Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HqCQkidwmmvNeSTHU9JrUa8vROA.roa
File: HqCQkidwmmvNeSTHU9JrUa8vROA.roa (raw, json)
Hash identifier: fvontFSDqcFX4WAWVxgEnQGK//aW7EqDzhpoieFwoC4=
Subject key identifier: 1E:A0:90:92:27:70:9A:6B:CD:79:24:C7:53:D2:6B:51:AF:2F:44:E0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2F5A8466BD170E381E29F74842D460AC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HqCQkidwmmvNeSTHU9JrUa8vROA.roa
Signing time: Mon 11 Mar 2024 21:10:45 +0000
ROA not before: Mon 11 Mar 2024 21:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 11 Mar 2024 22:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2f:5a:84:66:bd:17:0e:38:1e:29:f7:48:42:d4:60:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 11 21:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ea0909227709a6bcd7924c753d26b51af2f44e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:bb:8f:91:66:9a:51:5a:17:7a:13:1d:62:
ab:5e:e8:43:05:89:29:ab:08:4e:1d:3f:42:96:86:
94:34:f7:79:27:97:aa:f6:32:51:02:8b:9d:4d:64:
75:fa:65:86:40:b5:21:eb:3c:c5:03:7b:8e:d1:6a:
1d:ad:69:ac:da:60:ce:d6:d3:ca:62:0c:d5:39:c1:
cc:0b:98:d4:a4:aa:4d:38:60:36:d6:19:15:68:8f:
4b:bc:3d:6a:3a:c9:a5:b6:a6:93:b1:de:20:e5:4d:
8d:74:b1:b8:73:4a:6b:dc:11:f1:e4:c8:ec:0d:74:
6e:0d:63:51:9e:f8:1c:3b:c2:cc:75:63:b0:85:e6:
26:e8:dc:f5:77:67:bd:4f:f6:74:08:f3:f1:83:3d:
3e:ef:89:0c:4d:e8:91:54:9b:39:d7:2b:66:53:99:
b3:e2:b4:66:5e:e0:82:53:14:82:77:8d:8f:93:3c:
d1:c5:d4:ad:ff:de:2c:23:d8:23:13:d5:2c:96:3e:
55:37:c1:19:9b:5c:a3:fd:c3:26:77:08:29:91:ae:
88:c1:98:45:82:eb:2e:a6:56:08:94:8b:54:a2:ec:
87:10:a5:c1:de:f0:80:d8:e8:8f:ef:1a:1c:bf:37:
5f:14:e1:f1:af:13:cd:39:9e:02:1a:7a:b5:c7:30:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:90:92:27:70:9A:6B:CD:79:24:C7:53:D2:6B:51:AF:2F:44:E0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/HqCQkidwmmvNeSTHU9JrUa8vROA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:fd:d8:7f:52:8d:2e:da:f8:9d:ad:97:c4:0c:aa:fd:da:84:
94:5d:0b:cf:2e:30:3c:83:a5:7c:00:9b:52:df:b0:6c:37:c4:
69:a3:a9:ae:a4:92:9d:35:4d:5c:7f:30:a9:0a:ed:09:17:73:
33:70:0e:f0:25:83:a7:d5:b2:4d:e7:ae:ef:ce:35:4c:21:1d:
c3:36:3d:74:ec:9f:d0:44:54:be:6b:aa:46:ce:2d:81:5e:1f:
3a:ec:50:cb:ce:12:1f:a2:81:81:b7:8a:6c:1c:42:5f:de:8b:
8a:ae:08:b8:a8:98:cb:e6:cd:6e:e4:fe:8b:b7:b0:75:f7:f5:
d1:82:cf:15:95:0c:a9:35:91:13:84:b3:04:81:0a:00:aa:cb:
bb:d5:cd:e4:21:f4:75:56:03:8b:09:31:cb:f4:2e:f2:e8:f1:
cc:0d:84:03:d7:3d:77:3e:46:ab:d0:70:17:1d:75:6a:cf:dd:
88:36:14:38:ee:ff:86:62:6b:93:e0:74:0e:8b:93:a0:51:b6:
fd:39:44:c3:3e:ed:17:42:67:c9:70:cc:bd:0c:00:51:e4:96:
d4:8a:d6:51:28:d0:5d:c9:80:75:d0:6a:b0:ef:11:33:c8:48:
48:7e:8d:04:e1:83:c7:13:da:da:93:81:00:d2:30:45:41:94:
d0:70:ba:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 05:00:45 2024 by rpki-client on console.sobornost.net