Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ROwBLbpmZcPj3nEeF7ARldsO-ik.roa
File: ROwBLbpmZcPj3nEeF7ARldsO-ik.roa (raw, json)
Hash identifier: zeabrdCtsQ9WtpRpz10Vm7loqWtYkgzE+ESimH/jblM=
Subject key identifier: 44:EC:01:2D:BA:66:65:C3:E3:DE:71:1E:17:B0:11:95:DB:0E:FA:29
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E42AA5D5AEB112757396DD6511336A972
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ROwBLbpmZcPj3nEeF7ARldsO-ik.roa
Signing time: Fri 15 Mar 2024 15:10:45 +0000
ROA not before: Fri 15 Mar 2024 15:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 15 Mar 2024 16:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:aa:5d:5a:eb:11:27:57:39:6d:d6:51:13:36:a9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 15 15:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44ec012dba6665c3e3de711e17b01195db0efa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8f:7f:94:9b:d3:88:07:0b:95:77:8c:d3:61:
eb:39:9b:7c:69:fa:bb:58:10:60:60:59:04:f9:28:
0f:4e:e0:99:40:65:50:2e:dd:34:58:3f:36:64:3a:
09:ab:26:23:b6:e2:be:5b:7f:ff:0d:45:51:f5:c7:
dd:42:91:12:6f:60:a8:c6:d1:e7:5a:93:5d:d6:7f:
ce:95:83:8c:42:ab:68:f8:34:06:71:34:2e:59:86:
62:7a:40:30:d2:24:c9:80:2d:ed:3a:0b:b9:80:65:
83:f3:f1:36:e7:5f:9b:e0:62:5f:d4:6d:37:2e:8e:
d4:11:55:19:f4:68:a3:55:7e:32:5f:8f:ad:aa:bb:
9a:cc:f0:7d:78:4e:b9:8b:35:af:ba:4e:e1:da:7b:
47:53:c4:77:7e:5f:ee:fe:3a:29:35:cb:7f:e3:c2:
3d:1d:32:49:fa:f3:69:96:f5:8c:30:90:f5:2d:67:
72:18:b0:04:fb:d2:3d:c7:a8:3f:e0:0b:cb:a2:6f:
e5:6c:53:19:60:9b:51:19:f6:4e:74:69:51:fc:f8:
00:7a:1c:b1:88:6a:60:22:aa:a2:b4:15:95:0f:71:
e7:8d:eb:22:19:99:fb:f6:e2:79:57:94:54:82:94:
47:cf:89:eb:e2:22:78:3f:ae:76:06:99:a7:6a:f2:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EC:01:2D:BA:66:65:C3:E3:DE:71:1E:17:B0:11:95:DB:0E:FA:29
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ROwBLbpmZcPj3nEeF7ARldsO-ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:30:d2:e2:b3:95:a4:bb:3b:20:dd:f6:cd:43:f5:2e:87:be:
e6:5b:71:1e:9e:ce:01:fa:cf:4e:41:79:ca:72:86:9d:55:34:
40:cf:bd:ea:25:2e:08:cd:2a:3a:47:47:c9:ec:7d:04:df:4b:
d3:fd:9b:38:cb:a6:26:94:71:59:d9:51:61:bb:c7:ae:48:d7:
11:5f:19:1f:5e:c5:32:e5:27:18:0a:f1:63:1b:09:aa:9f:33:
3b:58:a0:78:64:4f:65:05:57:89:15:34:4f:56:f6:91:23:4a:
cf:67:63:77:69:1b:e2:09:62:74:d3:ec:c7:d9:59:d7:b0:38:
7a:8c:43:d7:bd:dd:50:e2:fb:f8:ba:02:e2:e9:52:35:0f:8d:
30:76:6f:3e:c3:0d:3d:d9:03:d8:57:bf:d3:cb:b5:1b:e1:4a:
b9:9d:a3:90:06:a9:dd:27:c4:b9:11:db:b4:4c:eb:6c:ea:5f:
35:4a:e6:a5:e7:68:a2:cb:bf:7e:60:a0:ac:e2:57:eb:de:80:
ba:ac:b5:7e:a3:f6:28:8b:fc:25:66:92:c7:6c:2a:39:81:1c:
c3:bb:8a:bd:aa:17:d2:5c:f9:29:9c:20:97:59:84:c3:fa:fd:
44:5c:c9:cc:cb:75:fc:f8:a5:6e:04:b2:ff:18:8e:ab:b4:85:
3b:9c:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 22:16:28 2024 by rpki-client on console.sobornost.net