Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/P5vR6-0x6gUSYYgO2DOQXOOdjnU.roa
File: P5vR6-0x6gUSYYgO2DOQXOOdjnU.roa (raw, json)
Hash identifier: hORl+PgO0NHNeoVS82Meytrs9ur1clNeYpTMFpplyts=
Subject key identifier: 3F:9B:D1:EB:ED:31:EA:05:12:61:88:0E:D8:33:90:5C:E3:9D:8E:75
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CEBFF3760AD751F88337118C64ACB1B9F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/P5vR6-0x6gUSYYgO2DOQXOOdjnU.roa
Signing time: Tue 09 Jan 2024 02:13:40 +0000
ROA not before: Tue 09 Jan 2024 02:13:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 03:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:eb:ff:37:60:ad:75:1f:88:33:71:18:c6:4a:cb:1b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 9 02:13:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f9bd1ebed31ea051261880ed833905ce39d8e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:68:3b:51:6c:db:97:8d:f6:14:83:8f:43:
de:c2:99:d7:fd:c4:f1:8d:e8:9f:ba:47:c9:08:0e:
0d:d3:84:70:ad:4c:db:b5:a9:61:61:a2:94:28:49:
67:1f:94:ad:15:27:16:c7:d1:e7:22:71:a3:64:1b:
2d:dd:e7:b5:17:d8:73:8f:12:df:9e:5a:e2:12:38:
66:6e:21:53:05:db:21:c2:c7:8d:c1:c2:e8:ea:10:
91:8a:4b:06:c7:e4:fd:ec:d1:a1:e7:83:ea:aa:9b:
cd:0b:a6:be:57:73:83:2c:70:8c:7b:3b:90:55:db:
29:e2:02:c2:2a:b1:af:d9:3e:70:e9:f3:24:43:5c:
60:1a:2b:05:e5:eb:83:52:9c:74:54:5c:13:99:2d:
fc:0e:29:21:62:9a:df:97:b3:7b:64:7a:d6:da:37:
a3:5d:f0:4a:00:47:9f:1f:a2:5d:22:04:6d:c9:68:
84:1d:05:14:d7:d6:14:0b:5e:0b:39:13:fc:d8:f7:
47:7a:38:7d:c9:70:8a:7b:73:4a:6c:b1:cc:26:73:
c1:13:93:f4:ee:79:25:db:55:61:37:3d:b8:62:28:
47:1e:ea:f0:e2:80:f8:41:69:90:4a:48:93:ac:b1:
b0:94:23:00:b1:60:a9:28:24:45:f9:02:ff:27:5c:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:D1:EB:ED:31:EA:05:12:61:88:0E:D8:33:90:5C:E3:9D:8E:75
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/P5vR6-0x6gUSYYgO2DOQXOOdjnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:43:91:ea:6d:88:36:0c:9e:c3:30:b9:61:84:05:42:d9:c8:
20:d7:4b:f2:af:88:e2:10:18:69:1e:e2:b9:ef:b0:aa:97:56:
b2:ea:84:63:d8:8d:d6:c0:92:28:8a:b7:8f:9f:74:ea:a5:06:
7e:b2:61:e6:01:3c:59:ad:b7:ec:bb:eb:30:b6:53:9d:11:c6:
11:3e:0f:f6:2b:90:04:b0:82:38:0e:64:69:be:42:f5:ce:0b:
f8:44:5a:11:d3:59:c1:70:a3:e5:89:06:e1:86:75:8e:08:9a:
d1:cc:68:17:71:24:d3:a9:ae:51:fa:42:58:59:38:e7:bf:ee:
a5:d3:a5:44:43:b4:28:de:6a:f0:68:a5:d2:8b:22:68:f7:e4:
74:4e:89:46:6c:0f:a8:2e:b3:14:01:36:d8:20:d9:0b:10:5a:
01:5f:98:48:2a:33:49:f1:5d:56:ff:c8:ec:28:12:6d:dd:40:
a6:eb:92:a1:10:84:11:27:67:49:1e:ce:06:97:30:af:fa:c6:
d6:7c:21:6e:eb:b6:fd:94:c7:30:d3:1b:d1:90:f1:43:6d:69:
24:05:5d:eb:4a:31:69:37:2f:ae:16:12:02:02:a0:2f:2f:12:
b9:50:f9:bb:04:49:8e:fd:08:8b:44:10:d6:45:66:c7:65:61:
56:c7:f5:2d
-----BEGIN CERTIFICATE-----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Generated at Tue Jan 9 06:30:50 2024 by rpki-client on console.sobornost.net