Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-jypQwpBDxWleITjcs8UZPtXTow.roa
File: 1-jypQwpBDxWleITjcs8UZPtXTow.roa (raw, json)
Hash identifier: x2EhMsuwILrRAK5ayDYwuI+zUtJH9aobuXjW0XKK6rc=
Subject key identifier: FA:3C:A9:43:0A:41:0F:15:A5:78:84:E3:72:CF:14:64:FB:57:4E:8C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E0104FE7A325913CDFAADC150644B13AE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-jypQwpBDxWleITjcs8UZPtXTow.roa
Signing time: Sat 02 Mar 2024 21:14:48 +0000
ROA not before: Sat 02 Mar 2024 21:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 02 Mar 2024 22:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:01:04:fe:7a:32:59:13:cd:fa:ad:c1:50:64:4b:13:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 2 21:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa3ca9430a410f15a57884e372cf1464fb574e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:9d:81:ae:8a:15:7c:68:fd:b1:f7:2c:f8:
6a:06:82:bb:97:37:83:ec:7e:55:f0:18:87:cf:9d:
bd:7d:6c:df:ce:79:e3:a7:fd:ec:6d:ce:f1:73:63:
ac:0f:09:43:e2:73:b2:65:36:7c:69:d0:39:3d:23:
28:2d:04:00:b9:e3:bc:93:1a:27:f0:d3:f2:88:5a:
6d:92:b3:41:24:1b:f9:0c:ee:1a:48:76:a9:df:d8:
24:75:b3:c2:41:69:fa:30:33:e9:e5:9f:b8:ad:4b:
e7:d5:71:21:20:9f:ca:41:5e:a6:9e:50:ba:a0:d2:
c3:1d:e0:72:b0:04:17:38:27:40:ae:81:13:d8:8d:
8d:7f:82:5c:a6:ac:ac:85:6d:55:3e:de:f6:28:0a:
69:06:fc:8e:df:86:93:82:5e:bd:0c:e8:b7:d9:fa:
b8:8c:70:e9:34:d7:37:2f:28:30:62:a2:6d:66:c7:
2a:d3:7b:e7:71:5c:68:cd:bb:36:a7:aa:70:7b:d3:
1d:5a:59:0c:ae:46:93:4a:21:9d:08:5c:6c:ea:a9:
fc:aa:76:d9:00:14:d9:14:01:74:4c:53:44:c1:72:
ae:48:ff:e3:46:aa:06:ea:22:a3:77:13:81:50:11:
8d:cd:83:ce:ab:4d:e3:86:30:08:ad:68:01:fa:d5:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3C:A9:43:0A:41:0F:15:A5:78:84:E3:72:CF:14:64:FB:57:4E:8C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/1-jypQwpBDxWleITjcs8UZPtXTow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:37:2d:ab:51:93:5f:63:be:17:9f:ca:b0:6f:68:15:29:05:
be:ae:c7:e0:eb:62:d6:de:d5:f9:09:d7:ba:9c:25:fd:2b:23:
e5:e0:ce:8f:e3:ce:39:dc:86:2a:43:a3:be:16:f9:c4:0b:ac:
9d:10:48:5a:11:53:21:8b:86:80:83:99:7a:26:f3:dc:f1:fe:
7c:d4:96:82:e3:65:2e:43:15:aa:b7:df:e7:37:42:87:8f:94:
2e:7b:47:af:10:6d:af:ab:b3:8e:d0:80:d3:97:ed:c7:2c:9b:
df:13:58:1b:ff:19:04:2f:ef:61:8f:62:c5:19:19:25:b4:aa:
43:0f:a0:f8:63:06:b2:13:06:67:39:fd:b6:b7:12:35:c0:3d:
7f:64:5e:85:06:5a:d5:41:13:3a:ab:7b:73:8f:c3:f3:4c:3b:
30:b2:de:aa:f7:86:7c:e9:96:41:ef:6c:a3:d9:ab:a0:a8:21:
ed:7b:9f:47:03:5c:eb:b2:91:54:45:54:c2:ff:f1:84:f7:4b:
cd:11:ac:7b:61:97:47:2c:3d:88:a0:c1:4b:5e:32:b8:0a:bd:
86:f6:13:4c:c0:97:0a:c7:4e:03:49:86:f9:23:db:bd:02:79:
06:a5:eb:dc:78:58:c6:16:23:f7:88:35:a1:50:50:3a:e6:75:
be:63:21:24
-----BEGIN CERTIFICATE-----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Generated at Sun Mar 3 05:18:27 2024 by rpki-client on console.sobornost.net