Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CoKQVrnAmBitaCbN7GFbn0ZtTUU.roa
File: CoKQVrnAmBitaCbN7GFbn0ZtTUU.roa (raw, json)
Hash identifier: EhlbGIXmECzPCCnVg/LFnexXsTbir+MoNO8hk6qFYSg=
Subject key identifier: 0A:82:90:56:B9:C0:98:18:AD:68:26:CD:EC:61:5B:9F:46:6D:4D:45
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8DC55B7365E887EE26564C6DCFDAE7F3
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CoKQVrnAmBitaCbN7GFbn0ZtTUU.roa
Signing time: Sat 30 Mar 2024 05:11:45 +0000
ROA not before: Sat 30 Mar 2024 05:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 30 Mar 2024 06:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8d:c5:5b:73:65:e8:87:ee:26:56:4c:6d:cf:da:e7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 30 05:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a829056b9c09818ad6826cdec615b9f466d4d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:0d:27:b8:bf:f0:22:36:7a:7e:4c:3f:d1:
2c:d0:aa:9d:2d:7f:00:2f:26:34:f3:e5:2d:9d:ed:
85:9e:e7:27:cc:dd:70:17:d9:3d:2b:9e:44:a1:4c:
35:ab:2e:8a:c4:7c:11:72:b8:18:ca:47:30:cf:58:
73:43:b0:ef:39:01:1f:3c:10:cb:df:9f:c9:15:f7:
44:b4:96:74:6b:19:ce:cc:36:d9:34:f3:ae:e1:2d:
30:0b:2e:14:35:34:99:e9:e2:29:0f:74:a6:ab:21:
0e:4d:3d:46:f1:c4:04:94:e8:86:63:79:e8:72:9a:
5b:c8:33:46:46:3e:3f:0f:89:fc:4a:4d:f3:ce:64:
6e:93:a6:30:c2:30:1d:00:dc:e2:4c:e7:51:46:c7:
a1:79:d7:27:38:18:73:57:65:32:1e:c5:56:65:73:
6b:d7:a2:bd:02:9f:f4:9b:e2:6d:51:09:b6:34:60:
a3:f8:23:e7:62:12:13:1f:d7:f5:18:47:25:1f:04:
20:c6:33:75:0b:76:3a:73:d4:93:23:62:5c:b8:5f:
a0:0a:1f:16:21:5c:e9:88:54:fe:f1:04:2e:0f:db:
88:09:9c:95:63:d1:bf:26:e3:0b:45:c5:6d:11:cc:
c7:03:d2:73:99:02:d4:03:e9:03:ab:e5:57:89:50:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:82:90:56:B9:C0:98:18:AD:68:26:CD:EC:61:5B:9F:46:6D:4D:45
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/CoKQVrnAmBitaCbN7GFbn0ZtTUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:a9:0b:a7:85:39:7e:dc:0f:6e:f7:0d:21:af:37:65:3a:2c:
30:cb:26:8b:d4:16:e3:48:2b:3c:54:68:66:91:1e:e2:96:7c:
00:0a:4c:d7:d7:6a:fd:b4:ad:8e:d2:2f:08:a6:c5:7d:90:b0:
4c:61:7b:33:80:4e:5d:3d:29:48:b5:43:be:ab:d5:fc:f4:62:
bf:96:44:7f:eb:ab:ea:28:64:8f:e4:3b:97:d2:74:8f:0c:1b:
85:ef:78:54:76:ba:3e:2d:a8:55:f0:03:13:92:96:5d:41:e3:
4f:9c:18:38:fa:ef:5c:2d:79:7d:4c:7b:4b:75:55:1c:99:72:
5b:6c:3f:78:5f:d0:1e:a8:50:fd:43:d1:7e:f8:0d:af:c2:9f:
ca:57:6c:33:3b:c9:40:b9:00:bb:78:6b:20:12:7e:e5:45:a1:
9a:76:ea:74:d3:f2:53:1b:db:18:68:68:16:f8:b0:1b:89:ef:
b0:4c:01:92:a2:e2:91:d5:51:ca:97:19:30:2f:b6:71:9c:66:
b1:a5:03:57:5f:b0:be:1c:72:32:32:ed:43:89:d0:6f:e9:51:
b2:84:80:d5:c2:28:77:04:18:03:2d:07:f4:c7:c7:52:77:ee:
91:e0:d3:41:7d:4b:50:31:66:24:13:04:d3:1b:84:d5:3f:3c:
21:df:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 11:14:56 2024 by rpki-client on console.sobornost.net