Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FZbomuvRIUbJmYAtJ1mb0JpP7tw.roa
File: FZbomuvRIUbJmYAtJ1mb0JpP7tw.roa (raw, json)
Hash identifier: PDCF7yZ5f6ulNo1t3I7MguPhuDTJdEMCIWHoDAVBM4k=
Subject key identifier: 15:96:E8:9A:EB:D1:21:46:C9:99:80:2D:27:59:9B:D0:9A:4F:EE:DC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE62BEFAE3359F810863464FDD0D48205
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FZbomuvRIUbJmYAtJ1mb0JpP7tw.roa
Signing time: Sun 07 Jan 2024 23:04:48 +0000
ROA not before: Sun 07 Jan 2024 23:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:e62b:6668/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 07 Jan 2024 23:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e6:2b:ef:ae:33:59:f8:10:86:34:64:fd:d0:d4:82:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 7 23:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1596e89aebd12146c999802d27599bd09a4feedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:7e:5a:37:c9:63:75:21:d2:76:90:cd:d7:
c4:c8:85:1b:f9:72:a5:3f:27:35:bf:c4:d2:0e:63:
3b:77:a7:e5:4e:fc:e8:b9:33:d7:2f:ca:1b:dc:d0:
2b:85:58:a1:e6:d6:a2:7e:ee:42:6d:e1:33:f5:ae:
57:48:02:58:22:03:21:9b:f5:f2:7d:6d:cf:16:42:
88:7c:a8:31:f4:cd:50:35:8e:53:6b:50:82:47:13:
4c:ed:c0:aa:36:dc:3a:73:24:f3:6e:a7:9e:47:35:
c6:d0:0f:c0:75:0b:7b:4c:30:59:50:a5:f9:bb:fa:
c0:42:09:15:42:df:f8:11:d7:6d:5f:e8:e3:88:bf:
d3:6d:19:92:cd:f7:cd:eb:aa:26:d8:ec:e9:2c:f2:
f3:f7:fc:46:71:b9:f2:21:99:ce:b4:c6:28:b5:3a:
99:6c:81:cc:da:64:05:31:99:14:ae:f8:28:a8:67:
b5:d4:93:be:c6:0c:69:42:dc:dd:27:4e:36:f3:c5:
e5:64:59:60:a8:f2:10:cf:cb:66:ca:b1:56:a7:70:
fa:1f:4a:06:87:eb:1b:e0:ae:c9:cf:ae:6a:61:05:
85:60:23:b5:3c:b9:d5:81:3d:ca:0b:18:44:dd:72:
ff:6b:df:04:61:d6:2d:b6:0e:8e:78:9e:0f:bf:98:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:96:E8:9A:EB:D1:21:46:C9:99:80:2D:27:59:9B:D0:9A:4F:EE:DC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FZbomuvRIUbJmYAtJ1mb0JpP7tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:ba:88:9c:fb:be:20:54:63:61:4e:b5:03:ab:e5:6b:1a:2f:
9c:28:bf:a3:65:45:c5:bb:53:91:33:25:3c:ea:64:b2:72:5f:
b8:08:c4:65:d0:37:b7:8b:5b:21:0d:17:13:6d:30:3a:13:b5:
a3:47:56:ed:bc:9b:05:c3:f8:11:28:fc:af:a4:36:f7:9e:f5:
e7:6d:0e:4e:f8:91:b0:9e:ba:0a:cc:08:fc:37:6f:d1:03:d9:
90:db:f9:1b:ce:76:30:fc:a9:24:32:6e:d3:37:f3:11:10:01:
7d:30:52:e4:c2:16:df:30:1f:0e:56:f7:f1:f8:55:7b:42:7d:
83:20:64:5a:73:5e:04:17:fc:4b:62:20:7e:29:92:8c:a0:ee:
47:5e:ed:cd:ed:2e:35:4a:a1:64:c8:db:95:c8:f2:e3:c5:2e:
49:e7:4d:bb:3b:54:a9:da:64:3f:be:ea:6c:1f:7d:c2:ec:f6:
25:fc:ee:98:9f:a8:c9:52:f4:57:ef:7b:f6:f8:8c:29:d1:cb:
e4:d6:76:dd:61:bb:50:62:b3:33:76:e3:da:44:f8:19:23:a3:
bf:aa:72:12:33:2a:7d:76:e7:4f:fe:19:fb:76:93:01:f8:3f:
1a:67:2e:34:84:74:1c:5d:6b:93:bf:30:62:6f:bd:5a:87:2f:
eb:2c:69:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 01:47:09 2024 by rpki-client on console.sobornost.net