Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SylgUPM_uBgGSK_hQne68ekos1k.roa
File: SylgUPM_uBgGSK_hQne68ekos1k.roa (raw, json)
Hash identifier: XhFy1vfC0M4nHRFADV0LIKAT2mrB0QApG2UxrmWXlDA=
Subject key identifier: 4B:29:60:50:F3:3F:B8:18:06:48:AF:E1:42:77:BA:F1:E9:28:B3:59
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E7D75A2B1936A8C72C6DC2F246C89665D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SylgUPM_uBgGSK_hQne68ekos1k.roa
Signing time: Wed 27 Mar 2024 01:10:45 +0000
ROA not before: Wed 27 Mar 2024 01:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 27 Mar 2024 02:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7d:75:a2:b1:93:6a:8c:72:c6:dc:2f:24:6c:89:66:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 27 01:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b296050f33fb8180648afe14277baf1e928b359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:1e:af:80:50:4b:20:6d:38:17:a4:a2:2f:
02:ae:82:c9:02:fc:f4:87:da:9b:eb:40:65:e8:a5:
8b:35:66:7a:df:f0:62:95:4a:32:05:a1:3d:8a:b3:
00:22:04:98:df:5a:21:1c:0f:09:13:e0:22:f3:43:
9e:6a:8f:f8:dd:3b:bf:7f:df:ba:cd:75:18:55:9c:
b6:f6:0c:e6:1d:c7:46:0e:37:2e:ae:07:9f:bd:fc:
be:df:6b:c9:d5:15:9f:cc:8a:9a:57:fa:8c:6a:5e:
cd:7f:5a:a5:a0:33:01:25:4a:a2:68:07:f5:93:ab:
d0:fa:7f:50:08:62:15:63:ae:f7:7f:ed:59:73:56:
d2:4e:4c:f6:b3:0b:6e:9f:c5:4d:f2:b7:fd:d5:65:
9f:61:b0:2d:0c:04:e5:2b:f5:f3:64:a5:a7:df:ed:
05:74:bd:d3:66:47:54:46:1d:6b:bb:0e:5c:65:c8:
e9:1a:7e:30:6e:47:87:19:e3:7d:07:10:e2:a7:13:
5f:4f:31:9b:76:9f:eb:76:1d:52:fe:d6:8a:3c:c5:
2e:51:77:d0:2c:8f:f5:fb:98:79:de:f6:4a:78:46:
34:c6:76:ba:81:32:7b:7b:90:9e:46:c8:0f:0e:b6:
23:61:a2:ae:52:c7:fb:b8:19:36:56:9d:d4:20:a5:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:29:60:50:F3:3F:B8:18:06:48:AF:E1:42:77:BA:F1:E9:28:B3:59
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/SylgUPM_uBgGSK_hQne68ekos1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:bb:dc:70:58:da:30:1d:fd:cc:08:21:4d:d1:d7:88:a9:56:
21:7a:cc:1a:ff:23:36:ab:e4:e3:14:1e:28:1e:4c:d2:f1:ac:
c3:8a:cd:8a:2c:34:af:2b:64:f2:58:90:94:52:c5:aa:90:92:
54:43:95:8c:c1:37:96:7e:52:1c:48:0b:fd:75:21:06:cd:f0:
95:85:d4:77:4c:d2:e4:9c:21:fe:71:55:e7:c9:d2:e3:42:d8:
1c:3f:e2:08:8b:46:87:82:93:d2:06:43:48:49:a5:87:de:e8:
47:6f:d2:ac:a8:04:7b:2b:4b:c3:5f:b4:05:86:52:13:e4:03:
ef:b7:79:50:6a:87:9e:18:16:65:a1:f8:78:c9:6c:82:12:55:
c6:ce:b3:da:2a:c5:a7:77:75:c4:88:8b:97:9b:10:44:33:89:
1a:eb:3d:17:6b:1b:5e:53:96:38:24:68:99:0d:b3:0b:18:36:
02:5f:8f:18:78:fe:41:e3:a4:ca:22:cb:64:fd:81:76:16:96:
ad:6d:fd:91:e0:1f:82:17:a7:41:bc:9f:99:fc:51:60:0f:e6:
bb:54:e3:2e:e6:72:af:12:bf:06:e8:59:91:45:88:2b:59:57:
65:bc:10:14:ef:34:fe:5e:9c:89:2e:f2:68:f9:2f:28:de:a0:
69:b6:ab:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 10:01:14 2024 by rpki-client on console.sobornost.net