5:8f:43:b7:d0:1f:ba:25:b9:60:71:64:1c:92:b0:1a:b8:ed:
8c:d2:e3:1f:ec:f1:ef:69:43:39:c1:0e:4c:7e:a8:3b:37:dd:
42:c8:8d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 14:22:50 2024 by rpki-client on console.sobornost.net