Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/K5sCa0oNKpxn27XTQ-68id0rj4Y.roa
File: K5sCa0oNKpxn27XTQ-68id0rj4Y.roa (raw, json)
Hash identifier: amg094QovFtRzc1qisPUGkt8FB2W9D/Fdd7wT02lrDs=
Subject key identifier: 2B:9B:02:6B:4A:0D:2A:9C:67:DB:B5:D3:43:EE:BC:89:DD:2B:8F:86
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E032B3B265173BB5268DDB9B51DCBA2FA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/K5sCa0oNKpxn27XTQ-68id0rj4Y.roa
Signing time: Sun 03 Mar 2024 07:15:48 +0000
ROA not before: Sun 03 Mar 2024 07:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 03 Mar 2024 08:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:03:2b:3b:26:51:73:bb:52:68:dd:b9:b5:1d:cb:a2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 07:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b9b026b4a0d2a9c67dbb5d343eebc89dd2b8f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:d4:5f:51:34:57:77:15:74:b6:34:b7:61:
a8:08:a5:c8:4d:28:62:78:48:01:08:cf:6a:10:fa:
d8:7c:d7:35:cb:c2:76:b7:98:c3:bf:b5:06:f1:6c:
60:69:fe:73:f2:1c:6f:19:e5:c0:db:cf:22:ad:59:
e6:44:96:31:f4:0b:e9:c8:10:42:a6:85:e7:3b:e5:
01:8b:67:b7:6a:b3:ba:8a:52:7c:d1:6d:3d:14:5f:
2d:37:b0:d4:39:a7:8e:5a:d0:22:bf:5c:d0:0f:b1:
67:6c:72:95:c9:7f:f7:7b:03:c3:b9:12:79:aa:40:
3c:a4:1d:4b:95:f3:18:d1:89:ee:2d:cf:d3:c4:82:
60:d4:49:88:63:15:59:a5:df:44:31:de:99:64:1e:
09:e9:59:c2:ef:91:a3:84:89:b6:cc:29:9c:c4:d5:
c4:d3:a7:c6:66:60:f8:29:5a:b2:d4:41:b9:8b:4c:
9e:a6:ed:27:90:fd:03:85:f8:a9:9e:e6:4a:14:9b:
17:92:24:f9:88:c5:46:56:66:c0:3d:28:8e:e4:c0:
27:22:7f:aa:b2:e0:35:fa:a3:01:8d:de:c9:df:fc:
c0:28:73:a7:8e:47:b3:24:ac:2e:0d:bc:75:31:77:
a4:57:77:de:90:cf:e8:cf:78:1d:4f:3f:58:04:5f:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:02:6B:4A:0D:2A:9C:67:DB:B5:D3:43:EE:BC:89:DD:2B:8F:86
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/K5sCa0oNKpxn27XTQ-68id0rj4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:a3:5c:f2:b6:07:98:fa:cf:24:58:38:9c:30:13:5b:54:84:
a7:5d:ae:cf:b6:c7:82:90:aa:e3:50:ce:8c:ce:b2:39:cc:8d:
46:c8:3c:db:65:20:98:56:fa:3e:b0:09:26:00:0d:12:14:c3:
60:80:84:49:5b:c5:93:fd:48:f3:10:cf:f6:61:ce:b7:08:47:
68:41:6a:00:ff:92:25:4e:62:c8:47:0d:dd:a6:cf:80:5e:c8:
5d:21:41:27:12:c0:f3:b8:ff:df:a8:b6:83:58:35:c4:12:8b:
50:fd:9e:db:62:27:5d:e6:fd:8a:7e:3a:e9:d2:39:2e:2c:3c:
f2:ad:7d:27:0c:2a:19:ec:00:f1:f6:02:82:56:c9:85:f9:1d:
95:14:78:ab:81:d0:fa:46:7c:5a:49:c7:df:5f:c4:ea:76:40:
0d:0c:17:98:78:0b:3c:80:15:e3:25:ed:7d:d4:7e:38:31:5b:
5f:65:01:e8:99:f4:a1:ab:4f:08:3e:1f:d3:95:8c:31:cf:de:
4c:ad:69:6c:1c:b9:5f:13:11:bb:57:3a:c4:04:c3:82:f9:60:
f1:ed:cb:bb:4f:0d:e7:95:57:8e:9f:65:17:c7:fc:c7:bd:e8:
31:57:a1:90:83:a1:ee:b2:2b:51:38:b4:8f:00:8b:ca:15:3a:
0b:af:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 11:55:57 2024 by rpki-client on console.sobornost.net