Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KoR7YxAXWLRI1nSVIVljtDU3Yjc.roa
File: KoR7YxAXWLRI1nSVIVljtDU3Yjc.roa (raw, json)
Hash identifier: bgo07m0H4v9++192KriwV4lBOvcdG/69BFOgLD33wJA=
Subject key identifier: 2A:84:7B:63:10:17:58:B4:48:D6:74:95:21:59:63:B4:35:37:62:37
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6D27BF0392AA39F40B94A31719420478
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KoR7YxAXWLRI1nSVIVljtDU3Yjc.roa
Signing time: Sat 23 Mar 2024 21:11:45 +0000
ROA not before: Sat 23 Mar 2024 21:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 23 Mar 2024 22:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6d:27:bf:03:92:aa:39:f4:0b:94:a3:17:19:42:04:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 21:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a847b63101758b448d67495215963b435376237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4d:c8:d2:5a:2f:8a:79:43:b8:f4:15:c0:f4:
f0:e8:ae:52:ce:26:1d:0c:1d:8d:e7:9a:a5:dc:58:
f0:3f:d5:b8:bd:74:18:96:b3:08:e6:a8:52:ee:01:
11:7e:09:32:89:8a:4c:c7:91:e9:ea:c9:3d:d8:e9:
29:97:ab:1a:0c:33:60:eb:c5:b2:f7:bc:3f:f3:58:
17:a6:e4:09:83:3d:93:e4:2f:1c:0d:c0:08:61:39:
de:41:96:c0:24:34:4b:0c:e6:d2:b3:f4:87:33:0b:
fc:f3:cb:d6:2f:90:58:3b:61:94:f1:6e:8c:e8:f6:
4c:e3:8c:87:e1:02:89:fe:96:36:16:0e:1d:e3:70:
d5:80:76:32:16:90:63:23:4e:60:ad:65:3b:41:b4:
d0:c3:23:cb:f4:be:7f:6b:8d:9c:66:b9:2b:b6:1d:
e8:8e:32:9d:ab:55:62:e1:b9:5e:42:3b:54:86:7f:
ee:22:15:fc:60:15:11:a9:03:ec:fa:1a:1a:23:28:
a5:94:64:51:16:dd:04:3f:e2:4d:5a:6b:f8:5c:b0:
00:b5:b2:cb:62:1f:6a:ca:01:99:38:f6:ae:74:28:
f1:6a:ed:c4:ea:14:cc:b6:02:89:21:5c:d8:09:96:
ec:49:d2:50:75:b9:2c:8e:77:6f:87:90:59:e8:ce:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:84:7B:63:10:17:58:B4:48:D6:74:95:21:59:63:B4:35:37:62:37
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/KoR7YxAXWLRI1nSVIVljtDU3Yjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:c3:d3:36:67:18:e2:18:e3:02:32:b0:19:a4:8e:9a:eb:35:
5a:4e:6b:44:78:ff:90:49:a8:5b:31:d9:a9:73:2c:58:32:92:
33:bf:2c:c6:ba:cd:ce:c9:2f:e3:d2:4a:d2:49:09:4b:f6:53:
f3:36:8a:bf:3c:6f:07:5b:dd:ff:ce:30:ad:d6:a9:63:8c:79:
81:c7:77:bc:26:44:77:f9:a1:4e:71:f8:44:0b:41:86:dc:dd:
81:d8:2e:16:a8:4e:c9:28:70:e7:41:06:31:9f:3d:5b:6d:44:
ff:65:bc:60:b2:ca:9b:ce:6d:ce:30:e3:4b:c9:56:3b:ce:6c:
f3:5e:49:7c:2f:00:de:90:04:67:8e:17:ed:25:06:d7:b5:ef:
71:e8:40:c2:ca:10:a1:43:7f:8d:2b:83:94:5d:14:21:52:61:
78:fc:3f:c1:98:1e:ff:20:0e:30:9a:ae:8d:30:73:cc:9c:c3:
b8:2e:af:91:9f:d6:da:93:56:43:40:62:a9:bb:82:ea:db:e3:
90:e1:79:0a:1f:97:09:89:15:2a:ce:e4:4b:27:db:7b:61:eb:
2b:94:09:06:8e:bb:84:de:52:c8:7b:ca:e1:1c:d1:95:d8:33:
e8:58:19:40:c2:ba:5e:d7:c5:82:6d:0b:e5:33:01:0c:2c:b2:
f2:60:f7:9b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5tJ78Dkqo59AuUoxcZQgR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzIzMjExMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTg0N2I2MzEwMTc1OGI0NDhkNjc0OTUyMTU5NjNiNDM1Mzc2MjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk3I0lovinlDuPQVwPTw6K5SziYd
DB2N55ql3FjwP9W4vXQYlrMI5qhS7gERfgkyiYpMx5Hp6sk92Okpl6saDDNg68Wy
97w/81gXpuQJgz2T5C8cDcAIYTneQZbAJDRLDObSs/SHMwv888vWL5BYO2GU8W6M
6PZM44yH4QKJ/pY2Fg4d43DVgHYyFpBjI05grWU7QbTQwyPL9L5/a42cZrkrth3o
jjKdq1Vi4bleQjtUhn/uIhX8YBURqQPs+hoaIyillGRRFt0EP+JNWmv4XLAAtbLL
Yh9qygGZOPaudCjxau3E6hTMtgKJIVzYCZbsSdJQdbksjndvh5BZ6M7wfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCqEe2MQF1i0SNZ0lSFZY7Q1N2I3MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvS29SN1l4QVhXTFJJMW5TVklWbGp0RFUzWWpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKbD0zZnGOIY4wIysBmk
jprrNVpOa0R4/5BJqFsx2alzLFgykjO/LMa6zc7JL+PSStJJCUv2U/M2ir88bwdb
3f/OMK3WqWOMeYHHd7wmRHf5oU5x+EQLQYbc3YHYLhaoTskocOdBBjGfPVttRP9l
vGCyypvObc4w40vJVjvObPNeSXwvAN6QBGeOF+0lBte173HoQMLKEKFDf40rg5Rd
FCFSYXj8P8GYHv8gDjCaro0wc8ycw7gur5Gf1tqTVkNAYqm7gurb45DheQoflwmJ
FSrO5Esn23th6yuUCQaOu4TeUsh7yuEc0ZXYM+hYGUDCul7XxYJtC+UzAQwssvJg
95s=
-----END CERTIFICATE-----
Generated at Sun Mar 24 04:13:30 2024 by rpki-client on console.sobornost.net