Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BeLswdS7yTL4KOUJXmZVv1WuMgQ.roa
File: BeLswdS7yTL4KOUJXmZVv1WuMgQ.roa (raw, json)
Hash identifier: h0cvqKIiQKbdoI934tvWGwz1dt1KmfbxMorTW8Zr6QE=
Subject key identifier: 05:E2:EC:C1:D4:BB:C9:32:F8:28:E5:09:5E:66:55:BF:55:AE:32:04
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED8DED88D5C7FCE743D4291AB36898720
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BeLswdS7yTL4KOUJXmZVv1WuMgQ.roa
Signing time: Sat 13 Apr 2024 19:11:06 +0000
ROA not before: Sat 13 Apr 2024 19:11:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Apr 2024 20:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d8:de:d8:8d:5c:7f:ce:74:3d:42:91:ab:36:89:87:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 13 19:11:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05e2ecc1d4bbc932f828e5095e6655bf55ae3204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:7d:d4:cd:65:6c:88:2d:5c:34:00:c2:68:
37:4c:04:ee:c7:27:16:8b:0f:39:7b:0e:44:11:99:
6e:47:d1:12:fe:7e:ca:da:fc:d1:8c:b7:5a:f5:56:
d3:6a:cf:25:99:9d:be:a3:4f:bd:f4:0f:f8:be:70:
09:7a:2c:c1:34:2d:fa:3e:6b:62:bd:56:d0:a0:a2:
f7:dc:7c:a8:41:24:40:06:dc:fd:21:a3:3c:8f:dc:
bf:46:c7:9c:f7:1b:55:73:1f:55:fa:0e:52:67:8f:
9c:02:3d:31:ee:0d:d6:46:d1:85:3e:63:96:1e:57:
42:d7:fe:63:5b:b9:4b:e1:f8:1a:52:a1:09:e2:6f:
e1:ef:ee:e3:1c:b7:fd:a4:9f:13:31:0a:46:3b:b8:
86:bc:a8:44:0c:2b:da:79:da:b2:b6:e6:99:b2:26:
62:a3:85:e7:94:30:5e:92:06:03:3f:5f:cd:03:ff:
19:df:b5:5a:9d:e1:67:2e:32:fc:f7:a0:9d:0c:fc:
3b:47:d4:15:f9:57:71:20:5b:68:6f:fc:1d:15:23:
18:de:8a:8b:3b:85:22:4e:16:81:24:13:bc:45:2f:
29:9d:07:b5:9b:07:00:b1:47:3e:30:90:32:27:2d:
d0:4e:20:86:b8:ea:5f:d1:b5:d1:a8:94:f4:26:b9:
2c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E2:EC:C1:D4:BB:C9:32:F8:28:E5:09:5E:66:55:BF:55:AE:32:04
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BeLswdS7yTL4KOUJXmZVv1WuMgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:e2:05:6c:29:44:88:d9:23:f6:9b:48:e6:af:ed:8d:f8:c9:
3a:15:43:14:8b:e9:1e:d7:11:eb:7a:e1:6a:01:e8:69:9b:77:
16:48:7e:18:e9:a5:ad:cc:5e:ee:78:45:a4:66:44:fd:5a:a8:
7d:34:f0:2a:da:c3:15:97:ce:2e:23:f6:48:b2:04:17:e8:c7:
27:b6:49:d5:59:87:a3:77:3b:4b:d9:5e:7a:56:25:40:6d:2b:
09:b2:47:ea:b2:4f:cc:03:6c:73:df:1e:b8:b5:0c:a6:2a:c8:
95:38:dc:11:04:59:7b:9d:51:5a:05:e2:f2:6b:f6:48:32:7c:
eb:18:78:64:4b:11:36:f7:2e:90:67:48:af:15:53:42:21:e0:
23:e8:ca:a4:62:9f:ca:57:7f:93:ff:e0:b6:2d:21:8c:0e:b9:
e7:4b:3c:ad:a4:0c:b6:56:f7:3a:55:7d:c1:4a:a1:4c:83:e1:
9a:8a:59:67:3f:17:fe:be:d0:db:42:45:1b:fa:10:a7:a5:b9:
01:ee:b1:eb:bc:72:0d:76:c1:30:72:65:61:c1:b6:7c:e5:16:
88:fb:3b:41:aa:f9:cd:00:5b:b6:81:f8:a2:09:18:a4:51:e1:
e8:f4:60:3b:3d:bb:60:48:34:ed:ee:0f:15:5a:c0:fa:a0:a0:
f2:9b:cf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 01:27:53 2024 by rpki-client on console.sobornost.net