Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FoYp-6AIsdKI5wyGJfaQ9zjuzWk.roa
File: FoYp-6AIsdKI5wyGJfaQ9zjuzWk.roa (raw, json)
Hash identifier: 8W49HMT2nCz25IE6vb5gKjifIFhBpHE+lUhyuKoPPnM=
Subject key identifier: 16:86:29:FB:A0:08:B1:D2:88:E7:0C:86:25:F6:90:F7:38:EE:CD:69
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE740ADDE07B1D496B3350DCAA979470A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FoYp-6AIsdKI5wyGJfaQ9zjuzWk.roa
Signing time: Mon 08 Jan 2024 04:07:04 +0000
ROA not before: Mon 08 Jan 2024 04:07:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:e73e:3df1/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 08 Jan 2024 04:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:40:ad:de:07:b1:d4:96:b3:35:0d:ca:a9:79:47:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 8 04:07:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=168629fba008b1d288e70c8625f690f738eecd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:c6:90:fc:f5:7f:9b:c2:81:ed:0d:3f:4f:
ae:3d:98:87:0f:ae:70:70:b1:a5:e2:52:4e:aa:e2:
d8:84:af:35:49:df:a5:f3:c5:8e:f9:a9:03:80:c2:
d6:cd:76:c5:e4:c9:c5:43:38:af:97:8d:a4:9b:41:
46:bf:7f:29:e9:40:3e:d5:64:77:df:5d:9b:ef:20:
3a:d3:78:10:69:da:03:8d:42:f0:67:cb:70:23:79:
a6:78:ca:9f:9f:99:a3:f8:55:ab:d0:bf:1b:02:f0:
3e:05:fa:e9:39:e8:06:b4:db:08:33:b8:b6:87:de:
86:31:e1:5b:8c:12:69:78:95:97:86:52:be:25:d7:
4d:ea:3f:60:ee:2d:ff:27:9f:a0:21:bc:b0:44:7b:
76:eb:38:aa:6e:08:d7:23:28:63:b6:d2:16:98:0f:
9b:b7:a9:7f:fd:7a:b2:fa:07:8d:b6:a5:c1:f0:90:
05:2a:48:65:ac:97:35:95:09:aa:99:cc:2b:5e:e3:
1a:2b:f6:0e:8b:be:dd:fb:af:ca:16:37:76:bb:cc:
c1:4f:94:a3:79:0d:7f:18:f8:09:3c:5b:30:8e:af:
81:cf:0a:73:9d:40:33:18:f1:35:fa:b9:dc:fb:5b:
13:c5:f3:ed:7e:d4:fd:12:6e:45:bd:1e:0c:ce:ad:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:86:29:FB:A0:08:B1:D2:88:E7:0C:86:25:F6:90:F7:38:EE:CD:69
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/FoYp-6AIsdKI5wyGJfaQ9zjuzWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:92:32:b4:f0:ba:1b:84:db:aa:74:c1:8f:b5:b2:96:16:9c:
0f:32:9c:c3:56:8f:9b:7c:b8:a3:0c:93:4b:73:4b:da:a9:38:
a4:a6:9b:bb:26:a0:39:83:f0:5e:bf:3f:80:e2:53:83:02:94:
ba:c4:cd:b4:a5:4c:89:fd:33:4b:69:99:bf:f5:c3:53:79:ce:
56:ce:01:82:ea:68:24:79:d4:12:ff:85:e3:d2:7f:e2:b6:c6:
6c:c9:6d:66:5d:ff:ae:6c:3a:93:7c:9d:69:7e:e6:9d:37:cf:
2e:ec:4e:70:97:ed:fc:6d:5c:61:2a:c7:04:36:a2:cc:48:49:
76:bc:55:28:37:3b:91:ae:0b:2a:51:9f:5f:c8:3a:4d:3a:3f:
71:a9:fd:bb:92:1c:c5:d5:84:f3:41:11:01:29:b4:dc:e6:b2:
77:81:0d:06:fc:5d:67:fd:8a:4d:5d:a5:77:d3:db:a5:ef:f7:
ec:12:5c:43:93:30:74:82:fe:75:df:5d:aa:76:a1:98:fb:99:
b1:89:64:03:17:82:36:1b:e5:67:b1:d4:cc:09:7a:8d:f6:0c:
2c:01:91:f2:82:bd:42:7b:a0:6f:4e:b9:da:bb:d4:bd:77:fb:
90:24:a3:5e:25:4b:81:c9:2c:b6:e6:c2:d8:48:94:4f:17:73:
4d:77:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 06:41:13 2024 by rpki-client on console.sobornost.net