Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TDrYTfdcWfZyUgehKDuz0EiXW3g.roa
File: TDrYTfdcWfZyUgehKDuz0EiXW3g.roa (raw, json)
Hash identifier: 5vAHfV2easFtdWFpd0nNdwdN935j0Mgjh5CzHIsPm0I=
Subject key identifier: 4C:3A:D8:4D:F7:5C:59:F6:72:52:07:A1:28:3B:B3:D0:48:97:5B:78
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E7998DEED252387F31F142BC35D7FC1C7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TDrYTfdcWfZyUgehKDuz0EiXW3g.roa
Signing time: Tue 26 Mar 2024 07:10:45 +0000
ROA not before: Tue 26 Mar 2024 07:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 26 Mar 2024 08:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:79:98:de:ed:25:23:87:f3:1f:14:2b:c3:5d:7f:c1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 26 07:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c3ad84df75c59f6725207a1283bb3d048975b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:64:16:32:69:47:a3:1c:5c:90:63:fc:43:91:
18:a4:59:ee:92:4d:8e:5d:3c:73:d4:f7:9c:2b:b0:
26:13:bf:66:90:76:f0:cd:65:53:8c:3e:5c:b0:63:
da:af:b8:68:00:03:51:f3:5a:1d:69:ad:b7:2d:3c:
b6:80:73:42:20:d3:54:6e:dc:f5:22:53:b4:d5:93:
6b:a8:ee:91:19:ae:03:ba:82:68:5f:42:e6:f2:2f:
b5:eb:85:40:12:5f:ed:d2:01:8e:e9:d4:6a:f1:5b:
af:93:08:6e:ae:2a:90:d2:70:d0:e5:0c:e9:0f:9b:
4a:00:b0:0e:e5:55:ca:b6:2f:f0:b8:72:0e:cb:0c:
97:d3:f7:28:a3:d9:41:97:6e:68:45:18:b2:6f:db:
04:c1:9b:fc:1d:2d:ab:e9:57:cf:07:a7:4e:a5:df:
b6:30:93:2c:0f:4a:16:36:1b:8d:f3:2b:25:e3:52:
b9:e8:52:54:ed:8d:19:7e:67:de:19:e8:a0:ff:69:
89:81:29:00:fd:c7:4f:dc:7a:17:0f:4a:1a:dd:cd:
48:7d:56:1f:f2:3f:09:a2:f9:3d:fa:e3:ea:c7:ae:
37:c3:1b:07:d7:de:c1:fd:38:ce:c3:d4:42:f0:6c:
eb:7a:ed:33:21:ac:d0:2f:7d:39:f4:f8:54:82:78:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3A:D8:4D:F7:5C:59:F6:72:52:07:A1:28:3B:B3:D0:48:97:5B:78
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TDrYTfdcWfZyUgehKDuz0EiXW3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:29:fe:4f:2e:af:2f:9d:a4:5b:3c:57:05:55:23:20:8a:f0:
cf:e1:50:cc:87:e6:5a:57:f0:40:96:33:64:62:45:c1:31:5c:
ab:e5:a8:11:bd:53:9a:0e:bb:fd:75:30:44:08:8e:cd:28:24:
50:69:69:a3:d7:44:bd:8d:ab:2b:60:58:0b:cf:55:4e:3e:7a:
6c:f4:e5:e6:62:4d:bb:b7:f6:a3:73:e6:91:58:cc:30:00:23:
7e:90:04:41:4f:23:bf:ea:a6:26:36:b1:17:51:fd:2c:a0:23:
25:22:0c:91:03:20:e0:f9:1a:49:47:d0:2e:28:0f:26:bf:85:
d1:61:0e:e6:a8:a8:a8:bf:37:84:a2:f8:10:e7:04:7f:4f:10:
db:5e:2e:81:df:f0:97:1e:8c:fb:f2:c4:49:d2:8f:6b:5c:04:
92:5a:78:8d:db:7f:e4:a7:4b:fb:9e:1f:5c:46:80:d4:d5:ee:
10:cf:bc:af:11:3b:2f:6b:cc:12:87:7d:04:3e:29:a3:8f:73:
c8:fc:1e:f5:15:5a:21:bd:b3:df:f7:6b:b6:2c:d5:99:25:20:
33:59:61:5e:4c:61:a7:46:22:de:21:2f:0f:c6:ef:7a:e0:ba:
b1:85:cb:6e:bd:59:11:14:61:52:40:47:65:f1:86:dc:85:51:
2e:0e:60:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 14:17:48 2024 by rpki-client on console.sobornost.net