Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NFj7vu00H01ZcTUQtCLQhmxZxzM.roa
File: NFj7vu00H01ZcTUQtCLQhmxZxzM.roa (raw, json)
Hash identifier: 7lGAke+L+q4dkxvgdwfdL03KYV8tpAbD8SEpJVPGby0=
Subject key identifier: 34:58:FB:BE:ED:34:1F:4D:59:71:35:10:B4:22:D0:86:6C:59:C7:33
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E70FE1BB46BCC84C22B2B7CA2CCD6851C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NFj7vu00H01ZcTUQtCLQhmxZxzM.roa
Signing time: Sun 24 Mar 2024 15:04:45 +0000
ROA not before: Sun 24 Mar 2024 15:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:70fd:a4ec/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 24 Mar 2024 15:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:70:fe:1b:b4:6b:cc:84:c2:2b:2b:7c:a2:cc:d6:85:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 24 15:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3458fbbeed341f4d59713510b422d0866c59c733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:a4:b9:8b:c4:54:47:d5:df:fc:fd:72:0a:
a2:44:8c:cf:f4:91:dd:df:b1:1f:2b:bc:06:32:19:
cc:02:0c:99:dc:7c:90:4d:40:c0:5d:38:58:54:30:
4a:86:d4:ab:da:dc:61:7c:5b:a2:23:5a:3d:84:e7:
b6:9c:d7:b6:03:98:cd:6a:aa:90:7a:2c:08:ce:4e:
ed:75:87:34:d8:23:8c:a6:d3:1f:d4:2e:fb:21:9a:
de:43:67:03:f5:71:d4:d6:3d:3b:2f:6f:26:93:83:
de:26:f2:64:2c:17:4a:bc:8b:23:eb:d0:69:66:08:
85:da:94:4b:aa:eb:9b:2e:f4:2c:33:f3:38:e4:4c:
32:1a:8f:e5:7c:82:51:a5:69:c7:0d:84:0c:af:13:
3b:62:5a:0e:0a:0d:f0:4c:f8:aa:77:93:00:84:56:
53:b1:93:9c:2f:c3:f6:08:76:8b:66:39:72:ec:cc:
54:fe:4d:fb:f8:35:d6:4a:09:ed:74:c3:a1:0a:a3:
3d:09:34:3f:44:29:19:0b:ac:99:88:49:87:94:46:
7c:c4:9f:ba:38:9f:7e:3d:64:39:e6:20:e7:45:f2:
a0:35:d1:38:e2:bf:b2:64:54:a5:06:c0:a4:d5:d8:
6f:80:fe:a8:01:54:e9:2c:cb:cd:2e:90:82:64:c2:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:58:FB:BE:ED:34:1F:4D:59:71:35:10:B4:22:D0:86:6C:59:C7:33
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NFj7vu00H01ZcTUQtCLQhmxZxzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:5a:06:42:6d:4a:c1:1c:94:22:93:b9:26:66:51:52:63:f3:
a9:7f:d3:46:7f:be:4e:3c:36:d7:58:17:a4:f8:c2:66:1b:8e:
6b:6e:e2:da:fc:6e:49:89:5a:bd:35:6d:8e:00:d4:5f:ef:19:
21:74:46:34:d3:d9:5a:ad:05:96:d1:9d:4b:0c:8c:44:42:d0:
02:74:f5:05:d8:34:7e:2e:d9:4a:76:39:a9:bb:cf:ba:05:5b:
50:6f:ee:4d:ec:db:43:9f:32:13:d8:00:07:92:84:d2:5b:ef:
38:84:f5:63:6e:05:9b:a1:45:71:e5:cc:7a:8a:38:6c:29:0e:
d4:15:07:92:bf:b6:66:ad:9b:99:2f:6c:4c:30:00:a0:80:0e:
3f:35:3a:d8:55:1b:b1:2b:37:b6:65:55:fd:40:91:01:6a:d8:
3f:77:32:29:87:eb:27:a3:6f:d4:ea:54:e0:47:c1:81:6d:9d:
69:39:00:e9:47:6d:c3:87:dd:26:dd:0b:77:74:65:a5:93:72:
13:81:a8:a3:2b:10:6d:00:db:92:22:0f:f0:1e:22:19:01:4f:
81:aa:4b:a5:26:b3:09:52:c6:57:02:c5:ab:c8:03:46:e6:2c:
6a:3c:51:64:98:6f:0b:b2:28:7a:8a:04:e1:ee:2f:5c:ce:f4:
dd:6f:f9:b4
-----BEGIN CERTIFICATE-----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Generated at Sun Mar 24 20:10:56 2024 by rpki-client on console.sobornost.net