Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EroY3m_emMb4bYG2Rv7yELvfaKE.roa
File: EroY3m_emMb4bYG2Rv7yELvfaKE.roa (raw, json)
Hash identifier: HoyPpkHqsov39FgUEs3c8bv2nc7JM7zD4RDzd1VmJho=
Subject key identifier: 12:BA:18:DE:6F:DE:98:C6:F8:6D:81:B6:46:FE:F2:10:BB:DF:68:A1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E95787D04A71BD2D8DD612C911F734DF4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EroY3m_emMb4bYG2Rv7yELvfaKE.roa
Signing time: Sun 31 Mar 2024 17:04:45 +0000
ROA not before: Sun 31 Mar 2024 17:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
2001:67c:64:ffff:0:18e:9578:2106/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 31 Mar 2024 17:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:95:78:7d:04:a7:1b:d2:d8:dd:61:2c:91:1f:73:4d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 17:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12ba18de6fde98c6f86d81b646fef210bbdf68a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:0b:df:fc:9d:9a:82:c6:98:cb:b5:13:fd:
b5:1e:ca:ea:31:e8:eb:1d:33:41:3b:c9:78:9d:a0:
65:a0:cc:0b:79:22:b0:41:18:bc:f4:dc:72:2a:b4:
00:0f:6b:61:54:15:07:22:8a:60:e8:71:00:f9:c2:
1f:18:2c:20:30:c8:1f:bf:23:0e:2f:60:4d:cd:32:
ea:9e:9b:29:dd:d8:40:29:0c:67:6f:21:e5:11:80:
6d:97:d7:a2:1f:80:a9:8a:69:25:d1:0c:51:04:64:
a0:bc:4a:a9:45:42:38:68:5e:73:cf:99:85:d5:ea:
d5:d9:49:cc:da:79:8a:10:b5:eb:7c:8e:ba:94:94:
3b:71:02:36:35:08:55:88:5c:57:c4:62:16:f0:36:
2d:60:97:88:ec:70:0f:7f:8b:04:5c:bd:70:a9:7b:
28:c5:e5:04:8b:e1:44:f1:74:1a:0a:1d:86:6d:36:
f9:1e:e8:1e:34:d1:4e:c4:f7:fe:63:4f:aa:fc:81:
c6:60:92:7e:b4:70:42:86:84:6b:bf:05:7e:b8:61:
e8:68:4c:10:07:95:2a:7d:bf:44:c9:54:b3:d1:73:
74:ab:78:43:b6:f9:0e:0b:b6:9f:e8:5e:f4:da:20:
a4:22:73:d1:94:3e:f0:9b:47:d6:84:15:a8:04:ec:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BA:18:DE:6F:DE:98:C6:F8:6D:81:B6:46:FE:F2:10:BB:DF:68:A1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/EroY3m_emMb4bYG2Rv7yELvfaKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:25:f0:5a:80:ae:b4:42:28:0c:79:08:3c:88:8a:40:2a:1c:
46:3b:0b:10:25:85:ff:07:4e:72:1a:6d:3c:52:71:af:3f:91:
93:fd:fb:ed:ba:c0:6f:67:71:89:0e:7c:e9:97:fa:92:c9:bd:
a5:f3:b2:55:cf:d5:a7:8c:11:71:d8:24:b4:37:e5:c3:34:fe:
66:cd:99:2a:09:15:6d:48:18:04:44:bf:71:79:01:a4:06:54:
9e:ef:1b:a8:98:82:1b:41:db:06:21:b9:83:da:8c:48:4e:d4:
fa:ea:93:88:73:28:72:e0:de:94:4f:17:77:98:b8:11:4e:2d:
d4:77:fe:14:42:05:14:ee:59:64:fb:80:74:fe:c4:26:40:0c:
2e:f9:65:c7:f4:70:55:1c:79:4c:0c:92:50:4a:4f:94:4b:f1:
54:69:f6:a6:95:af:88:e4:7c:71:dc:3b:57:20:db:ca:5a:29:
1c:0c:72:0c:e3:bf:e7:ad:b8:05:e1:25:af:10:8b:f1:ce:ed:
1a:c7:b8:5f:d4:8f:ae:d1:0c:f1:94:1d:a1:70:91:22:44:b5:
c4:4a:c7:8f:d8:73:62:0e:40:e3:7d:24:09:de:8c:81:3e:7c:
43:18:96:2a:3c:9b:27:e0:e8:d8:6d:30:f6:b5:a7:27:e6:46:
27:f6:31:c0
-----BEGIN CERTIFICATE-----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Generated at Mon Apr 1 00:22:52 2024 by rpki-client on console.sobornost.net