Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/zFPAOnJsbu8m-NJO2J26_f0I5ww.roa
File: zFPAOnJsbu8m-NJO2J26_f0I5ww.roa (raw, json)
Hash identifier: rJbCVQ804XnQLajhQOwd4AA4ZIN2FHfcf5q7fQh5414=
Subject key identifier: CC:53:C0:3A:72:6C:6E:EF:26:F8:D2:4E:D8:9D:BA:FD:FD:08:E7:0C
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F34EF1DD22E165CC8F7330C0983A34EFC
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/zFPAOnJsbu8m-NJO2J26_f0I5ww.roa
Signing time: Wed 01 May 2024 16:13:56 +0000
ROA not before: Wed 01 May 2024 16:13:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 01 May 2024 17:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:ef:1d:d2:2e:16:5c:c8:f7:33:0c:09:83:a3:4e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 1 16:13:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc53c03a726c6eef26f8d24ed89dbafdfd08e70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:78:25:41:4d:d4:46:eb:17:77:57:c6:41:
fb:70:f4:81:f0:36:35:2f:5a:98:cb:5d:e0:0d:35:
4d:37:a5:e0:85:23:8a:e1:13:03:dc:b4:9e:c4:b3:
95:f1:5f:5c:ef:b4:4b:68:62:a3:59:a7:7d:0a:b8:
e7:fd:a6:ef:2d:8f:dd:23:e0:2f:81:98:76:6f:cf:
89:69:cd:d2:13:f6:a5:59:f5:90:98:64:8f:96:ff:
94:0f:39:91:0d:e6:4a:1a:51:0e:e1:7c:24:ad:da:
c7:64:0c:da:d5:ec:3e:af:75:eb:2e:0d:bc:a9:04:
fa:af:bc:4c:be:5c:94:5d:bb:a4:e9:57:8e:a5:f1:
d1:62:06:98:c7:da:ae:62:b1:ee:9f:0c:ad:3f:2e:
85:84:c5:8f:d0:98:ad:e7:4d:b5:4f:c9:fa:80:c1:
d7:fa:ad:5c:3c:c1:c1:e4:ed:54:03:02:18:d5:f0:
89:98:d0:bc:1e:32:e4:2d:ba:76:92:83:62:4c:59:
66:36:cb:76:1a:4c:c6:d9:e0:4f:17:a1:63:03:a0:
a8:0a:3d:21:5b:f5:ff:db:6f:ee:ac:a3:15:6c:9c:
0f:cb:85:e0:6f:ca:48:59:43:fc:cf:39:3f:7d:2b:
ce:49:2a:24:ee:a6:ce:76:2a:42:f4:69:b1:09:25:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:53:C0:3A:72:6C:6E:EF:26:F8:D2:4E:D8:9D:BA:FD:FD:08:E7:0C
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/zFPAOnJsbu8m-NJO2J26_f0I5ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:51:9e:55:24:ae:d4:0d:2d:d0:0d:65:aa:04:f7:49:b6:1c:
42:bc:a5:be:f5:38:bc:bc:ed:dd:32:9d:fc:1f:05:43:57:b1:
20:27:72:55:d2:81:4c:59:7a:c0:37:f2:c8:53:a0:0c:f9:76:
34:bc:a6:7d:18:d1:cd:95:06:3b:b8:f8:0d:a7:91:2a:e6:da:
ea:78:87:7a:4f:5e:78:38:32:a4:4e:34:a3:8b:cd:1a:61:fe:
61:cd:4c:6d:a4:b1:51:a3:be:b1:1c:31:c2:39:ee:74:e2:54:
ff:6d:6a:31:20:38:03:ce:dd:34:3b:80:2a:6b:9f:ca:49:3d:
c8:de:d8:72:ef:d1:41:73:96:bc:aa:9e:16:66:ad:07:86:2f:
f0:04:48:e4:ba:e8:a9:b5:03:1a:41:8b:42:9b:7f:c9:ff:ea:
49:2d:9e:9d:af:d1:99:3b:73:dc:a8:4e:fe:c5:7f:61:da:a4:
b8:a3:54:b7:b0:ab:f2:c7:25:55:bd:bc:34:11:39:2a:46:c6:
4c:18:13:9b:fa:9f:08:ca:06:c8:da:25:4f:83:ae:19:fd:3a:
c5:15:99:84:af:4f:18:d3:8b:a4:cf:3f:5f:5e:c9:dc:6c:d1:
5f:d4:93:f7:ba:19:2e:71:92:83:f3:a3:1c:52:14:01:a2:81:
83:a0:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:08:41 2024 by rpki-client on console.sobornost.net