Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/J4fGM-gEuQ0pxS7oNNm3gX_ZvuM.roa
File: J4fGM-gEuQ0pxS7oNNm3gX_ZvuM.roa (raw, json)
Hash identifier: JRHKTkFCAEAUl4LdWrRo6lrQrjOVcI3qeEZVGoyF8mE=
Subject key identifier: 27:87:C6:33:E8:04:B9:0D:29:C5:2E:E8:34:D9:B7:81:7F:D9:BE:E3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E66B6E14D71EC6103379FA107D0FBE71F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/J4fGM-gEuQ0pxS7oNNm3gX_ZvuM.roa
Signing time: Fri 22 Mar 2024 15:10:44 +0000
ROA not before: Fri 22 Mar 2024 15:10:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 22 Mar 2024 16:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:b6:e1:4d:71:ec:61:03:37:9f:a1:07:d0:fb:e7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 22 15:10:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2787c633e804b90d29c52ee834d9b7817fd9bee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:17:ec:d2:a9:bb:5d:bf:52:72:65:74:0b:d4:
f2:b3:c4:c9:7d:b9:69:b1:7a:9d:04:df:15:12:df:
8a:70:2e:34:e3:d3:98:9e:85:ab:03:82:99:98:c9:
90:86:fd:ca:b9:76:ff:72:9e:3d:83:4d:e9:00:b8:
98:ec:b0:b0:f7:87:72:0d:b1:29:0f:83:00:b3:26:
e2:a9:7d:76:f0:90:38:29:5d:9c:d3:d4:89:a2:41:
be:53:1c:b3:56:2f:25:8d:b5:b8:f9:b7:09:da:8a:
cf:b2:80:33:24:9c:fe:19:f4:d7:50:56:12:d4:5e:
45:fa:dd:3b:c2:0a:cf:b1:5c:7b:f3:5d:b8:73:36:
6e:63:38:7e:f0:b1:c2:c3:8e:83:81:ce:45:de:b2:
1b:6c:ac:2f:73:a5:50:e5:ef:6d:ea:07:75:2b:e5:
51:a2:bc:a2:5a:25:0c:a7:50:4e:32:72:e6:65:30:
6a:b5:c2:f9:2e:ab:57:fa:bf:24:13:12:34:9c:1a:
b7:99:b3:26:49:b5:af:4e:c2:94:a0:2d:5e:93:7d:
44:2a:b6:b4:d8:48:fd:22:cd:e6:80:60:60:c5:bb:
4c:c8:2b:03:3f:a2:66:6b:4a:b0:74:6d:99:2b:c5:
ef:d5:9b:39:6e:0e:4a:53:56:4f:6a:5b:aa:b5:50:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:87:C6:33:E8:04:B9:0D:29:C5:2E:E8:34:D9:B7:81:7F:D9:BE:E3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/J4fGM-gEuQ0pxS7oNNm3gX_ZvuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:e9:3d:38:af:48:a1:a5:15:9f:ec:84:1a:a1:1c:78:f7:0e:
f0:b0:7e:e5:3e:c4:21:b2:13:a9:a7:13:5c:8d:58:66:3c:13:
40:87:83:9a:34:dd:fc:99:3d:82:a0:5d:aa:37:da:15:6f:e5:
6f:a5:5d:5d:77:6d:b8:46:63:b2:66:fb:ab:2a:c4:f6:30:70:
f0:b3:e3:65:b5:ca:9f:91:87:b6:05:14:d7:68:3e:e8:e9:24:
2c:a4:ce:1a:3a:ce:4e:63:e1:f1:60:f4:d9:82:5a:d2:20:af:
46:1a:c2:73:8f:95:68:f8:e8:a0:31:66:75:50:34:33:f0:7e:
79:c3:ab:09:3f:e2:c0:77:f1:8c:3d:b6:ee:36:fc:16:39:82:
fb:ac:de:26:b4:8b:02:86:9d:b4:13:1e:a6:fd:d9:70:a5:dd:
6b:af:d6:85:c6:19:2b:dc:5d:4f:5c:53:e4:c5:fe:40:81:d4:
5d:62:b3:3c:4a:43:1d:f7:93:b8:9d:d2:6f:9b:be:a4:53:5d:
37:f6:74:cb:8f:a9:df:02:04:c3:8b:55:81:6b:04:75:cd:6c:
69:a1:e4:f6:5a:0d:b7:28:10:09:45:9b:5f:8f:23:db:74:07:
df:cd:9e:cc:39:de:01:63:aa:54:ed:06:b4:1f:4a:a8:67:17:
c6:c6:62:54
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5mtuFNcexhAzefoQfQ++cfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzIyMTUxMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzg3YzYzM2U4MDRiOTBkMjljNTJlZTgzNGQ5Yjc4MTdmZDliZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxfs0qm7Xb9ScmV0C9Tys8TJfblp
sXqdBN8VEt+KcC4049OYnoWrA4KZmMmQhv3KuXb/cp49g03pALiY7LCw94dyDbEp
D4MAsybiqX128JA4KV2c09SJokG+UxyzVi8ljbW4+bcJ2orPsoAzJJz+GfTXUFYS
1F5F+t07wgrPsVx78124czZuYzh+8LHCw46Dgc5F3rIbbKwvc6VQ5e9t6gd1K+VR
oryiWiUMp1BOMnLmZTBqtcL5LqtX+r8kExI0nBq3mbMmSbWvTsKUoC1ek31EKra0
2Ej9Is3mgGBgxbtMyCsDP6Jma0qwdG2ZK8Xv1Zs5bg5KU1ZPaluqtVAfqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCeHxjPoBLkNKcUu6DTZt4F/2b7jMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvSjRmR00tZ0V1UTBweFM3b05ObTNnWF9adnVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADrpPTivSKGlFZ/shBqh
HHj3DvCwfuU+xCGyE6mnE1yNWGY8E0CHg5o03fyZPYKgXao32hVv5W+lXV13bbhG
Y7Jm+6sqxPYwcPCz42W1yp+Rh7YFFNdoPujpJCykzho6zk5j4fFg9NmCWtIgr0Ya
wnOPlWj46KAxZnVQNDPwfnnDqwk/4sB38Yw9tu42/BY5gvus3ia0iwKGnbQTHqb9
2XCl3Wuv1oXGGSvcXU9cU+TF/kCB1F1iszxKQx33k7id0m+bvqRTXTf2dMuPqd8C
BMOLVYFrBHXNbGmh5PZaDbcoEAlFm1+PI9t0B9/Nnsw53gFjqlTtBrQfSqhnF8bG
YlQ=
-----END CERTIFICATE-----
Generated at Fri Mar 22 21:41:02 2024 by rpki-client on console.sobornost.net