Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DudTuaSa074ccjYeBvC4M_uTHF8.roa
File: DudTuaSa074ccjYeBvC4M_uTHF8.roa (raw, json)
Hash identifier: sgeukFC1f0KgEYXtXbln2Uah6oNJezUlgJBlBb+UJJM=
Subject key identifier: 0E:E7:53:B9:A4:9A:D3:BE:1C:72:36:1E:06:F0:B8:33:FB:93:1C:5F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED6F0762C8C3C07E685DE49364335968E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DudTuaSa074ccjYeBvC4M_uTHF8.roa
Signing time: Sat 13 Apr 2024 10:11:06 +0000
ROA not before: Sat 13 Apr 2024 10:11:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Apr 2024 11:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d6:f0:76:2c:8c:3c:07:e6:85:de:49:36:43:35:96:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 13 10:11:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ee753b9a49ad3be1c72361e06f0b833fb931c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:4b:9c:4d:1d:ad:f5:30:bb:da:4e:36:5d:
20:fe:5c:9c:f0:17:e7:12:c8:e8:b3:18:66:75:b2:
be:71:c1:51:b2:a1:67:bb:68:56:ad:76:8c:7e:cf:
be:1a:8e:62:30:91:94:f8:6b:4f:51:68:b2:c7:35:
30:28:ee:d9:a0:38:3a:45:ad:c6:24:b3:12:a3:1a:
41:93:6e:59:c9:cc:b4:46:a9:9f:73:7c:d9:0c:35:
6e:ee:7a:58:a5:63:71:fa:51:a3:3b:4e:ef:70:30:
47:b5:e7:44:b9:19:06:6d:0e:64:b7:7c:ee:7d:21:
4e:83:df:ee:59:a5:6c:b1:8e:d7:7c:82:fc:55:9b:
47:f5:bc:61:5c:52:5a:01:91:a9:09:55:44:1b:ac:
d0:0d:ee:31:81:69:8d:c4:48:e3:4e:2a:43:08:88:
1a:df:51:92:10:1a:50:05:69:8d:d8:ed:62:38:5f:
51:04:95:2d:a4:05:cb:67:95:b7:90:db:bd:1b:75:
d3:e3:e3:36:da:fd:7c:c1:c3:df:1a:de:d8:66:a5:
d0:3d:bf:8b:7a:73:81:b8:04:de:16:fc:83:04:b1:
44:bf:a6:a3:ae:3d:a4:21:6f:c7:32:0b:ff:17:c8:
3f:04:84:8e:42:34:bb:29:0b:08:cc:93:07:89:0f:
1f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:53:B9:A4:9A:D3:BE:1C:72:36:1E:06:F0:B8:33:FB:93:1C:5F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/DudTuaSa074ccjYeBvC4M_uTHF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:70:46:d2:13:2d:12:74:b2:cd:06:d8:f9:50:47:ac:fa:2d:
3a:ab:97:d5:94:58:3b:de:b9:60:37:12:9e:1f:4b:7a:9c:68:
05:fc:58:47:f2:3c:b5:43:5f:66:39:95:e8:8d:d6:fc:91:1b:
a7:de:e6:1c:bc:1e:a7:22:a0:b2:d3:a3:bf:44:f8:24:e4:65:
0a:44:cd:5b:bc:69:21:f3:67:f0:11:6d:c5:9a:a5:88:5e:81:
d0:66:41:d1:1d:20:79:42:80:89:f2:9e:1d:bd:38:6c:18:b2:
80:f5:b1:3f:52:17:41:2d:b7:0f:65:f9:ae:eb:a5:82:85:d1:
d4:28:75:00:fa:fc:b2:4f:b4:1f:05:4d:0c:32:00:f8:e9:1d:
fe:8a:71:1d:ef:10:2c:08:e5:c3:03:07:29:c9:c5:61:2f:66:
72:e7:bf:c6:e3:a8:46:55:6d:31:a7:9d:99:9a:26:70:64:20:
09:33:62:d4:d0:97:35:41:e9:6c:50:90:ae:75:f2:96:29:0b:
57:9a:b4:6a:79:c2:13:9d:c1:ec:0a:b9:35:98:18:65:8e:51:
23:ea:f9:37:0d:94:d6:0f:12:1d:5a:89:9e:d0:a7:c9:36:64:
e6:ef:f5:21:c2:41:70:d1:c5:f7:5e:37:1c:84:d3:87:0f:5b:
c2:a6:9e:aa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7W8HYsjDwH5oXeSTZDNZaOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDEzMTAxMTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWU3NTNiOWE0OWFkM2JlMWM3MjM2MWUwNmYwYjgzM2ZiOTMxYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUBLnE0drfUwu9pONl0g/lyc8Bfn
EsjosxhmdbK+ccFRsqFnu2hWrXaMfs++Go5iMJGU+GtPUWiyxzUwKO7ZoDg6Ra3G
JLMSoxpBk25Zycy0Rqmfc3zZDDVu7npYpWNx+lGjO07vcDBHtedEuRkGbQ5kt3zu
fSFOg9/uWaVssY7XfIL8VZtH9bxhXFJaAZGpCVVEG6zQDe4xgWmNxEjjTipDCIga
31GSEBpQBWmN2O1iOF9RBJUtpAXLZ5W3kNu9G3XT4+M22v18wcPfGt7YZqXQPb+L
enOBuATeFvyDBLFEv6ajrj2kIW/HMgv/F8g/BISOQjS7KQsIzJMHiQ8f/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA7nU7mkmtO+HHI2HgbwuDP7kxxfMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvRHVkVHVhU2EwNzRjY2pZZUJ2QzRNX3VUSEY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADFwRtITLRJ0ss0G2PlQ
R6z6LTqrl9WUWDveuWA3Ep4fS3qcaAX8WEfyPLVDX2Y5leiN1vyRG6fe5hy8Hqci
oLLTo79E+CTkZQpEzVu8aSHzZ/ARbcWapYhegdBmQdEdIHlCgInynh29OGwYsoD1
sT9SF0Ettw9l+a7rpYKF0dQodQD6/LJPtB8FTQwyAPjpHf6KcR3vECwI5cMDBynJ
xWEvZnLnv8bjqEZVbTGnnZmaJnBkIAkzYtTQlzVB6WxQkK518pYpC1eatGp5whOd
wewKuTWYGGWOUSPq+TcNlNYPEh1aiZ7Qp8k2ZObv9SHCQXDRxfdeNxyE04cPW8Km
nqo=
-----END CERTIFICATE-----
Generated at Sat Apr 13 17:22:20 2024 by rpki-client on console.sobornost.net