Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D3Jy2u2bWli_ZVxOAZVHU5uEBoA.roa
File: D3Jy2u2bWli_ZVxOAZVHU5uEBoA.roa (raw, json)
Hash identifier: VlwR5aSk+SL2NX4mQOn+oCup1xEGQ+8hDTcKaZKtDmY=
Subject key identifier: 0F:72:72:DA:ED:9B:5A:58:BF:65:5C:4E:01:95:47:53:9B:84:06:80
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EAC05F0B426B2585805DE8341F504A212
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D3Jy2u2bWli_ZVxOAZVHU5uEBoA.roa
Signing time: Fri 05 Apr 2024 02:10:54 +0000
ROA not before: Fri 05 Apr 2024 02:10:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 05 Apr 2024 06:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ac:05:f0:b4:26:b2:58:58:05:de:83:41:f5:04:a2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 5 02:10:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f7272daed9b5a58bf655c4e019547539b840680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:a9:2e:74:13:bc:df:a0:4e:20:e9:21:2a:
17:dd:33:fa:cb:a4:7c:a9:4f:7f:9a:70:b8:f5:e4:
71:5c:a5:a1:03:e4:90:c8:3b:ff:75:d0:ee:b4:0b:
a6:4d:0d:ec:81:da:d8:33:9c:36:af:1c:78:5c:c9:
9c:fb:25:c4:49:6a:5e:a5:b8:7b:55:a2:d9:ac:5b:
37:e7:04:0a:f7:c8:e4:d5:4f:0a:5a:bd:26:1e:f6:
bb:d4:31:8e:09:d2:74:0e:a0:34:9d:67:27:f9:d5:
6e:96:28:3e:ad:ce:e3:61:73:8b:ac:48:f8:d3:a5:
3b:5d:e3:ed:cb:b3:75:7d:38:92:70:69:9b:c4:20:
04:d6:52:21:1a:e8:f0:8a:d0:38:72:5f:4d:a3:c5:
ad:9f:06:f3:66:26:d8:52:87:f5:56:5e:9c:20:a8:
e4:1e:d1:56:34:bd:23:08:7b:a9:15:9d:e0:d5:c2:
bc:8a:b2:2a:2b:55:3d:11:3f:34:d6:7e:50:96:db:
1c:6a:ec:88:94:78:ee:6f:93:31:c1:ab:19:50:63:
72:c7:e4:92:37:42:3d:e8:6a:43:a0:c6:27:fb:a3:
e4:88:29:5b:d6:db:58:67:ea:e2:a1:5b:f3:8a:60:
d3:b2:6d:ae:98:73:eb:34:bd:66:9e:c8:54:6c:b8:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:72:72:DA:ED:9B:5A:58:BF:65:5C:4E:01:95:47:53:9B:84:06:80
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/D3Jy2u2bWli_ZVxOAZVHU5uEBoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:9d:69:dc:7e:d8:33:27:cf:75:c6:37:16:c0:d2:ef:56:b2:
45:35:6a:70:39:b2:47:5e:2c:05:46:b1:42:81:1d:94:9c:94:
b5:6d:61:73:c6:fe:77:f3:de:2f:c1:5b:a1:e8:fb:61:53:74:
db:b7:d2:84:42:57:d1:dd:2f:42:37:49:42:e8:ad:6d:f3:90:
93:5d:59:80:0b:c5:91:cc:c9:69:40:85:a6:de:85:91:c1:ae:
9e:08:a1:3d:1c:c7:f0:2f:4d:88:b8:75:5c:f2:b9:71:6d:55:
16:1f:3a:de:9c:5e:f8:6d:93:fd:3b:ca:25:9e:53:38:df:b5:
30:fe:e2:64:b7:f4:e5:67:e6:01:04:c6:8d:91:f4:1f:35:73:
1e:61:9e:2b:53:d1:82:38:f8:08:e8:d6:13:69:4c:4a:a5:3f:
ba:c5:b2:a1:23:e2:bb:0d:16:a7:d2:cf:c5:38:6a:82:e5:1d:
a5:2d:fc:e2:95:64:4f:9e:dd:3c:c4:1e:21:29:44:b1:1c:d3:
81:91:f4:c9:60:36:ef:63:b5:f1:3f:34:b9:6e:a9:92:6e:56:
21:54:dd:f5:01:d8:29:6c:b2:06:66:6d:db:dd:cf:8d:36:e0:
be:cd:76:63:c6:70:26:57:4f:9a:0d:e7:37:11:ab:65:72:e6:
1a:6a:94:28
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6sBfC0JrJYWAXeg0H1BKISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDA1MDIxMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjcyNzJkYWVkOWI1YTU4YmY2NTVjNGUwMTk1NDc1MzliODQwNjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTupLnQTvN+gTiDpISoX3TP6y6R8
qU9/mnC49eRxXKWhA+SQyDv/ddDutAumTQ3sgdrYM5w2rxx4XMmc+yXESWpepbh7
VaLZrFs35wQK98jk1U8KWr0mHva71DGOCdJ0DqA0nWcn+dVulig+rc7jYXOLrEj4
06U7XePty7N1fTiScGmbxCAE1lIhGujwitA4cl9No8WtnwbzZibYUof1Vl6cIKjk
HtFWNL0jCHupFZ3g1cK8irIqK1U9ET801n5QltscauyIlHjub5MxwasZUGNyx+SS
N0I96GpDoMYn+6PkiClb1ttYZ+rioVvzimDTsm2umHPrNL1mnshUbLhwLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA9yctrtm1pYv2VcTgGVR1ObhAaAMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRDNKeTJ1MmJXbGlfWlZ4T0FaVkhVNXVFQm9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACydadx+2DMnz3XGNxbA
0u9WskU1anA5skdeLAVGsUKBHZSclLVtYXPG/nfz3i/BW6Ho+2FTdNu30oRCV9Hd
L0I3SULorW3zkJNdWYALxZHMyWlAhabehZHBrp4IoT0cx/AvTYi4dVzyuXFtVRYf
Ot6cXvhtk/07yiWeUzjftTD+4mS39OVn5gEExo2R9B81cx5hnitT0YI4+Ajo1hNp
TEqlP7rFsqEj4rsNFqfSz8U4aoLlHaUt/OKVZE+e3TzEHiEpRLEc04GR9MlgNu9j
tfE/NLluqZJuViFU3fUB2ClssgZmbdvdz4024L7NdmPGcCZXT5oN5zcRq2Vy5hpq
lCg=
-----END CERTIFICATE-----
Generated at Fri Apr 5 12:25:52 2024 by rpki-client on console.sobornost.net