Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6nr9AvLmbmqHDa6Eq7SI8i64wdE.roa
File: 6nr9AvLmbmqHDa6Eq7SI8i64wdE.roa (raw, json)
Hash identifier: nqxkpDxOjLQCQ6c4pliLji/SafoEG9IgH2kTlIHxUB8=
Subject key identifier: EA:7A:FD:02:F2:E6:6E:6A:87:0D:AE:84:AB:B4:88:F2:2E:B8:C1:D1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ECA1264C254CDD6A10D8CDF4213A6919C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6nr9AvLmbmqHDa6Eq7SI8i64wdE.roa
Signing time: Wed 10 Apr 2024 22:13:06 +0000
ROA not before: Wed 10 Apr 2024 22:13:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Apr 2024 23:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ca:12:64:c2:54:cd:d6:a1:0d:8c:df:42:13:a6:91:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 10 22:13:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea7afd02f2e66e6a870dae84abb488f22eb8c1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:dd:1b:10:d4:0f:c0:ad:c2:c7:38:fc:55:
ae:c5:f4:00:2d:7a:c3:f4:99:0c:fb:45:54:f3:8a:
c5:ae:e6:a7:34:c8:3f:56:55:f1:17:32:95:c0:86:
3d:b2:41:7c:0c:1b:16:dd:e4:3a:25:b4:17:93:44:
93:3e:ef:5a:e2:3d:43:66:e8:46:ea:65:d1:0b:3e:
82:49:57:1a:b2:be:b2:35:17:3a:63:4c:e8:72:c6:
60:18:c1:03:f3:27:c4:9b:e6:1c:2c:da:91:c3:03:
09:61:32:90:53:02:80:d8:42:cd:61:da:aa:ba:1f:
ad:e6:1c:c6:e4:e9:0f:c1:0e:5f:fd:8e:f7:88:7b:
f1:a5:15:be:82:03:ec:9e:ea:ba:13:0c:b2:98:0c:
87:48:28:45:04:44:a7:56:c7:ec:cc:87:8b:41:6e:
32:35:6b:65:13:e6:61:20:62:6b:23:34:5e:f6:99:
d4:55:50:51:46:8e:10:e4:85:1b:0f:15:14:aa:87:
07:00:56:b1:b0:34:af:e7:c2:c0:45:10:fd:0b:7e:
e1:29:7a:67:a8:59:82:90:2a:e5:57:33:f6:70:1a:
2d:05:6b:be:66:d3:11:42:8a:eb:8e:b7:c7:99:94:
52:38:ef:e5:a0:d5:f7:17:95:3b:e8:c9:a9:f1:b9:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7A:FD:02:F2:E6:6E:6A:87:0D:AE:84:AB:B4:88:F2:2E:B8:C1:D1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/6nr9AvLmbmqHDa6Eq7SI8i64wdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:e6:ff:13:81:92:2b:e6:a6:8e:3e:a4:19:d9:18:f4:64:70:
45:3a:ed:8c:59:f0:53:76:71:94:9a:5c:65:c1:6d:f8:79:d8:
6f:c4:1b:1f:47:47:f4:73:81:34:4e:c7:49:4f:47:96:27:3d:
57:86:1f:b1:cd:78:1d:2c:3c:b1:21:02:f0:01:45:46:b7:1e:
ad:e6:d0:03:8d:94:61:8b:d1:1c:4a:b9:68:89:48:a8:53:64:
7c:ad:ba:f1:b6:00:f9:e2:11:36:78:9a:a4:7b:05:2e:38:87:
9b:6a:02:a3:33:83:97:df:04:92:38:83:fc:e2:b0:e4:50:78:
a2:e0:01:48:91:45:73:78:0b:94:15:15:7b:8a:78:80:83:ad:
bd:e8:b2:ef:1b:fe:b9:83:bf:b6:86:13:4b:53:46:22:9c:0d:
19:1d:fe:7f:71:b0:1f:b3:c0:d3:1e:00:b2:6c:16:a0:d6:46:
57:4b:0a:58:b3:fb:ba:0a:5e:e7:14:a9:1b:48:11:3f:0e:4a:
1e:ad:7c:d6:5e:0f:12:ef:71:f2:67:17:81:79:af:c7:d9:ec:
98:64:4b:7c:81:31:95:59:3f:a7:24:26:fd:20:0e:46:5f:cc:
c7:eb:f7:02:65:b8:67:3b:68:da:d3:01:28:b2:7d:93:e9:5c:
43:b3:02:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7KEmTCVM3WoQ2M30ITppGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDEwMjIxMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTdhZmQwMmYyZTY2ZTZhODcwZGFlODRhYmI0ODhmMjJlYjhjMWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjizdGxDUD8Ctwsc4/FWuxfQALXrD
9JkM+0VU84rFruanNMg/VlXxFzKVwIY9skF8DBsW3eQ6JbQXk0STPu9a4j1DZuhG
6mXRCz6CSVcasr6yNRc6Y0zocsZgGMED8yfEm+YcLNqRwwMJYTKQUwKA2ELNYdqq
uh+t5hzG5OkPwQ5f/Y73iHvxpRW+ggPsnuq6EwyymAyHSChFBESnVsfszIeLQW4y
NWtlE+ZhIGJrIzRe9pnUVVBRRo4Q5IUbDxUUqocHAFaxsDSv58LARRD9C37hKXpn
qFmCkCrlVzP2cBotBWu+ZtMRQorrjrfHmZRSOO/loNX3F5U76Mmp8bmduwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOp6/QLy5m5qhw2uhKu0iPIuuMHRMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvNm5yOUF2TG1ibXFIRGE2RXE3U0k4aTY0d2RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAHm/xOBkivmpo4+pBnZ
GPRkcEU67YxZ8FN2cZSaXGXBbfh52G/EGx9HR/RzgTROx0lPR5YnPVeGH7HNeB0s
PLEhAvABRUa3Hq3m0AONlGGL0RxKuWiJSKhTZHytuvG2APniETZ4mqR7BS44h5tq
AqMzg5ffBJI4g/zisORQeKLgAUiRRXN4C5QVFXuKeICDrb3osu8b/rmDv7aGE0tT
RiKcDRkd/n9xsB+zwNMeALJsFqDWRldLCliz+7oKXucUqRtIET8OSh6tfNZeDxLv
cfJnF4F5r8fZ7JhkS3yBMZVZP6ckJv0gDkZfzMfr9wJluGc7aNrTASiyfZPpXEOz
AoQ=
-----END CERTIFICATE-----
Generated at Thu Apr 11 07:01:25 2024 by rpki-client on console.sobornost.net