Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q9iDpA7s6g0N62O-smPhRfYQ184.roa
File: Q9iDpA7s6g0N62O-smPhRfYQ184.roa (raw, json)
Hash identifier: zeiXPhUtnvOcBiBM93kZPcqGUYgiw8XHCiRjrrPYtZQ=
Subject key identifier: 43:D8:83:A4:0E:EC:EA:0D:0D:EB:63:BE:B2:63:E1:45:F6:10:D7:CE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EAE2E00FCA1617AB0E8DDFB7FA5036E39
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q9iDpA7s6g0N62O-smPhRfYQ184.roa
Signing time: Fri 05 Apr 2024 12:13:54 +0000
ROA not before: Fri 05 Apr 2024 12:13:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 05 Apr 2024 13:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:2e:00:fc:a1:61:7a:b0:e8:dd:fb:7f:a5:03:6e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 5 12:13:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43d883a40eecea0d0deb63beb263e145f610d7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4d:1d:4a:fb:0c:f2:44:5b:0a:86:e0:da:ee:
49:ba:c0:74:7c:8d:da:4e:83:91:69:21:e9:3d:fc:
22:71:8a:6a:a2:6f:99:e2:95:96:54:00:19:06:69:
48:b2:a4:9e:50:23:55:c4:f2:65:9a:21:ca:1f:a6:
b6:02:cc:6f:e5:55:7c:f7:93:a7:03:e9:37:f1:9f:
31:ca:0b:dc:d6:3e:99:af:bb:d4:9d:0e:e8:47:31:
ea:de:17:11:a4:aa:30:57:b3:ae:fb:87:9a:22:a7:
6e:ce:0f:c5:df:74:c4:b1:73:32:7d:ce:ef:42:5d:
1c:bd:5d:c2:64:47:43:aa:6b:50:15:60:65:c0:8b:
74:a7:d4:25:9f:9b:34:9f:ec:6f:b7:78:43:ad:1b:
a5:b1:ba:e5:c9:74:c2:a0:11:43:d0:88:a9:b6:c5:
91:db:e7:f1:46:9a:28:46:c6:bd:76:a8:90:52:ac:
d9:9a:83:a0:c7:ba:f5:da:86:01:a9:62:2b:0b:95:
b3:22:1f:82:87:f2:41:0d:19:b0:59:7b:ee:dd:75:
94:61:14:b6:c3:56:52:64:f9:14:03:7c:78:0b:72:
51:e3:91:e4:37:cd:4e:a2:09:85:fd:0d:21:f5:de:
37:28:3c:ad:02:d7:4e:70:ae:f4:ee:c0:11:59:13:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D8:83:A4:0E:EC:EA:0D:0D:EB:63:BE:B2:63:E1:45:F6:10:D7:CE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Q9iDpA7s6g0N62O-smPhRfYQ184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:d9:60:47:5e:d3:70:c1:66:be:82:b1:81:73:40:52:c5:66:
9f:cd:75:f8:e8:13:56:e2:d8:3d:c3:46:e6:c4:93:29:df:11:
7e:8a:e8:71:4f:a3:61:b4:7b:32:ff:f0:1b:a8:0a:62:91:28:
56:90:58:c2:68:c9:5c:a8:ca:47:a6:5b:5d:67:bb:92:d8:fc:
d8:77:ca:4e:ff:f8:27:0a:63:cf:95:c9:b0:eb:1b:da:d1:3e:
3e:72:fd:d5:bb:13:a4:f8:76:d2:cb:74:07:0c:31:5d:5f:44:
fa:74:08:df:02:4c:08:0c:57:9a:86:20:db:29:a9:b9:09:2e:
5e:71:17:38:8e:8f:e1:79:ca:70:d8:29:57:88:25:d8:75:a5:
a0:e3:5f:a5:9a:6f:4d:33:b4:e9:7c:aa:89:8f:83:19:7b:7c:
aa:c3:3e:7e:fd:30:d5:ae:7b:4b:24:d7:f6:9b:dd:c8:75:3d:
eb:7f:de:71:f5:f2:95:c3:46:db:68:4b:fc:0f:6d:d2:ab:d7:
01:a9:b4:24:aa:c5:04:c1:15:15:cf:96:a1:41:8b:98:17:9e:
ae:c6:c3:74:b0:91:29:be:c3:25:7e:02:ea:8f:33:a6:47:d9:
c2:0b:66:be:b5:b6:e1:9c:9e:c7:31:f0:a7:58:47:e1:93:d2:
4f:91:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 19:30:46 2024 by rpki-client on console.sobornost.net