Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9GWQOvAPoZSthmu_nTYTTvfVs30.roa
File: 9GWQOvAPoZSthmu_nTYTTvfVs30.roa (raw, json)
Hash identifier: HJYghkHFqo3DiGbGwd7mEJd666BpReyzWeX50MfN0mQ=
Subject key identifier: F4:65:90:3A:F0:0F:A1:94:AD:86:6B:BF:9D:36:13:4E:F7:D5:B3:7D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE1B470F75840FD1BB041907829A77465
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9GWQOvAPoZSthmu_nTYTTvfVs30.roa
Signing time: Sun 07 Jan 2024 02:15:48 +0000
ROA not before: Sun 07 Jan 2024 02:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jan 2024 03:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e1:b4:70:f7:58:40:fd:1b:b0:41:90:78:29:a7:74:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 7 02:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f465903af00fa194ad866bbf9d36134ef7d5b37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:04:58:67:49:96:a0:0c:70:a4:7b:c2:6a:
31:9f:fa:84:43:74:bf:60:44:4e:70:34:f1:db:99:
ff:40:2b:3f:03:13:ea:ae:00:0f:c8:66:ed:61:f5:
22:e8:ee:1a:f9:77:7d:b6:0c:5f:55:81:e0:3f:ab:
cb:7e:f7:5a:fd:cd:27:63:76:ad:18:8e:5d:5f:84:
54:34:76:b0:b6:2d:6e:ff:bc:d5:a2:18:c2:73:ca:
48:ad:a8:ad:ea:be:81:8a:3c:c8:bf:20:58:2d:92:
a3:c3:81:30:13:3c:cb:c3:9c:ca:89:8d:19:29:e8:
1c:a4:59:a5:07:b5:7f:89:86:c3:b9:c1:01:35:49:
16:56:36:c6:06:36:cb:64:5e:93:40:de:b4:32:2d:
1b:e9:eb:f7:34:e4:83:23:84:99:7a:b6:14:70:69:
eb:2a:18:ce:47:dc:c3:0f:16:45:ef:1d:df:55:c7:
03:38:ee:ab:d7:2e:e7:8d:bd:4e:fc:bb:49:90:5d:
56:35:d0:21:c9:df:b9:e7:9d:a5:f4:1d:3e:6e:02:
d5:71:d6:20:a5:78:aa:8d:c6:8a:a1:f5:0c:c3:08:
56:79:a8:45:22:fc:db:c3:8d:83:50:ec:4a:57:36:
6a:e6:38:99:8f:fe:2a:11:87:af:6e:dc:d0:3f:ab:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:65:90:3A:F0:0F:A1:94:AD:86:6B:BF:9D:36:13:4E:F7:D5:B3:7D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/9GWQOvAPoZSthmu_nTYTTvfVs30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:5a:c9:57:39:71:58:ea:f1:fd:61:9f:6b:c2:e2:bb:a3:8c:
ee:43:72:23:78:8c:9d:64:d2:a8:73:3f:df:a7:1d:69:7f:e9:
49:a4:2f:16:19:27:b5:6e:87:5f:cc:f4:5d:bc:d1:1c:c4:da:
28:2c:d2:5b:e1:1b:c3:14:49:16:e8:55:c8:46:99:ae:5d:21:
2a:c1:6d:90:6f:4b:e0:48:22:28:35:3d:6c:99:39:dd:70:e2:
f6:69:3e:98:d3:e4:25:9c:b8:f1:6b:d3:3b:2e:ff:f2:76:24:
b5:da:29:78:2f:3d:00:49:23:e0:9a:9e:71:a0:f1:9d:72:39:
33:6a:3a:a6:66:0b:e6:35:5f:f4:c4:2a:6b:c0:e2:79:c5:c7:
f0:ca:2c:67:29:ca:b2:3e:6c:ee:d5:57:a4:3c:00:b8:e2:11:
86:8e:29:7a:f1:be:f1:cb:17:f2:92:5a:f2:a0:ad:ad:8d:08:
41:52:e5:85:70:a8:81:f7:00:04:d1:9f:27:38:b6:da:fa:4f:
21:31:ef:ba:f1:3d:af:86:8d:96:a5:3c:03:9f:71:58:9c:9f:
58:ab:ad:43:66:65:08:12:10:1a:bb:06:77:31:c1:81:1c:9d:
36:eb:c3:af:3b:fb:9a:7d:a7:04:82:78:74:4e:ed:5d:a2:ad:
69:c0:41:34
-----BEGIN CERTIFICATE-----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Generated at Sun Jan 7 05:57:13 2024 by rpki-client on console.sobornost.net