Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GdWFurOghplPv1esnJI_MmBobts.roa
File: GdWFurOghplPv1esnJI_MmBobts.roa (raw, json)
Hash identifier: y1dUQU3PSYMEQsbQ3gZTsK7TMMLDuX9pJp64RSZ7nxY=
Subject key identifier: 19:D5:85:BA:B3:A0:86:99:4F:BF:57:AC:9C:92:3F:32:60:68:6E:DB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E100A680CFEFA8A0D992B344721488F78
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GdWFurOghplPv1esnJI_MmBobts.roa
Signing time: Tue 05 Mar 2024 19:15:01 +0000
ROA not before: Tue 05 Mar 2024 19:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 05 Mar 2024 20:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:10:0a:68:0c:fe:fa:8a:0d:99:2b:34:47:21:48:8f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 5 19:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19d585bab3a086994fbf57ac9c923f3260686edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:e6:cb:c0:51:c3:15:c0:39:31:86:2a:b3:
d5:07:e3:8f:82:1b:90:2e:b9:8f:79:33:3c:c4:79:
1a:dd:91:9d:fc:55:21:21:80:9f:03:f4:3e:2b:34:
75:44:2a:22:a0:61:fd:9a:1a:dc:7e:f0:1f:84:02:
90:79:f5:47:b5:8a:7e:8a:dc:2e:80:24:96:8d:cc:
e2:27:51:1d:ab:1c:2c:74:1a:2e:99:8d:56:fa:d6:
e2:fb:a9:92:fe:1f:dd:c3:99:ac:69:40:da:fd:d6:
a4:7a:77:37:42:9e:d9:7f:67:46:9d:8d:cd:e5:ed:
2c:ac:02:42:74:d1:d8:2f:4a:be:2f:a5:a4:6d:4d:
92:51:66:e6:99:b7:ce:98:6f:51:33:d2:b9:71:b6:
08:d6:55:ab:28:6b:e6:7d:e4:7a:2e:8b:bd:63:d5:
dd:59:f6:85:d3:f0:71:40:11:03:e2:5e:b7:6a:b2:
fb:4b:1a:c1:af:72:eb:ef:8f:44:ec:42:7b:2a:2e:
c5:d3:42:1b:1a:87:90:1a:ae:b6:f1:04:a9:b4:c7:
63:6e:06:ee:8a:1b:1d:af:3c:ef:c8:c0:03:c2:fd:
bb:e5:58:0e:22:2d:a5:86:65:58:0b:67:3e:6d:66:
ef:87:10:02:34:d0:94:b1:16:8f:a7:15:d5:e3:a6:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D5:85:BA:B3:A0:86:99:4F:BF:57:AC:9C:92:3F:32:60:68:6E:DB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/GdWFurOghplPv1esnJI_MmBobts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:65:2d:62:39:aa:a2:ef:06:d4:39:0b:33:87:2c:32:f8:e0:
b4:bd:29:67:1f:71:9e:99:cc:bc:46:07:b8:4e:e9:ab:4d:37:
da:57:55:b9:99:a5:89:0e:84:63:8c:0d:ec:d2:37:cf:74:e5:
d4:00:31:19:a1:84:31:db:ab:4b:46:11:af:43:f6:4e:92:64:
42:9f:d4:3c:3f:0e:c8:26:ff:c9:67:5e:cb:36:6b:50:bd:69:
02:20:c4:4b:c7:24:df:e8:ce:23:72:e7:89:e8:f0:39:1d:e7:
7a:38:94:e2:74:11:fd:e5:80:ac:a2:c0:99:c8:04:4a:c0:5c:
c8:40:78:e4:67:fa:8c:31:40:d4:c8:ea:fe:c1:44:2c:95:00:
ef:f1:d6:1c:85:2e:f2:f9:21:5e:f5:22:b1:bc:33:e4:1f:8d:
49:5a:4e:e8:5f:35:64:5a:19:a6:91:48:7b:53:db:dc:ff:cc:
d2:3f:38:5b:a3:f3:51:37:fb:2a:66:55:96:31:45:9c:9f:ed:
84:04:16:ad:d7:0e:63:16:ee:89:68:ad:3e:54:57:18:ff:66:
1c:84:67:6c:56:28:87:08:92:70:62:9c:86:1c:ce:36:30:1b:
3f:fe:e6:7a:f1:ac:68:5a:4a:85:c3:c7:99:65:3c:30:b6:b7:
d5:e8:5c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 02:08:07 2024 by rpki-client on console.sobornost.net