Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TYJoVrSBio6RBo_9szW7HFEu4AY.roa
File: TYJoVrSBio6RBo_9szW7HFEu4AY.roa (raw, json)
Hash identifier: 00ilcnyokP9DvjVQ0OpLZin7El/5+s9qe4o1SPnurwE=
Subject key identifier: 4D:82:68:56:B4:81:8A:8E:91:06:8F:FD:B3:35:BB:1C:51:2E:E0:06
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E144BE22BD5A0D7487032BB778AE09863
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TYJoVrSBio6RBo_9szW7HFEu4AY.roa
Signing time: Wed 06 Mar 2024 15:05:01 +0000
ROA not before: Wed 06 Mar 2024 15:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:144b:42e1/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 06 Mar 2024 15:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:4b:e2:2b:d5:a0:d7:48:70:32:bb:77:8a:e0:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 6 15:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d826856b4818a8e91068ffdb335bb1c512ee006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:24:f4:9b:0e:67:e8:9a:80:6f:8b:23:1b:
89:2c:32:f2:70:25:49:d5:4a:d4:af:7d:00:1f:7f:
7e:f1:2f:0f:c7:7a:ed:65:fd:bd:c3:78:26:a1:a8:
68:fd:25:02:14:d0:10:51:ea:ec:c8:ca:12:98:b2:
26:fd:4a:31:dd:e5:6a:a7:1b:e1:9d:69:7e:40:a6:
fe:9d:31:e2:e0:ac:e3:94:21:86:f1:68:db:fa:4a:
3e:57:6c:b3:ec:ff:fc:e0:54:da:52:12:7c:8d:52:
f4:d9:88:10:9c:e7:b6:8f:cc:ac:a8:8b:41:14:bc:
fb:c8:bf:04:23:6c:d7:ab:5f:b4:11:19:ef:56:f8:
0a:7e:37:50:cc:b5:da:79:0e:aa:15:2f:18:91:10:
88:15:48:25:59:52:f4:5e:21:e0:bd:a5:4f:01:e2:
25:fa:34:a1:43:1c:b7:2a:c2:55:89:f2:b5:34:3e:
6e:d3:d0:c9:ab:19:03:3a:7e:2d:84:b5:2b:4e:c2:
5b:38:6f:b7:a1:e7:90:48:35:3e:ce:1c:d1:a6:47:
ff:44:45:9b:dd:b1:22:5f:6b:5d:20:ca:43:68:17:
78:c0:44:9b:8d:46:c5:f5:26:44:e2:31:b6:39:bc:
35:48:22:8c:01:7e:7b:b5:b9:4f:ec:68:cd:2d:e6:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:68:56:B4:81:8A:8E:91:06:8F:FD:B3:35:BB:1C:51:2E:E0:06
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/TYJoVrSBio6RBo_9szW7HFEu4AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:ed:df:46:00:13:21:bd:24:99:32:8f:27:70:83:6d:2d:78:
00:6a:c8:15:71:db:46:da:e1:17:1e:92:74:50:8e:04:dd:3b:
e4:1d:ea:be:8a:53:4a:9f:ad:ef:73:da:ee:19:63:30:76:80:
01:e7:df:95:e4:d9:bd:71:5f:79:cb:50:30:ab:5d:ce:46:98:
99:e0:67:e2:b0:81:7e:c1:d2:8d:9f:4e:7c:08:4e:36:4b:53:
75:aa:eb:0c:e4:84:07:18:29:73:2f:80:d8:30:3b:88:dc:6b:
a9:8a:1c:13:f8:65:11:81:12:c6:33:be:83:82:5e:78:56:6b:
37:83:7b:57:32:5d:ca:c2:8a:92:7e:8f:9b:d0:68:a7:28:77:
ae:48:8c:4f:68:f0:41:28:7b:e4:c3:6b:a4:5a:21:47:c8:f8:
b6:3f:a4:e1:d6:35:7e:29:2d:2f:bd:e8:1b:f0:41:cd:c7:aa:
ed:78:52:b5:f8:e0:76:85:63:c8:9a:df:d9:e6:dd:24:d7:73:
8a:49:0d:b5:f8:53:7e:5b:35:da:09:84:58:32:72:d8:b8:e5:
4b:61:83:f6:92:e4:d6:49:b5:ae:13:bb:b4:a6:79:07:15:c3:
54:4a:65:ef:64:c7:12:37:84:55:e9:4b:ae:78:29:b6:0e:80:
50:75:19:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 21:41:30 2024 by rpki-client on console.sobornost.net