Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KH3ZlIPegUoj71eyneUzTj0LY-Y.roa
File: KH3ZlIPegUoj71eyneUzTj0LY-Y.roa (raw, json)
Hash identifier: k5tAjzhYPA5qu19gu88LYxsGXYnT+Vuj3xFQOSaqpSc=
Subject key identifier: 28:7D:D9:94:83:DE:81:4A:23:EF:57:B2:9D:E5:33:4E:3D:0B:63:E6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6BA739C2F519FB793D37C025FAF63E99
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KH3ZlIPegUoj71eyneUzTj0LY-Y.roa
Signing time: Sat 23 Mar 2024 14:11:45 +0000
ROA not before: Sat 23 Mar 2024 14:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 23 Mar 2024 15:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6b:a7:39:c2:f5:19:fb:79:3d:37:c0:25:fa:f6:3e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 14:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=287dd99483de814a23ef57b29de5334e3d0b63e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:60:4d:b2:8f:b4:f3:2e:63:96:d7:46:39:
00:01:53:1f:ca:34:bb:c8:76:fd:0c:96:e7:0c:d8:
e0:80:32:31:1f:f8:56:5f:15:d0:9d:00:96:84:3f:
62:89:d7:b4:37:c4:4e:b9:0c:73:b7:d7:b5:ef:0b:
53:67:6f:eb:27:35:d9:77:8e:ff:98:7e:52:ef:de:
45:cc:f5:a9:cd:21:25:15:e2:8a:97:68:fd:d2:25:
aa:ab:e7:05:25:15:e5:ce:99:2f:79:ba:63:71:16:
db:65:d6:22:df:cc:09:c5:72:6a:94:07:74:8f:33:
60:30:ab:4c:6b:cb:68:c3:c4:82:20:5e:ca:97:9c:
05:b8:29:d4:5f:e9:0e:bc:d9:04:a8:e7:69:26:55:
a0:ba:fa:a3:de:f1:ed:8d:0a:d3:a0:b2:e0:33:b5:
23:1f:5f:20:b3:a7:3e:09:a2:16:7e:04:e6:4b:3d:
4f:5f:37:91:c9:ce:7d:5e:f3:82:02:02:74:e2:d8:
83:1d:81:11:e8:07:17:53:71:2c:62:2f:83:87:85:
7f:27:5f:55:6e:e7:77:09:7b:75:c2:56:38:f5:60:
d6:8b:9a:83:5a:a3:ec:b1:46:1c:62:dd:21:a8:77:
36:c2:fd:93:12:52:1b:39:37:94:5d:4c:30:06:ea:
32:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:D9:94:83:DE:81:4A:23:EF:57:B2:9D:E5:33:4E:3D:0B:63:E6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KH3ZlIPegUoj71eyneUzTj0LY-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:1e:6b:2f:48:7d:51:5e:91:a2:dc:ae:74:19:ec:71:5b:5a:
57:f2:c4:e4:bc:9b:bb:0c:97:21:40:86:70:d9:62:1a:b3:76:
80:40:a2:11:97:be:fe:97:9b:c6:13:27:13:33:70:bf:a9:c8:
d6:1d:d9:29:a9:8e:81:59:ac:fa:48:06:62:fb:c1:ee:c3:2d:
bc:6e:0d:55:79:a3:56:e2:71:1c:ca:e3:36:f5:8f:e4:9b:12:
20:dd:a2:ef:b0:87:8d:92:00:e7:3f:9a:e8:5d:09:f3:e5:c9:
e1:9b:f1:ab:97:95:06:7d:37:af:39:db:12:d1:d5:b2:fc:d4:
98:ad:2b:16:b2:d9:24:27:15:86:80:0b:88:c3:15:43:13:81:
9d:77:a5:b3:4f:96:02:71:84:16:6c:d1:ac:ca:8f:b3:2e:fc:
d8:47:a0:b5:29:47:cf:81:b7:28:03:70:b3:5e:63:77:6f:65:
07:11:e7:9e:87:3c:93:8d:ad:00:59:ef:f6:8a:bb:1a:9e:b3:
b2:9f:ec:6d:2f:1a:5e:02:93:fe:71:93:f5:53:59:a0:d6:28:
e3:38:e8:67:c3:7a:c9:09:6b:17:eb:4f:53:68:e4:3d:e0:dc:
7f:38:a7:00:d6:79:18:c9:3c:40:9f:9b:7a:07:be:4f:5a:f8:
eb:09:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 23 21:06:09 2024 by rpki-client on console.sobornost.net