Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XlHKzzDrcqKtouung6yxkTpiXFI.roa
File: XlHKzzDrcqKtouung6yxkTpiXFI.roa (raw, json)
Hash identifier: FGXITexFPb2aDp4Yv859U4QZJBFcJfytJhdrr6cQ8TE=
Subject key identifier: 5E:51:CA:CF:30:EB:72:A2:AD:A2:EB:A7:83:AC:B1:91:3A:62:5C:52
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8B691C128E678FB92052E90CEAC3B0FF
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XlHKzzDrcqKtouung6yxkTpiXFI.roa
Signing time: Fri 29 Mar 2024 18:11:45 +0000
ROA not before: Fri 29 Mar 2024 18:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 29 Mar 2024 19:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8b:69:1c:12:8e:67:8f:b9:20:52:e9:0c:ea:c3:b0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 29 18:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e51cacf30eb72a2ada2eba783acb1913a625c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c7:f6:c0:87:08:56:f3:81:7c:04:03:1d:ee:
8d:fe:7c:58:64:e6:85:4c:e9:10:6f:88:57:8b:2e:
1f:a1:6e:63:ff:11:1f:06:fe:3d:5c:02:f6:7e:d6:
b8:fc:7c:c7:89:f2:5e:c8:99:ee:f1:01:1b:84:9f:
66:a1:0f:b1:a0:da:f8:9e:9f:c6:e8:14:08:36:a1:
7e:4e:9c:ba:2a:3a:c6:d2:c1:04:c6:14:47:0a:fc:
95:a9:56:5c:7d:c8:4e:86:ea:d6:c2:e5:97:fb:1c:
51:79:a3:eb:3e:e4:a2:4b:10:df:b0:ec:be:ae:62:
23:8a:53:22:98:55:5d:7f:3e:11:c2:f0:de:eb:22:
56:da:98:51:61:7d:a1:4a:d5:8f:52:67:c3:20:f9:
5b:45:26:2a:35:ca:ea:9f:19:1f:d0:4b:f6:1c:b1:
3e:87:55:b9:0f:9e:5b:71:ff:5b:03:38:68:7f:dd:
97:72:35:ba:68:5b:f5:ac:45:67:77:39:4b:fe:61:
e2:ed:bb:8e:ee:70:60:07:5e:c0:26:27:5c:b1:82:
3b:ee:3f:53:b6:90:2a:01:fd:85:94:6f:4f:ef:7c:
93:60:e4:c7:f4:dd:0f:2a:1f:a5:2b:20:fd:5c:93:
c8:df:9f:3d:00:27:4c:1a:e7:b0:8a:e1:92:e3:c8:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:CA:CF:30:EB:72:A2:AD:A2:EB:A7:83:AC:B1:91:3A:62:5C:52
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/XlHKzzDrcqKtouung6yxkTpiXFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:e8:86:8a:1e:bf:b6:6b:e1:9c:5d:f7:c6:e8:b7:35:03:6c:
8f:8b:64:61:e2:cd:61:4a:e6:6a:a7:5f:c8:50:62:47:40:db:
95:93:12:50:e8:5a:d8:10:c7:bb:88:cf:11:f2:7d:89:f5:8f:
4a:6d:25:2b:41:ed:d9:e2:15:22:6d:d0:db:72:b6:05:ef:8c:
96:b5:39:25:ff:2c:e5:26:a5:c8:dc:2b:93:6e:68:ff:6c:8b:
f9:d5:a1:95:89:f4:1f:4a:b2:cc:5e:6b:3c:e9:d2:93:15:4f:
de:38:6b:73:c4:c8:ec:a1:48:f0:4b:51:69:cb:b5:fa:3e:50:
42:2e:ee:04:d1:93:b9:9e:e2:73:56:dc:4d:07:5b:d6:ef:ec:
97:ca:e9:f6:5b:0b:2d:04:97:90:ec:6c:9c:47:eb:c5:37:bc:
03:01:a7:11:39:c1:f5:d8:ec:96:33:2d:27:36:68:97:8c:7e:
ad:c2:44:cb:fe:75:f3:02:6d:e3:48:0c:04:d1:ea:6e:d3:db:
73:0e:54:c6:81:8c:c5:92:70:74:c6:0a:29:47:35:6f:dd:d5:
36:77:94:db:ba:f9:65:6a:68:7a:c7:62:79:b0:fe:0d:fa:a6:
de:43:4f:79:89:bd:e5:bf:6b:b9:fa:9e:71:a6:59:25:2c:54:
f2:28:7f:5a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6LaRwSjmePuSBS6Qzqw7D/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzI5MTgxMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTUxY2FjZjMwZWI3MmEyYWRhMmViYTc4M2FjYjE5MTNhNjI1YzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsf2wIcIVvOBfAQDHe6N/nxYZOaF
TOkQb4hXiy4foW5j/xEfBv49XAL2fta4/HzHifJeyJnu8QEbhJ9moQ+xoNr4np/G
6BQINqF+Tpy6KjrG0sEExhRHCvyVqVZcfchOhurWwuWX+xxReaPrPuSiSxDfsOy+
rmIjilMimFVdfz4RwvDe6yJW2phRYX2hStWPUmfDIPlbRSYqNcrqnxkf0Ev2HLE+
h1W5D55bcf9bAzhof92XcjW6aFv1rEVndzlL/mHi7buO7nBgB17AJidcsYI77j9T
tpAqAf2FlG9P73yTYOTH9N0PKh+lKyD9XJPI3589ACdMGuewiuGS48hUkwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF5Rys8w63KiraLrp4OssZE6YlxSMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvWGxIS3p6RHJjcUt0b3V1bmc2eXhrVHBpWEZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHDohooev7Zr4Zxd98bo
tzUDbI+LZGHizWFK5mqnX8hQYkdA25WTElDoWtgQx7uIzxHyfYn1j0ptJStB7dni
FSJt0NtytgXvjJa1OSX/LOUmpcjcK5NuaP9si/nVoZWJ9B9Kssxeazzp0pMVT944
a3PEyOyhSPBLUWnLtfo+UEIu7gTRk7me4nNW3E0HW9bv7JfK6fZbCy0El5DsbJxH
68U3vAMBpxE5wfXY7JYzLSc2aJeMfq3CRMv+dfMCbeNIDATR6m7T23MOVMaBjMWS
cHTGCilHNW/d1TZ3lNu6+WVqaHrHYnmw/g36pt5DT3mJveW/a7n6nnGmWSUsVPIo
f1o=
-----END CERTIFICATE-----
Generated at Sat Mar 30 00:02:24 2024 by rpki-client on console.sobornost.net