Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Sy_7EO-BE6RSPzR6-hMhrTjqd0M.roa
File: Sy_7EO-BE6RSPzR6-hMhrTjqd0M.roa (raw, json)
Hash identifier: 8xOmty9VFwuwSFjCIrmUOQMpLiK8d6A2jxZPv+gxgRE=
Subject key identifier: 4B:2F:FB:10:EF:81:13:A4:52:3F:34:7A:FA:13:21:AD:38:EA:77:43
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF6AF1F309D63E3832EEF75E213A60FAB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Sy_7EO-BE6RSPzR6-hMhrTjqd0M.roa
Signing time: Thu 29 Feb 2024 21:04:48 +0000
ROA not before: Thu 29 Feb 2024 21:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18d:f6ae:a459/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 29 Feb 2024 21:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f6:af:1f:30:9d:63:e3:83:2e:ef:75:e2:13:a6:0f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 29 21:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b2ffb10ef8113a4523f347afa1321ad38ea7743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:cc:44:ae:f8:a2:1a:8a:e5:52:15:c8:e4:
d6:cc:9a:46:ca:a8:31:c8:0f:14:5c:80:63:3e:29:
c9:d4:5c:13:85:89:f5:4d:5d:e8:c5:98:07:22:86:
64:6f:0a:ca:f8:4a:d7:5e:49:24:87:33:11:47:95:
09:4f:6a:33:84:5b:9e:ff:94:dd:03:8d:fd:e3:f4:
ae:86:9c:07:50:b8:74:45:35:99:c8:12:5b:09:6a:
2e:24:be:34:12:1d:34:0a:83:ee:a3:ac:4a:01:b1:
14:be:73:e9:cc:71:6e:a6:b1:8f:5d:0f:d5:1b:08:
89:5b:81:8b:b2:2e:7c:31:b1:25:e9:84:89:d5:81:
9b:93:fe:40:d8:09:3f:f3:48:73:a3:20:31:4b:1b:
fb:20:bf:1e:08:92:22:95:18:f1:6b:e4:09:25:d9:
7c:07:97:21:81:50:c3:a6:70:7c:fb:f3:be:c1:6d:
44:a1:5f:43:26:f1:18:a7:8e:6d:b3:87:f7:6e:94:
d5:61:28:57:6e:dc:58:dc:5b:de:0f:78:66:70:54:
e8:44:0b:96:d6:ed:0c:4a:5c:6e:37:91:db:42:2b:
a8:d8:77:56:64:94:c8:5c:c4:30:43:67:a5:40:e5:
7d:23:03:3d:8a:da:c7:d6:22:02:9a:4b:29:ae:a7:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2F:FB:10:EF:81:13:A4:52:3F:34:7A:FA:13:21:AD:38:EA:77:43
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Sy_7EO-BE6RSPzR6-hMhrTjqd0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:09:a7:ba:d8:96:ed:1f:80:f3:9c:79:55:8f:d3:ec:53:e9:
d0:a7:c8:e4:3d:d6:f4:8f:0e:e5:b5:9c:e2:c3:d9:f2:f8:39:
47:c3:f4:60:02:63:bb:c9:b5:27:21:5d:cd:6c:7f:72:64:cd:
d0:03:0d:14:48:f3:6e:6e:23:57:b0:ed:65:a8:8f:a7:f3:dd:
5b:e2:02:6a:bc:d5:40:e0:de:70:dd:1e:8e:4f:c5:7a:a7:3b:
7b:d6:c5:4c:1d:08:f5:f4:7c:55:45:05:a2:af:a4:74:49:4f:
98:52:57:d6:ff:d7:67:64:f6:2e:20:8b:15:d5:3d:e1:a7:94:
10:e5:a6:ff:72:69:47:6b:03:7f:6d:66:2d:60:e7:de:23:eb:
a3:5b:ff:80:82:4b:02:8d:eb:fa:9f:66:be:e2:ab:6d:c4:b5:
bf:1e:d7:9a:df:58:03:7c:64:7e:54:13:15:e6:2d:5a:c5:2a:
62:a7:a7:70:5d:0e:78:fc:48:57:8f:b9:12:7d:79:c0:44:b3:
3a:b9:99:c6:31:5b:63:e9:71:13:af:86:e6:46:cc:42:46:ab:
1f:d9:14:bb:f6:9f:63:97:a5:c5:79:ec:a8:a9:1b:04:8a:19:
b0:98:61:71:14:38:4d:71:9d:31:b9:56:65:a6:9c:3d:2a:ec:
86:88:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 05:11:42 2024 by rpki-client on console.sobornost.net