Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7al2yrkCnD8jLSjIv5kshDFedOM.roa
File: 7al2yrkCnD8jLSjIv5kshDFedOM.roa (raw, json)
Hash identifier: 5vK0Oie3jYxuepwewaXXNXZqMYx3Zj/YUgtEk/LFgpc=
Subject key identifier: ED:A9:76:CA:B9:02:9C:3F:23:2D:28:C8:BF:99:2C:84:31:5E:74:E3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E1FEB7C8B948D3AE0C722306061E963E1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7al2yrkCnD8jLSjIv5kshDFedOM.roa
Signing time: Fri 08 Mar 2024 21:15:10 +0000
ROA not before: Fri 08 Mar 2024 21:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 08 Mar 2024 22:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1f:eb:7c:8b:94:8d:3a:e0:c7:22:30:60:61:e9:63:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 8 21:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eda976cab9029c3f232d28c8bf992c84315e74e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:48:67:56:84:d3:2f:f1:77:46:15:b8:63:
2e:ca:56:4b:6f:eb:5f:17:03:ba:4b:92:b2:84:fd:
a6:8d:d6:b2:78:f7:e6:14:0e:72:ef:d5:fd:4e:4c:
52:74:e2:40:bb:c1:32:b2:d8:f2:db:65:0d:ef:f6:
41:f5:70:ef:f4:c5:ff:2b:d6:e1:ba:08:98:97:f5:
0e:4c:4e:47:6b:be:a4:8b:d0:e7:0c:f3:07:fc:ba:
70:06:32:f2:6a:63:51:65:1b:35:49:cd:0e:f7:b0:
71:d1:f2:cb:6a:66:1d:a0:1f:31:db:2d:12:e8:6b:
97:f8:93:52:2f:25:d0:20:2e:83:f6:03:b7:23:cc:
32:6a:27:3f:6b:02:00:ea:11:cd:95:62:15:b0:2f:
0a:91:5d:65:c6:f7:7a:ba:f1:52:12:24:38:a7:e8:
2e:7b:67:5c:a9:94:95:46:d6:e5:93:6f:1a:9e:30:
52:ad:0d:80:35:a7:56:5f:38:c3:60:81:e9:94:35:
00:27:d2:9e:8f:4d:56:b5:e0:e2:1c:ee:25:79:e6:
5b:04:45:ca:c0:40:5b:bc:86:22:e2:22:45:28:21:
97:f5:67:f2:a6:dd:86:e3:4d:c4:59:9d:fd:25:a6:
fa:a5:b4:81:a7:63:e3:50:f9:48:4c:af:f0:36:57:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:76:CA:B9:02:9C:3F:23:2D:28:C8:BF:99:2C:84:31:5E:74:E3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/7al2yrkCnD8jLSjIv5kshDFedOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:ea:7f:54:46:5c:c9:c8:79:3f:1e:bf:0b:40:8f:bd:84:e2:
51:1b:ab:32:fc:22:b3:d5:43:5d:85:54:09:1a:cc:61:78:79:
14:29:ad:03:b1:cd:ba:2a:ec:24:1b:20:2e:09:49:2c:3e:ac:
6c:cd:8c:6e:6c:19:f6:df:5b:a5:ef:fe:9c:26:45:f6:ef:e1:
66:d3:6e:80:b9:82:b6:8e:1d:cb:40:be:dc:ac:6a:79:01:3c:
95:81:52:77:fd:cb:03:75:20:47:71:58:e8:0d:f4:b4:96:e6:
e7:de:9d:f7:91:d0:cb:b0:7b:69:23:74:49:d6:1a:5e:30:23:
8d:42:9b:8f:ae:6e:2c:2a:70:67:4c:f8:1c:ec:c4:e0:99:e1:
53:74:77:80:de:13:41:6c:66:89:db:51:e8:98:b4:3e:8b:8e:
ed:9b:35:a8:87:33:ff:dd:bc:98:7b:7e:72:2a:16:bc:b2:87:
9c:c9:5a:36:84:1a:0c:0b:e8:92:80:20:eb:95:29:bf:fb:43:
41:ed:e5:bf:d8:f5:28:de:80:c2:6b:4b:08:1f:5a:a3:bf:23:
db:a3:4f:f7:2c:0a:a0:d4:55:be:f0:86:7e:3a:7d:20:af:11:
91:04:2e:0a:c9:ac:b0:7b:9a:79:49:01:58:d5:1e:f8:e0:89:
b5:fe:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 05:12:33 2024 by rpki-client on console.sobornost.net