Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MadQn884ebtNqNa_44W6fJkD4Ww.roa
File: MadQn884ebtNqNa_44W6fJkD4Ww.roa (raw, json)
Hash identifier: 71uUND/Cw4iqGu+yU+GFcvB7wzBmIp+GP2kSvq+QWHY=
Subject key identifier: 31:A7:50:9F:CF:38:79:BB:4D:A8:D6:BF:E3:85:BA:7C:99:03:E1:6C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DFFF16C6F65F8CAD457534CF9551408D7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MadQn884ebtNqNa_44W6fJkD4Ww.roa
Signing time: Sat 02 Mar 2024 16:13:48 +0000
ROA not before: Sat 02 Mar 2024 16:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 02 Mar 2024 17:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ff:f1:6c:6f:65:f8:ca:d4:57:53:4c:f9:55:14:08:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 2 16:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31a7509fcf3879bb4da8d6bfe385ba7c9903e16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:42:f4:c9:af:60:a3:49:61:8e:f3:83:5c:
ec:8c:c3:3b:eb:fb:bf:a3:9e:52:5c:4f:60:cc:ca:
3d:48:66:0f:05:98:56:49:f7:db:5a:3c:a6:11:90:
ed:b1:65:e9:6e:85:2b:f7:f1:b4:37:e0:13:65:45:
04:3a:78:b1:4b:a9:ae:54:5b:35:70:22:7b:15:38:
a8:b4:f8:73:e6:ef:3a:f5:06:3a:4e:d5:a1:e8:ff:
6b:d8:34:9b:42:b5:86:c5:bb:81:ce:a1:a5:a2:60:
d5:2d:9e:8b:14:e6:51:a4:02:e4:86:14:19:c6:d6:
f3:0f:6f:39:37:9c:21:d7:97:5e:3c:57:c2:44:8e:
75:ca:86:ef:9c:a1:c2:77:27:7f:b6:b2:87:19:b3:
bc:e4:48:f1:13:9c:6f:8b:88:75:07:a2:6f:18:71:
1d:42:7a:e2:ee:95:73:90:e0:f1:2a:29:29:8a:42:
da:0c:16:af:29:8e:ac:de:f5:9e:79:2b:dd:87:58:
2f:3a:93:de:7c:43:cf:52:96:63:f4:61:9f:c7:f3:
4b:1a:99:94:e0:11:41:b3:d1:93:8b:b4:db:eb:5b:
4b:51:03:79:fe:a5:92:74:69:d9:4f:bb:df:af:51:
d6:f6:1a:aa:3b:c9:33:9f:ac:19:b0:d7:45:91:30:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A7:50:9F:CF:38:79:BB:4D:A8:D6:BF:E3:85:BA:7C:99:03:E1:6C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MadQn884ebtNqNa_44W6fJkD4Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:21:b2:5a:93:3a:cc:cd:ba:01:d3:5b:b0:e0:15:8b:86:d0:
c1:e2:e4:88:4d:55:61:1d:39:8a:92:3b:61:a3:4e:47:e1:e6:
b1:b0:ec:b5:e9:0e:54:de:cd:44:7f:3c:62:1d:07:fd:ab:e9:
18:44:ad:a2:db:0b:f5:ed:64:a7:8f:5e:48:f6:6d:8c:88:86:
f3:87:ad:a5:d5:93:56:2b:d3:74:3c:46:04:63:39:c0:04:6a:
50:26:9a:34:da:9b:28:b3:df:0d:24:24:82:d6:b2:65:1f:31:
fa:a0:64:87:f5:df:55:f9:b9:a7:82:6f:74:a6:c0:95:e7:00:
c2:e5:46:d0:d3:9b:d7:26:71:21:48:3e:40:c1:fd:cc:b2:ef:
b3:25:47:28:80:f0:64:74:5b:11:8d:b0:df:29:f2:29:f2:5b:
2b:57:19:51:68:17:cb:a0:24:71:b7:68:76:3d:3c:4c:1b:1b:
03:f4:b5:9b:d1:cf:05:2e:77:d4:9b:35:4f:ce:ca:ec:22:9f:
2f:48:c4:67:af:0c:c8:39:48:e0:ae:bc:58:01:e7:20:dc:b6:
b8:93:dc:97:5e:7c:a6:0f:5e:62:1f:94:ab:ad:16:fd:72:65:
12:bc:76:b7:c7:b7:b0:19:0b:62:dc:29:f4:64:d8:a4:b9:49:
cc:64:d8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 21:37:39 2024 by rpki-client on console.sobornost.net