Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Rhiji1xSbwcfMDJxEbmE6dZXPyw.roa
File: Rhiji1xSbwcfMDJxEbmE6dZXPyw.roa (raw, json)
Hash identifier: Ve3/5udmo1ufasTIqjmhTZH1c8kZDo4QGhXJJZc6E8Q=
Subject key identifier: 46:18:A3:8B:5C:52:6F:07:1F:30:32:71:11:B9:84:E9:D6:57:3F:2C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E3CAB068F7EC188151298B1ED0031616E
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Rhiji1xSbwcfMDJxEbmE6dZXPyw.roa
Signing time: Thu 14 Mar 2024 11:13:45 +0000
ROA not before: Thu 14 Mar 2024 11:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 14 Mar 2024 12:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:ab:06:8f:7e:c1:88:15:12:98:b1:ed:00:31:61:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 14 11:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4618a38b5c526f071f30327111b984e9d6573f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:bf:1b:46:fa:c3:77:61:25:bf:92:34:72:
79:c7:88:90:de:62:7c:1f:3e:72:18:1a:42:de:da:
bc:3f:ce:f1:e4:f4:9d:3e:c2:6c:16:55:00:04:7b:
24:aa:05:2b:13:b0:bb:b9:2f:0e:0a:ad:6f:8b:53:
70:b5:3e:12:85:9f:f4:bb:dd:07:ff:cf:19:8a:00:
9e:39:68:33:3a:56:85:06:89:01:00:02:4a:f4:b8:
e4:28:5a:ee:13:7e:b1:ea:c0:74:f9:d4:ce:6f:5a:
7b:a0:5d:32:b2:d4:64:d4:6a:23:5c:0e:3f:cb:3b:
bb:c5:3c:46:44:b3:7c:5b:ce:e2:ac:12:0b:df:f1:
9c:7d:a0:60:4c:36:4e:46:09:9f:bd:15:f0:f4:5b:
f7:94:20:11:bd:65:a4:2b:16:46:d8:2c:27:56:71:
0b:ae:20:d6:bb:d4:67:48:b4:6a:4f:ba:cb:6b:ef:
54:fd:60:b0:55:3b:d3:f5:ab:de:f7:b0:e9:3c:05:
16:b4:d5:8d:66:fe:3a:06:90:76:2f:6e:0b:70:85:
a2:a9:8e:67:57:58:a1:51:a1:47:a6:ca:b9:84:8a:
91:36:19:97:62:c4:0f:01:34:0d:0f:bb:8c:72:72:
9a:55:5a:9e:19:65:2e:aa:2a:fb:6a:d0:fc:fe:ac:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:18:A3:8B:5C:52:6F:07:1F:30:32:71:11:B9:84:E9:D6:57:3F:2C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Rhiji1xSbwcfMDJxEbmE6dZXPyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:b7:23:c7:cc:c0:c3:62:05:b0:ca:8f:eb:04:b6:c0:7c:7f:
38:93:9b:a6:5e:63:a2:9b:76:af:0e:1a:50:12:87:c5:22:ab:
32:cb:75:7d:a7:2a:af:2b:68:ed:43:74:79:13:b9:a2:06:0c:
74:2d:81:08:93:90:ef:f8:f0:46:35:f7:b8:4e:d8:45:c2:3d:
7e:23:1c:25:22:b8:2a:8f:38:b4:27:d1:70:5e:ad:8b:2f:3d:
4c:db:20:75:4b:cb:2e:b7:d0:af:64:a0:dc:01:83:99:f5:10:
ba:5c:66:88:14:a5:ec:59:c2:3f:25:63:8e:9f:d5:a9:9c:8a:
8f:3f:eb:bf:1c:05:ef:77:ae:83:ac:a9:36:9f:46:00:10:07:
62:0e:2b:07:79:0b:17:91:29:f9:8a:47:8e:d5:72:13:bc:1d:
a4:a4:a4:c3:56:20:1b:6f:7d:8a:df:f9:25:e6:57:9b:96:eb:
3e:02:0f:57:5a:a6:d2:87:f4:03:40:d9:ed:79:a2:a3:78:08:
8f:42:78:1e:98:cd:4b:c4:eb:57:d0:43:fc:6b:b9:1a:b8:f7:
2f:1c:ce:53:1e:6d:e4:da:27:1d:e9:aa:e6:a3:f9:57:e6:c1:
25:65:10:6f:c9:05:98:87:07:77:21:d1:21:56:02:c8:52:f0:
db:c7:e6:e3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY48qwaPfsGIFRKYse0AMWFuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE0MTExMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjE4YTM4YjVjNTI2ZjA3MWYzMDMyNzExMWI5ODRlOWQ2NTczZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KW/G0b6w3dhJb+SNHJ5x4iQ3mJ8
Hz5yGBpC3tq8P87x5PSdPsJsFlUABHskqgUrE7C7uS8OCq1vi1NwtT4ShZ/0u90H
/88ZigCeOWgzOlaFBokBAAJK9LjkKFruE36x6sB0+dTOb1p7oF0ystRk1GojXA4/
yzu7xTxGRLN8W87irBIL3/GcfaBgTDZORgmfvRXw9Fv3lCARvWWkKxZG2CwnVnEL
riDWu9RnSLRqT7rLa+9U/WCwVTvT9ave97DpPAUWtNWNZv46BpB2L24LcIWiqY5n
V1ihUaFHpsq5hIqRNhmXYsQPATQND7uMcnKaVVqeGWUuqir7atD8/qxm6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEYYo4tcUm8HHzAycRG5hOnWVz8sMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvUmhpamkxeFNid2NmTURKeEVibUU2ZFpYUHl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD+3I8fMwMNiBbDKj+sE
tsB8fziTm6ZeY6Kbdq8OGlASh8UiqzLLdX2nKq8raO1DdHkTuaIGDHQtgQiTkO/4
8EY197hO2EXCPX4jHCUiuCqPOLQn0XBerYsvPUzbIHVLyy630K9koNwBg5n1ELpc
ZogUpexZwj8lY46f1amcio8/678cBe93roOsqTafRgAQB2IOKwd5CxeRKfmKR47V
chO8HaSkpMNWIBtvfYrf+SXmV5uW6z4CD1daptKH9ANA2e15oqN4CI9CeB6YzUvE
61fQQ/xruRq49y8czlMebeTaJx3pquaj+VfmwSVlEG/JBZiHB3ch0SFWAshS8NvH
5uM=
-----END CERTIFICATE-----
Generated at Thu Mar 14 18:53:17 2024 by rpki-client on console.sobornost.net