Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AETFB69jj7-K5_WxMYNOJ4JZPeA.roa
File: AETFB69jj7-K5_WxMYNOJ4JZPeA.roa (raw, json)
Hash identifier: 0xR2NGh+QMUmCC5vTcJb4zzsGjL3SyoVCaldw6gJFSE=
Subject key identifier: 00:44:C5:07:AF:63:8F:BF:8A:E7:F5:B1:31:83:4E:27:82:59:3D:E0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DE74532D285968AB753CB7F863353635E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AETFB69jj7-K5_WxMYNOJ4JZPeA.roa
Signing time: Mon 26 Feb 2024 21:14:48 +0000
ROA not before: Mon 26 Feb 2024 21:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 26 Feb 2024 22:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e7:45:32:d2:85:96:8a:b7:53:cb:7f:86:33:53:63:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 26 21:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0044c507af638fbf8ae7f5b131834e2782593de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:31:d5:53:ab:dc:eb:0f:d4:93:89:3e:a5:87:
88:6b:af:1c:9b:93:52:14:1a:ad:89:62:88:bc:41:
b9:8e:9d:6b:25:dc:9b:18:b2:1d:02:af:eb:1c:38:
f3:97:df:2a:32:1b:d3:89:38:26:aa:ef:56:40:ec:
b3:bb:50:25:ed:3e:11:d5:39:7a:62:cd:b8:20:15:
b5:71:25:2d:93:e0:5b:04:be:e5:d6:04:e9:53:be:
a4:53:ac:33:4c:85:c4:b1:8c:c0:50:c7:91:05:bf:
28:7a:c1:95:0e:2c:55:6e:80:58:32:60:e8:e9:48:
67:dc:dc:8d:2e:8a:1d:a2:ae:d7:5c:5d:5e:50:6b:
b3:84:9f:52:11:1a:c8:2c:89:8e:82:ad:14:8d:87:
ba:26:50:43:a2:f2:dc:c1:70:2c:76:d7:73:30:fe:
20:0c:04:11:a4:74:fe:21:1f:0f:f7:ac:88:85:fa:
37:fd:4b:17:d8:89:b1:05:7b:cb:58:13:59:a7:29:
aa:0c:52:b1:a6:b1:40:8c:d2:d2:13:ad:f0:a3:b4:
f1:80:de:91:89:98:47:08:65:91:c3:8c:fa:25:7f:
62:11:68:d5:e7:a5:ab:00:3d:ee:81:09:5e:7d:69:
6d:a3:b4:4e:44:2a:33:ec:b6:8a:38:2b:61:e4:e3:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:44:C5:07:AF:63:8F:BF:8A:E7:F5:B1:31:83:4E:27:82:59:3D:E0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/AETFB69jj7-K5_WxMYNOJ4JZPeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:cc:b7:09:e0:ec:0a:8e:9a:e8:d8:86:f1:d2:aa:9d:02:b7:
55:21:c1:72:7a:ca:64:b7:de:bf:a6:9b:91:6b:70:0d:3f:3b:
ac:27:b1:b7:e9:37:90:d6:e3:95:6e:a0:07:fa:c1:22:fe:8b:
05:86:09:b7:de:bb:85:3a:e6:f1:d9:e9:7a:83:aa:ef:4f:9e:
38:b9:7a:ce:b0:fa:f1:34:6c:78:b3:af:3c:92:79:4c:af:1d:
3d:96:c3:93:b7:26:da:92:d2:6b:97:14:11:49:bb:58:74:d4:
2d:61:1e:7f:7a:a5:c6:c7:83:2e:a7:6c:85:56:1e:90:1d:32:
5d:7a:cb:75:94:0f:4e:72:eb:90:d2:7d:ce:d6:b5:38:38:f7:
06:24:fb:41:f6:13:bf:65:40:8c:59:8f:32:66:82:f3:54:84:
90:e7:1b:98:ef:e2:45:8e:93:75:4d:11:1b:7f:c3:a8:fa:e6:
25:32:a4:47:03:7d:74:68:cc:08:99:de:06:bb:48:ba:6a:e6:
85:f8:b9:59:5e:62:e4:fb:53:ef:22:ed:ac:36:ed:7d:0a:36:
b6:a2:ce:cb:c8:ca:b0:f6:09:e3:5e:6c:a3:1c:73:2b:03:86:
fd:16:0d:9b:17:6f:23:f2:cd:da:a9:bb:03:3a:3c:35:05:6e:
da:78:b6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 04:22:34 2024 by rpki-client on console.sobornost.net