Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SJoyguBK12XUysU1_A06sXHN2n8.roa
File: SJoyguBK12XUysU1_A06sXHN2n8.roa (raw, json)
Hash identifier: CaxgOdQ3kHcTpMwBImyNem1MpMFOmddpJaYdU1U4oL8=
Subject key identifier: 48:9A:32:82:E0:4A:D7:65:D4:CA:C5:35:FC:0D:3A:B1:71:CD:DA:7F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E5A45C2C59AF8E9B3332CFEA15C6C401D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SJoyguBK12XUysU1_A06sXHN2n8.roa
Signing time: Wed 20 Mar 2024 05:11:44 +0000
ROA not before: Wed 20 Mar 2024 05:11:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 20 Mar 2024 06:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5a:45:c2:c5:9a:f8:e9:b3:33:2c:fe:a1:5c:6c:40:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 20 05:11:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=489a3282e04ad765d4cac535fc0d3ab171cdda7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:f2:d7:e9:aa:d4:f9:b3:f6:b6:ed:2b:7f:
de:8d:10:fa:33:0f:c5:a8:33:b0:68:c7:a3:61:78:
f9:0a:b7:0b:46:9c:ad:78:30:c3:e9:1a:78:09:88:
f3:99:a9:3c:3c:9e:1b:f2:f6:95:f3:40:e4:8f:86:
d6:d1:99:8a:1d:90:ce:4b:0e:3c:53:ef:71:13:f1:
e2:bb:b6:68:05:52:5d:2c:f9:96:51:0c:f4:43:07:
cb:bc:bd:2a:c7:a2:c1:65:bd:b0:f8:e5:61:4d:23:
93:41:3b:86:98:06:a0:e2:61:7a:a6:ca:e0:8e:3e:
bb:5b:85:be:ab:b0:b3:08:42:e1:cc:1b:b6:90:db:
c7:ff:45:f8:02:18:2c:50:69:e4:3f:f5:27:e9:1f:
7b:c7:16:04:c7:13:2c:17:2a:70:44:10:73:27:4b:
ec:da:ff:d4:15:63:f7:14:05:67:9d:3f:e3:64:f9:
46:96:00:82:61:98:14:9b:5e:91:d7:f8:07:64:03:
e2:66:fd:d7:c3:99:b1:ea:e2:92:48:62:c9:f3:f3:
0b:89:b8:64:a5:a7:11:42:59:16:1a:63:51:f0:9f:
df:ec:09:56:78:6e:d0:98:e0:d2:76:87:68:9f:65:
9d:b4:34:e8:c8:4c:9a:af:b8:c1:85:70:59:56:33:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9A:32:82:E0:4A:D7:65:D4:CA:C5:35:FC:0D:3A:B1:71:CD:DA:7F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SJoyguBK12XUysU1_A06sXHN2n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:08:53:79:3f:81:e6:09:a9:0c:3a:62:14:f5:cd:fc:e1:8d:
39:21:f2:07:97:0f:82:bb:68:95:39:19:43:84:35:9f:e1:4e:
1c:3f:26:2a:9b:b1:8b:de:10:32:e3:d6:92:61:51:20:25:ba:
47:1e:6b:37:8d:e1:62:0a:56:41:8b:77:7e:e6:e0:ec:12:1c:
f0:d3:e4:65:a7:bd:6e:8c:69:f0:4d:7f:56:7c:ed:db:c5:28:
30:aa:e4:85:36:50:ad:7f:2e:bc:ba:bc:2e:ed:81:8d:b4:96:
44:ba:50:b4:04:75:ab:e4:18:4d:34:37:50:5f:51:84:b5:a2:
28:f5:b6:56:3b:fd:8c:2e:25:84:d9:a7:13:a9:d1:c9:fe:58:
5a:37:6b:95:23:e5:c0:ad:dd:86:34:37:8c:06:3c:5c:94:fc:
21:ed:51:6e:b1:1b:35:d5:bf:d1:24:a0:af:f6:fb:c9:a7:aa:
7a:e1:22:e4:70:ff:8d:b4:57:b8:b4:9a:05:3f:f5:63:ee:85:
8c:fd:49:64:62:b2:dd:8d:de:e8:51:47:e0:92:87:94:95:9a:
8d:d3:6c:b0:e5:08:ea:70:d6:ef:e3:dd:94:c8:ad:12:09:a1:
16:1b:9b:5c:83:d5:fa:21:cc:ad:80:27:ac:37:06:3c:8b:63:
a7:8f:f6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 12:27:36 2024 by rpki-client on console.sobornost.net