Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/w9US0f06xExrOrE0ZnSb2ASZpL8.roa
File: w9US0f06xExrOrE0ZnSb2ASZpL8.roa (raw, json)
Hash identifier: Qvo/W3Wa1+8ZAWx4HlbWuWxzj/EHeQXL1d3WVHqeJN4=
Subject key identifier: C3:D5:12:D1:FD:3A:C4:4C:6B:3A:B1:34:66:74:9B:D8:04:99:A4:BF
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EFE38A3BC6A150734246A7A7D0AFB30D4
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/w9US0f06xExrOrE0ZnSb2ASZpL8.roa
Signing time: Sun 21 Apr 2024 01:15:08 +0000
ROA not before: Sun 21 Apr 2024 01:15:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 21 Apr 2024 02:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fe:38:a3:bc:6a:15:07:34:24:6a:7a:7d:0a:fb:30:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 21 01:15:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3d512d1fd3ac44c6b3ab13466749bd80499a4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:04:8f:a1:9b:3d:10:2a:a1:f5:e1:98:21:
8f:1d:70:04:57:33:7f:06:f5:da:36:5f:64:4f:8a:
32:b7:2a:f5:3a:30:12:e7:bd:76:57:0a:80:08:0d:
99:6c:c2:8e:95:b6:6f:51:11:20:0b:f0:d0:03:7a:
cc:70:c2:b0:d4:95:af:b6:48:28:60:ab:f2:04:28:
ef:98:d1:a0:61:ce:31:18:ec:02:63:9f:ec:be:f0:
72:49:26:24:9e:62:6c:9a:5d:be:ad:3f:48:2b:20:
81:1e:6d:80:09:2c:54:96:cf:eb:c7:b9:7e:77:d2:
68:fe:7e:4f:07:03:5a:16:bc:64:56:c6:27:db:5f:
0b:74:59:c8:98:8d:9a:12:b2:24:36:7f:de:fe:c7:
fc:8d:17:83:5d:76:0e:6f:be:26:5b:15:f4:83:b1:
15:18:cb:ae:a4:1a:e3:8a:d0:fd:58:d9:c6:11:ad:
9a:2e:9e:40:b6:af:f9:d1:1a:9b:af:f9:16:d9:3f:
9a:3b:3e:8d:b0:ff:8d:31:be:1f:4e:f1:73:5d:cf:
4b:bd:95:ac:56:e7:e1:49:c0:85:fb:46:d2:c6:06:
ca:0d:a6:16:f3:44:87:fb:4c:2a:2e:a9:70:42:c6:
dd:52:3a:b1:62:3a:de:88:08:71:e8:e6:18:ea:38:
e7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D5:12:D1:FD:3A:C4:4C:6B:3A:B1:34:66:74:9B:D8:04:99:A4:BF
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/w9US0f06xExrOrE0ZnSb2ASZpL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:ce:a0:cb:80:74:ef:f7:f7:b0:37:24:f7:3f:74:49:02:91:
d8:54:fe:a0:7d:54:bd:af:f5:74:0c:36:e9:03:40:da:0b:90:
ab:83:38:27:84:0a:c3:6d:59:e7:5d:07:f1:ad:77:4b:db:5e:
24:6e:0c:e4:03:b0:3a:fc:a0:a6:a9:2b:6a:c6:d4:7a:96:42:
75:44:5d:76:57:f0:1d:64:6c:76:51:66:3b:0d:f8:df:62:eb:
26:ce:d4:fa:36:75:33:d5:49:52:33:94:b3:ac:2e:9a:2b:0d:
77:3e:fe:65:42:07:88:e5:4a:ae:81:f2:28:41:2f:be:fb:15:
c6:35:a8:4b:5a:35:d7:1e:41:50:38:2b:16:6f:27:5b:c4:61:
bf:7a:02:55:c5:4f:bd:04:05:1d:49:a5:a2:3d:e4:af:1e:c2:
1b:73:3d:56:e7:92:1b:52:df:73:3b:8f:d0:c0:c0:2d:8e:e1:
7f:b8:54:41:ac:2c:01:23:4d:6d:db:62:f7:7f:cf:45:2e:26:
6c:09:dc:1f:53:31:e6:41:41:7e:23:69:1d:b1:8d:28:3b:9b:
d8:c5:84:ab:f3:f9:61:94:43:5e:c0:fc:8e:85:e6:bf:90:17:
00:ae:b4:e9:64:8a:72:7c:10:3a:5b:ba:42:a2:d5:fb:76:79:
c3:04:7d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 13:43:41 2024 by rpki-client on console.sobornost.net