Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RRQwj8SN_36tMgXpdfKKZUmeI24.roa
File: RRQwj8SN_36tMgXpdfKKZUmeI24.roa (raw, json)
Hash identifier: Cay3K9TsQ2gAY3o5n++pNYg9j/Tcc0NGjFc4LrEGJ3k=
Subject key identifier: 45:14:30:8F:C4:8D:FF:7E:AD:32:05:E9:75:F2:8A:65:49:9E:23:6E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6C7C8AB4C5B32EA1612106441616FE0F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RRQwj8SN_36tMgXpdfKKZUmeI24.roa
Signing time: Sat 23 Mar 2024 18:04:45 +0000
ROA not before: Sat 23 Mar 2024 18:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:6c7c:3c41/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 23 Mar 2024 18:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6c:7c:8a:b4:c5:b3:2e:a1:61:21:06:44:16:16:fe:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 18:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4514308fc48dff7ead3205e975f28a65499e236e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:ae:ff:34:14:67:4f:34:e1:8f:43:ad:f5:
7f:89:7e:20:11:bd:df:36:f1:f3:79:f9:71:7a:38:
12:e8:ca:8c:3f:d5:93:68:05:7d:41:a9:eb:00:ba:
00:1b:f7:ad:89:67:d3:38:0c:ac:d0:1a:f8:ec:7a:
a6:1d:11:f0:27:b6:77:9a:3f:d4:5f:3d:e2:71:35:
09:f4:aa:07:f4:da:40:07:ac:53:e1:5b:b9:be:3a:
cf:30:d5:02:15:ae:34:f4:a1:c8:44:f4:6d:47:de:
29:60:30:06:ac:22:96:06:b8:99:86:f5:5a:28:bf:
eb:89:5e:d7:68:ae:d7:32:6d:09:4a:ed:bd:2d:05:
d5:92:e3:8a:9a:73:8c:7c:74:0e:6c:50:e3:2d:2d:
fc:af:b4:8c:98:77:e3:01:ab:f5:54:c2:e6:0d:cd:
25:bb:42:a9:09:59:b7:ab:3e:85:74:7b:58:52:ca:
b4:0f:33:ab:90:62:a1:7d:7e:d4:89:6a:4a:17:39:
9e:9d:b1:a5:3a:1c:f4:34:ee:d0:10:51:ea:31:8b:
fb:e2:48:b8:e2:bc:8c:d9:f2:0d:2a:19:e4:d9:df:
fc:87:ce:d0:db:be:55:52:a2:90:8d:e9:af:c1:6a:
b6:9e:a6:e7:14:ec:1e:29:f7:f2:e7:6d:f9:9d:91:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:30:8F:C4:8D:FF:7E:AD:32:05:E9:75:F2:8A:65:49:9E:23:6E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/RRQwj8SN_36tMgXpdfKKZUmeI24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:ff:7b:d6:97:e4:5d:e7:35:b8:7c:af:16:c1:39:55:42:89:
7f:59:ed:a2:b3:b2:9d:62:3f:a3:4f:b1:f7:bd:7c:82:47:93:
3f:c4:29:73:40:7e:2d:12:99:3d:24:c6:38:f8:d8:02:4e:37:
0e:57:bf:1b:1a:2c:93:d9:d1:70:95:ae:eb:9d:90:2e:42:a3:
82:e5:a3:ca:58:31:97:08:a4:ae:51:28:24:d2:18:96:44:9e:
31:fc:08:58:2b:3c:82:2e:51:d2:2d:26:46:56:f7:7f:f2:f7:
4b:b3:17:91:df:8a:26:0e:5d:f3:3e:b6:3f:e1:18:82:45:20:
42:74:1d:67:15:1f:1d:56:bf:7f:1b:2d:7e:d7:83:57:80:ca:
d8:c8:f1:6f:80:4e:e3:50:09:04:d6:3d:67:8c:4b:c5:05:d9:
1f:9b:70:7e:71:06:56:ee:75:f4:66:22:08:1a:8d:5e:d2:9e:
3b:df:6b:63:7a:aa:04:ce:45:6c:8e:32:7d:d8:4d:a8:59:b8:
94:44:4e:f2:63:44:a3:33:88:94:b8:60:df:cc:73:fb:e4:ca:
eb:78:2a:29:e0:3d:45:90:c5:5e:9a:e0:d6:2e:2e:e1:2b:81:
4b:b2:03:19:8a:d7:d2:a4:9d:5e:b1:51:39:70:a3:eb:80:10:
49:a2:61:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 23 22:59:33 2024 by rpki-client on console.sobornost.net