Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/oU3f0RdekKH-M515vILMduQBjDA.roa
File: oU3f0RdekKH-M515vILMduQBjDA.roa (raw, json)
Hash identifier: M1dtauH4OrsoZPBTwfubyLTj/wXBsnJEk7cu0VW/HbQ=
Subject key identifier: A1:4D:DF:D1:17:5E:90:A1:FE:33:9D:79:BC:82:CC:76:E4:01:8C:30
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F1FAE975E514910FAA2BFC4692C992A16
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/oU3f0RdekKH-M515vILMduQBjDA.roa
Signing time: Sat 27 Apr 2024 13:11:26 +0000
ROA not before: Sat 27 Apr 2024 13:11:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 27 Apr 2024 14:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:ae:97:5e:51:49:10:fa:a2:bf:c4:69:2c:99:2a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 27 13:11:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a14ddfd1175e90a1fe339d79bc82cc76e4018c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:ad:00:b8:ec:37:30:d1:19:2f:89:8e:6f:
17:ca:9c:78:de:9f:08:5b:13:d6:8c:90:86:5e:0c:
d7:da:83:18:50:dc:00:ee:f9:a1:68:f1:90:83:09:
ae:90:05:16:e1:1b:70:be:60:b7:e4:49:ad:8b:53:
83:34:14:c8:31:b9:37:65:c3:4a:f3:f9:3a:54:32:
5e:80:cb:dd:ac:83:b3:a1:ca:70:1e:e1:b6:89:6f:
24:d9:9e:22:2c:20:ae:a9:59:48:d2:f7:25:03:4c:
2c:15:29:9b:a1:ad:f3:f2:99:5f:6a:c4:fe:b9:24:
75:02:7d:7f:b7:bc:5e:7e:48:31:e7:e5:d6:bd:96:
a4:c5:b6:f2:cf:a7:25:36:85:10:64:06:c3:80:27:
40:13:45:bf:dd:e0:72:79:02:4d:42:f4:a2:9b:03:
f6:2f:47:a7:3c:ee:ff:a2:fd:4a:81:b9:65:30:59:
d1:35:4f:e6:50:1b:18:ca:65:cc:b4:f4:6f:ce:fc:
01:c5:0a:c3:b2:db:01:5c:9b:89:80:1e:73:a3:82:
1d:6c:08:b0:8c:26:74:35:2c:71:5b:5e:e1:5c:6f:
85:a5:b3:4c:69:3f:ff:93:31:ab:e3:71:5f:75:35:
8a:53:36:f5:6f:59:00:90:19:ef:0e:ba:f6:f6:30:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4D:DF:D1:17:5E:90:A1:FE:33:9D:79:BC:82:CC:76:E4:01:8C:30
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/oU3f0RdekKH-M515vILMduQBjDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
3e:ae:eb:83:f6:8d:7a:52:0c:91:8d:3d:b6:82:f8:4e:8e:83:
2d:c5:03:cd:b3:66:1b:8c:38:48:45:95:9d:c3:5e:b1:7d:29:
50:2b:4e:58:39:c7:4e:24:ee:2e:f2:e6:62:77:5a:3b:46:29:
d7:c0:26:fe:32:17:b9:52:c9:4e:6f:8c:8e:9a:00:28:c0:22:
11:5c:4d:f7:b0:e3:c5:f9:90:44:71:02:00:5c:2c:b8:97:f1:
37:bb:a9:02:a1:83:b8:ec:49:4c:74:54:7e:93:a4:0c:67:06:
83:e8:5c:c6:a4:c1:e9:1e:c1:98:fb:59:c2:3e:f5:78:19:b0:
a1:59:1d:45:b2:27:fc:e8:16:eb:51:a2:ad:6e:19:6d:e9:15:
8b:12:e8:c0:06:16:46:b1:7b:f4:cd:67:f0:7c:b6:a2:c6:c9:
d0:01:62:0c:68:e1:ab:17:bb:3f:e7:bd:05:3d:0e:48:3b:42:
98:0d:74:27:0e:f0:d3:da:a2:cd:e9:1a:aa:1f:82:57:e6:b4:
55:26:09:b9:07:29:77:ba:ec:36:37:b6:95:68:9a:9f:f6:78:
27:54:58:8b:89:81:43:3e:32:74:12:11:e4:32:a2:94:e9:80:
4c:fa:18:4a:0f:af:69:f9:e0:7b:73:1f:85:aa:14:d0:01:51:
17:25:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:46:51 2024 by rpki-client on console.sobornost.net