Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GVKuwrOxgQeFE6q9tZMk3TkC0zQ.roa
File: GVKuwrOxgQeFE6q9tZMk3TkC0zQ.roa (raw, json)
Hash identifier: pHqXJXjymBXniDVh0sNl/VEMkysSB3urQFvh1NfzGZ0=
Subject key identifier: 19:52:AE:C2:B3:B1:81:07:85:13:AA:BD:B5:93:24:DD:39:02:D3:34
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E7548BE116A4F028EB360E66D770E32EF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GVKuwrOxgQeFE6q9tZMk3TkC0zQ.roa
Signing time: Mon 25 Mar 2024 11:04:45 +0000
ROA not before: Mon 25 Mar 2024 11:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:7548:6c29/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 25 Mar 2024 11:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:48:be:11:6a:4f:02:8e:b3:60:e6:6d:77:0e:32:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 25 11:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1952aec2b3b181078513aabdb59324dd3902d334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:28:61:43:ca:49:51:09:9d:d5:cf:42:04:06:
f2:0a:03:ca:51:c9:16:92:0a:95:57:b9:fa:a7:80:
66:72:9e:9e:3b:ed:57:d0:39:e0:6d:69:37:6f:c4:
b6:88:8b:b2:cf:bd:2f:c9:5d:94:76:d7:2a:e8:37:
e6:83:80:84:25:33:23:05:ba:fd:93:6b:8c:ab:55:
99:bb:db:09:ec:72:79:06:40:d0:19:90:c3:a7:5f:
db:17:08:d7:11:33:e1:f9:d6:58:7e:44:7a:24:07:
81:88:2f:27:fb:40:d0:61:4d:28:7b:cd:93:7c:2a:
b9:67:7c:3c:fe:90:5b:6a:89:bc:20:53:84:91:18:
4a:4d:fd:6f:2e:78:8e:ca:56:43:6f:0f:57:a7:2b:
05:7e:98:e6:2f:18:71:a3:1d:9e:84:d6:4b:dd:fe:
f6:8d:7f:cb:e3:e1:22:bc:d4:71:9c:c4:60:94:9a:
ad:4b:30:05:5f:6c:49:0a:46:45:99:48:68:24:25:
f4:43:51:99:77:d8:3e:b1:64:e3:69:1c:bb:14:61:
63:5f:a3:5e:ec:2f:30:2e:a1:7c:9b:ff:0a:27:98:
66:ef:1c:83:1c:c6:26:27:10:fe:45:4a:6a:ef:c5:
f6:12:3c:b4:71:b2:60:68:47:6d:d9:69:62:c8:3f:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:52:AE:C2:B3:B1:81:07:85:13:AA:BD:B5:93:24:DD:39:02:D3:34
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GVKuwrOxgQeFE6q9tZMk3TkC0zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:41:3a:5e:7d:9e:a7:a7:eb:ce:12:18:33:ae:e4:b3:ad:18:
9b:4c:f1:d3:d8:f6:2f:f6:2f:22:26:f1:fd:c2:5f:5d:7b:f9:
70:23:52:24:b7:7f:36:9b:42:72:a7:0e:11:a1:dd:17:97:69:
01:cb:ee:f2:e8:75:24:44:7a:25:fa:74:db:8a:d3:29:c6:54:
89:5a:1c:9c:5d:64:70:2e:a2:1a:1a:51:5e:e2:f8:0a:da:d7:
62:bf:67:0a:47:e1:ab:00:78:ca:04:61:51:7f:09:94:37:8b:
25:18:87:63:6b:48:33:ca:50:61:c4:fa:9a:24:16:07:c0:7b:
2f:38:1e:3e:1f:3a:04:e2:d8:48:d5:b3:d0:4d:3e:50:c8:87:
74:19:23:c6:47:86:35:fd:67:32:81:39:cc:0c:d5:06:5a:31:
5e:4d:b7:1a:eb:54:6b:04:3d:cc:c1:be:18:bd:36:66:19:43:
24:2c:3a:66:a7:0d:10:90:07:9d:f2:b6:fb:3a:56:27:3c:1b:
07:f4:65:95:07:fb:9b:f0:96:2b:07:09:22:c6:d0:55:97:80:
07:df:e0:73:4a:e3:89:71:d6:7e:01:d9:67:5a:c8:35:f5:eb:
26:dc:5e:81:21:21:a3:cf:89:37:44:1f:8e:0f:e2:2a:84:db:
40:f5:68:30
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY51SL4Rak8CjrNg5m13DjLvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzI1MTEwNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTUyYWVjMmIzYjE4MTA3ODUxM2FhYmRiNTkzMjRkZDM5MDJkMzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhihhQ8pJUQmd1c9CBAbyCgPKUckW
kgqVV7n6p4Bmcp6eO+1X0DngbWk3b8S2iIuyz70vyV2Udtcq6Dfmg4CEJTMjBbr9
k2uMq1WZu9sJ7HJ5BkDQGZDDp1/bFwjXETPh+dZYfkR6JAeBiC8n+0DQYU0oe82T
fCq5Z3w8/pBbaom8IFOEkRhKTf1vLniOylZDbw9XpysFfpjmLxhxox2ehNZL3f72
jX/L4+EivNRxnMRglJqtSzAFX2xJCkZFmUhoJCX0Q1GZd9g+sWTjaRy7FGFjX6Ne
7C8wLqF8m/8KJ5hm7xyDHMYmJxD+RUpq78X2Ejy0cbJgaEdt2WliyD8otwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBlSrsKzsYEHhROqvbWTJN05AtM0MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvR1ZLdXdyT3hnUWVGRTZxOXRaTWszVGtDMHpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAZBOl59nqen684SGDOu
5LOtGJtM8dPY9i/2LyIm8f3CX117+XAjUiS3fzabQnKnDhGh3ReXaQHL7vLodSRE
eiX6dNuK0ynGVIlaHJxdZHAuohoaUV7i+Ara12K/ZwpH4asAeMoEYVF/CZQ3iyUY
h2NrSDPKUGHE+pokFgfAey84Hj4fOgTi2EjVs9BNPlDIh3QZI8ZHhjX9ZzKBOcwM
1QZaMV5NtxrrVGsEPczBvhi9NmYZQyQsOmanDRCQB53ytvs6Vic8Gwf0ZZUH+5vw
lisHCSLG0FWXgAff4HNK44lx1n4B2WdayDX16ybcXoEhIaPPiTdEH44P4iqE20D1
aDA=
-----END CERTIFICATE-----
Generated at Mon Mar 25 17:36:30 2024 by rpki-client on console.sobornost.net