Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L1jg1ctJZW9ocmAfmh-HdeirbD4.roa
File: L1jg1ctJZW9ocmAfmh-HdeirbD4.roa (raw, json)
Hash identifier: cf1vj/GL7GymEFSeQ18qFRR1eAwIoGEcamjxbUu6faE=
Subject key identifier: 2F:58:E0:D5:CB:49:65:6F:68:72:60:1F:9A:1F:87:75:E8:AB:6C:3E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DECA27D596E5035F846C8EAF012A51666
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L1jg1ctJZW9ocmAfmh-HdeirbD4.roa
Signing time: Tue 27 Feb 2024 22:14:48 +0000
ROA not before: Tue 27 Feb 2024 22:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 27 Feb 2024 23:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:a2:7d:59:6e:50:35:f8:46:c8:ea:f0:12:a5:16:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 27 22:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f58e0d5cb49656f6872601f9a1f8775e8ab6c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:d1:15:d3:cb:3a:40:21:61:2d:27:c4:d5:
e6:e9:82:cc:96:5b:8d:82:9f:bd:cf:46:1c:b8:0e:
ad:a0:c2:da:e5:cd:9f:70:5e:f1:77:3e:3a:81:87:
8e:85:bd:36:1e:89:77:10:c2:a7:9f:f6:ce:99:2d:
ea:65:5b:c0:fd:72:0c:0b:13:9f:c2:90:5c:a8:73:
b3:ce:d0:93:cc:23:01:ac:41:64:bc:d1:9c:81:a6:
38:42:c1:40:d4:5f:e4:98:50:2d:e3:e1:77:28:ed:
ca:8b:5c:db:84:02:72:38:17:d1:b5:22:03:f0:db:
c7:c3:59:60:3a:e2:de:21:bd:c8:4f:9a:25:f2:f6:
1f:11:b8:42:95:17:a1:ab:e7:10:5b:e3:71:77:25:
64:e3:c6:29:0b:87:00:a2:b2:1a:bc:11:db:26:06:
20:27:65:a3:cc:01:d5:09:64:8a:a8:10:5d:82:1a:
f0:0d:42:49:00:5e:4e:b0:5b:19:f4:0d:27:22:f4:
d7:be:94:29:5e:04:9f:e8:b0:54:5a:97:eb:d8:50:
ec:f4:a1:f8:03:80:c0:8e:3c:a9:4e:d0:86:39:bb:
84:8b:b2:ba:17:3a:4a:be:65:a3:f9:01:bd:b3:39:
20:51:c8:cc:59:40:3c:2a:e2:5c:bd:ec:1f:90:02:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:58:E0:D5:CB:49:65:6F:68:72:60:1F:9A:1F:87:75:E8:AB:6C:3E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/L1jg1ctJZW9ocmAfmh-HdeirbD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:10:be:1c:67:8d:96:09:72:0b:00:03:a3:fc:d0:77:a0:72:
3e:4c:98:c5:ad:80:bf:bb:a3:dd:69:8d:57:d2:99:2a:03:c8:
6d:05:fd:a1:ca:2f:f9:87:4a:5f:4e:18:f2:35:c9:0b:0c:b8:
d7:db:e7:55:75:b6:02:61:62:b2:83:cf:c0:d8:e4:64:3d:64:
66:ec:75:7c:71:a9:a1:2a:38:53:d4:69:97:c1:9f:b2:09:b6:
7b:b9:f5:9c:5f:c8:44:6c:cd:83:92:ee:6b:43:09:4a:98:11:
4d:f4:13:1d:c0:b2:a4:4b:00:4f:2e:ef:3c:a2:8b:09:12:71:
53:23:36:6d:04:47:11:69:b3:53:38:9d:54:c9:33:37:f7:40:
f5:2f:04:24:86:40:c6:9d:e6:a8:f7:01:b4:17:0e:41:c6:d4:
d5:6b:b3:de:b2:26:f1:c9:38:9a:b0:50:37:52:43:ff:56:50:
96:87:37:67:d8:92:47:7a:57:4f:22:f1:8a:62:66:74:3c:f2:
13:a6:c2:62:a3:3b:17:81:51:78:05:76:01:0b:14:02:f1:74:
48:d0:fa:ef:28:00:8b:55:c7:cf:75:85:9c:93:9a:1a:0c:7f:
49:d2:32:c7:21:02:7c:15:41:57:f4:18:d2:17:25:8b:26:87:
01:0d:4a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 04:31:23 2024 by rpki-client on console.sobornost.net