Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TD8MoC5hC2xgFWDuafqRCg5Cyjs.roa
File: TD8MoC5hC2xgFWDuafqRCg5Cyjs.roa (raw, json)
Hash identifier: PauHzIx9xYw/pzRStxzRPYCXpeIydBgIkPkK0Vunmuc=
Subject key identifier: 4C:3F:0C:A0:2E:61:0B:6C:60:15:60:EE:69:FA:91:0A:0E:42:CA:3B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE588EC2D87938B4B3138E37C4CEBC2F4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TD8MoC5hC2xgFWDuafqRCg5Cyjs.roa
Signing time: Sun 07 Jan 2024 20:06:44 +0000
ROA not before: Sun 07 Jan 2024 20:06:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:e586:a3a1/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 07 Jan 2024 20:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e5:88:ec:2d:87:93:8b:4b:31:38:e3:7c:4c:eb:c2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 7 20:06:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c3f0ca02e610b6c601560ee69fa910a0e42ca3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:f1:5a:2c:87:21:ff:6c:81:d7:2d:ec:8f:
f8:7a:46:d1:10:05:53:ca:5a:5f:af:0c:09:e3:83:
fb:c9:b0:e1:c7:d4:fc:27:f2:03:5a:e4:78:b4:57:
da:4c:7d:5e:df:1a:da:17:d4:a1:84:89:30:d7:98:
b5:5a:51:8a:d5:63:de:aa:d2:b0:73:9c:66:9e:54:
8c:0e:df:36:b4:8d:00:c7:08:23:08:0b:12:c3:3c:
ea:ea:1b:7f:60:6b:2c:14:8d:f3:3d:b0:47:60:2d:
c9:b9:4c:9e:f3:43:1e:64:61:1c:75:6e:96:ad:50:
44:4b:69:39:88:c4:37:0e:a8:a0:a7:ec:60:a2:c2:
1d:39:9d:f9:7b:a3:62:4c:75:fd:e9:95:99:e7:37:
74:f7:4e:15:b9:62:f0:50:1e:ba:87:d8:4c:9b:df:
f5:41:ff:c8:1b:1e:d2:a8:93:f5:b5:ad:62:25:6b:
92:86:cb:60:7d:bb:5c:31:0a:c7:44:a5:cd:4d:f2:
e1:d9:e6:0f:a1:6b:c1:74:85:7a:18:46:14:89:e6:
be:12:66:6b:e0:fc:82:d1:38:1f:4e:d7:6a:c0:1e:
de:bb:88:02:f9:0c:be:e3:20:43:25:35:f3:0b:e3:
bd:63:32:f0:a8:01:8d:6d:a2:25:33:bd:30:1a:5f:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3F:0C:A0:2E:61:0B:6C:60:15:60:EE:69:FA:91:0A:0E:42:CA:3B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TD8MoC5hC2xgFWDuafqRCg5Cyjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:bc:fe:85:4f:85:47:f9:62:67:62:d3:a1:d3:8f:d5:56:09:
81:57:65:53:06:30:9a:63:a1:02:78:cf:0b:97:59:df:b3:2b:
30:9f:9e:48:d1:b9:d5:9a:0e:db:80:8c:ad:c8:92:2f:6a:19:
da:e0:ca:24:2e:93:07:57:cd:aa:22:fa:8f:2d:bf:4e:d8:3f:
95:38:d1:44:87:6f:f5:9f:e4:3c:b6:b0:2e:91:4d:6e:0e:64:
d9:7f:b5:49:d8:f2:db:87:2b:4e:13:bc:9d:33:18:12:a3:b2:
51:54:76:a2:18:01:4b:44:22:4b:00:9c:ce:fe:45:84:48:90:
76:9e:27:fd:23:4d:c6:8c:73:62:55:4a:1a:4d:81:54:b3:2f:
f7:c9:37:17:06:d3:ee:05:da:37:7f:b0:df:fe:0e:25:20:b2:
6f:9a:27:38:16:9b:0d:f6:c9:12:61:cc:17:7f:68:ca:64:aa:
fa:45:a5:4b:c3:4f:ef:8e:7b:9a:55:bb:29:73:88:db:3b:c5:
ce:44:4c:4b:8f:c4:09:32:2b:4d:e5:23:0f:b7:a2:f7:c0:a5:
65:aa:35:2c:9b:8e:f7:f5:69:00:e3:53:1e:32:e5:74:ac:29:
56:28:94:6c:4d:18:45:66:5f:f1:cf:04:9d:10:69:5c:26:0c:
d4:b7:bd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 22:45:51 2024 by rpki-client on console.sobornost.net