Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/O80heZk1hmVo_scVI31eC5-grHc.roa
File: O80heZk1hmVo_scVI31eC5-grHc.roa (raw, json)
Hash identifier: 8z/zBqViURBQjMpRYRcayqDV5RPXB5/ER/Y4arpPz6o=
Subject key identifier: 3B:CD:21:79:99:35:86:65:68:FE:C7:15:23:7D:5E:0B:9F:A0:AC:77
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DFE71D0D9614FA4124E0CCFD59D4E1C11
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/O80heZk1hmVo_scVI31eC5-grHc.roa
Signing time: Sat 02 Mar 2024 09:14:48 +0000
ROA not before: Sat 02 Mar 2024 09:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 02 Mar 2024 10:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fe:71:d0:d9:61:4f:a4:12:4e:0c:cf:d5:9d:4e:1c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 2 09:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bcd21799935866568fec715237d5e0b9fa0ac77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:07:7d:3c:88:5c:c6:d6:d4:dd:93:e2:1f:
44:5e:5e:06:8e:f1:41:b6:08:2a:8d:fd:89:ca:24:
ac:12:c5:bf:aa:61:96:55:7b:ec:bd:ff:3f:7a:19:
ca:83:c1:09:cc:ab:97:22:44:a0:95:56:c8:34:28:
49:e4:09:08:4c:36:97:4e:93:30:61:8a:ee:f7:d7:
15:cc:90:52:b6:ca:76:1b:ec:d6:1d:3e:73:cb:72:
b0:a0:77:d2:b4:86:00:d4:ce:db:24:12:f9:92:33:
ec:00:a7:22:94:99:2c:44:a0:cc:c3:fa:a0:77:10:
d0:df:a7:a4:01:d9:34:03:f3:53:a5:a3:de:8f:eb:
1c:d8:37:c9:8c:44:3b:34:b5:38:b3:01:db:b9:b3:
79:23:61:ec:92:be:2e:4b:6f:d8:dc:52:9e:1f:79:
51:38:80:8b:e1:28:8d:c8:a4:61:55:82:57:17:85:
50:a3:e3:3b:6c:de:de:19:b4:9a:ec:11:cb:cc:bf:
47:21:85:82:2e:d4:61:5c:60:b5:40:24:e9:95:2f:
33:36:c6:94:94:75:d6:96:5f:82:01:cc:aa:33:3c:
00:9b:0d:e8:b7:f4:ee:c7:14:0d:fe:9d:d4:db:8c:
f9:cf:4d:bf:d0:a9:cb:cb:85:d4:91:d3:39:c6:5a:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CD:21:79:99:35:86:65:68:FE:C7:15:23:7D:5E:0B:9F:A0:AC:77
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/O80heZk1hmVo_scVI31eC5-grHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:43:12:24:1a:f2:f8:6a:fe:34:37:92:18:aa:38:b4:a9:35:
95:1b:a2:38:f4:90:13:e0:57:4a:1f:fe:3b:a3:92:78:6b:a0:
de:87:cc:c0:12:00:4e:f9:12:87:a1:38:41:c6:3c:e4:f3:82:
27:96:b6:98:1d:99:56:a1:4f:05:14:ba:0f:69:4d:f6:db:02:
6f:76:3c:2c:d6:f2:3a:52:80:35:45:4d:d8:12:4d:17:58:3c:
d0:2f:86:13:83:7b:d1:00:10:b3:95:40:3a:a0:dd:1b:69:8a:
6b:df:57:5e:52:79:40:7c:98:bc:b1:94:31:86:57:66:2c:b6:
f7:29:7c:c1:f2:7c:6b:89:58:9e:2f:4c:e1:ca:c8:13:cd:89:
af:66:f1:2f:d7:7b:d3:02:ab:23:99:f0:b7:c1:5c:29:89:cf:
a5:ae:dd:4a:91:90:2b:52:b2:9b:4d:11:a7:f9:a4:f5:46:e5:
05:40:9b:5e:d9:49:1e:ee:df:69:5d:db:af:db:e8:f9:06:b2:
10:f4:45:d9:2b:1b:9b:23:c1:33:ea:51:85:49:52:cc:95:0d:
93:b8:fa:f8:3e:3d:37:5c:81:e8:15:17:1c:bb:fa:30:90:10:
f6:93:3c:2c:f6:48:97:45:15:40:87:83:09:fa:2c:09:e7:32:
63:61:12:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 14:10:28 2024 by rpki-client on console.sobornost.net