Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Cx1BGkJDsgJC9c50wqPJHKjLilc.roa
File: Cx1BGkJDsgJC9c50wqPJHKjLilc.roa (raw, json)
Hash identifier: eKCSJmqOu5Liyo1E+SjqOVxPRol6+2vLdSCG0NDk0Hc=
Subject key identifier: 0B:1D:41:1A:42:43:B2:02:42:F5:CE:74:C2:A3:C9:1C:A8:CB:8A:57
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9BBAA8C92662D5F00248E559256B1726
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Cx1BGkJDsgJC9c50wqPJHKjLilc.roa
Signing time: Mon 01 Apr 2024 22:14:45 +0000
ROA not before: Mon 01 Apr 2024 22:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Apr 2024 23:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9b:ba:a8:c9:26:62:d5:f0:02:48:e5:59:25:6b:17:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 1 22:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b1d411a4243b20242f5ce74c2a3c91ca8cb8a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:a4:a8:47:0c:23:85:e4:43:d8:0f:0c:c2:
5e:5d:cd:52:61:e3:e2:eb:e8:22:8f:a0:ca:92:f9:
06:c0:9e:e7:82:91:3c:9e:4c:fd:8b:74:f0:02:a7:
b8:8c:66:cd:84:a0:5e:07:eb:a9:93:e5:a6:12:0d:
ac:a9:69:5c:22:1e:dd:e1:0c:34:12:c5:9f:0a:e0:
3c:7e:00:18:56:97:67:60:ac:2b:74:23:82:bb:ee:
cd:6d:47:26:ca:77:b1:83:de:44:05:ae:b2:84:9b:
ce:33:af:63:37:0f:d5:4a:df:36:2d:e6:6f:01:32:
50:43:35:e6:1f:be:0d:c4:59:a2:0d:84:4f:be:56:
07:5a:13:01:0a:71:23:6b:91:d3:ea:39:d2:f8:17:
ca:df:d3:e0:ec:9e:9f:78:e6:27:43:2d:1b:0b:f0:
1e:70:bd:2e:c4:d2:d4:4a:c1:0e:c3:43:a2:be:61:
56:81:42:5a:4f:41:e7:d0:10:b1:3b:d1:5f:18:42:
d4:13:24:ac:f8:9e:11:a2:00:25:1b:b3:ac:82:f2:
bb:5d:f9:3c:b3:98:c9:4e:43:58:4a:73:d8:88:a4:
cd:31:9e:55:f3:85:43:50:1b:25:d3:df:dd:dc:54:
0a:ed:3b:15:18:9a:cc:25:70:3a:0a:da:79:6b:64:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1D:41:1A:42:43:B2:02:42:F5:CE:74:C2:A3:C9:1C:A8:CB:8A:57
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Cx1BGkJDsgJC9c50wqPJHKjLilc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:74:aa:9e:c0:7d:d9:40:2a:9b:fc:95:d1:6b:4b:31:d1:6f:
17:48:6f:2e:46:72:aa:e1:b2:9d:5b:8b:33:56:ef:8a:ca:f9:
8b:3b:2d:c0:52:39:d9:e1:14:bd:1c:33:b2:1b:f9:00:42:f3:
86:15:03:14:b0:aa:bb:d7:62:a8:29:9d:df:46:10:e7:59:54:
05:41:24:e6:1e:47:74:9b:c4:e2:0b:40:01:74:4f:0e:38:69:
71:cc:de:e8:f3:0e:73:f6:2c:d3:a5:35:de:d8:74:2b:b7:ea:
81:fb:2a:02:61:9c:49:bc:cc:d2:69:59:1a:02:98:69:3f:cc:
aa:df:2a:7b:64:45:39:1b:2b:46:c9:10:68:5b:f1:56:7b:d6:
88:bc:57:78:43:47:dd:54:2f:6e:f2:f5:f6:3e:73:81:8c:25:
50:f3:33:dc:b2:b8:73:36:38:03:92:5c:9c:5d:0b:4b:08:ea:
ff:6b:3a:ed:e1:99:34:37:c6:c7:4e:bd:1a:04:ce:f8:2c:af:
2f:23:fc:a3:f6:ae:71:a1:9e:d7:cb:0c:a6:af:c8:10:3a:d0:
16:84:80:3d:05:c9:6b:fd:ad:94:96:92:5d:a7:ce:13:84:07:
59:de:18:6c:c5:93:65:58:25:a0:68:ab:44:9e:61:ad:50:1c:
f3:36:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 07:08:14 2024 by rpki-client on console.sobornost.net