Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZO9j1_DZsEChW3Iu0O9rZ2UrML0.roa
File: ZO9j1_DZsEChW3Iu0O9rZ2UrML0.roa (raw, json)
Hash identifier: JiDnb0Hi/+6UDwcVGwJcVusr9+0TCjcCB7FB/boaILQ=
Subject key identifier: 64:EF:63:D7:F0:D9:B0:40:A1:5B:72:2E:D0:EF:6B:67:65:2B:30:BD
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E21A2F00FB4542E7A9EFD2D26622E995F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZO9j1_DZsEChW3Iu0O9rZ2UrML0.roa
Signing time: Sat 09 Mar 2024 05:15:10 +0000
ROA not before: Sat 09 Mar 2024 05:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 09 Mar 2024 06:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:21:a2:f0:0f:b4:54:2e:7a:9e:fd:2d:26:62:2e:99:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 9 05:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64ef63d7f0d9b040a15b722ed0ef6b67652b30bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:62:91:f2:b6:ab:90:8e:f5:9d:19:5f:51:
d2:9f:e2:10:c8:85:b4:01:b9:60:32:f8:f7:79:a2:
e7:3a:86:92:47:f3:07:c0:87:2e:92:fd:b0:38:3d:
15:e2:00:05:3b:43:49:d3:f3:9a:61:aa:ac:44:17:
a6:03:47:2e:e5:7d:60:e5:44:85:01:63:92:77:c3:
96:68:61:22:42:32:e7:cd:ef:59:bc:6c:c9:5f:96:
d1:37:87:6f:ad:27:f4:6b:57:f5:55:a5:6d:de:2d:
b2:ee:e2:f3:09:fc:57:a8:1b:87:1f:a3:2d:c8:d4:
c7:d1:56:5d:b8:ca:17:86:76:fb:6f:fc:11:c2:0a:
07:87:1d:be:3e:32:46:5e:de:6d:b6:87:8c:38:50:
93:bc:58:f6:d1:95:9f:cd:90:c7:45:63:bb:1c:17:
ab:d4:b4:eb:4b:a0:eb:a8:6b:1b:6d:a5:a8:e2:db:
0a:3d:bd:c7:25:f5:ec:a9:f9:57:77:53:77:f4:e2:
a5:81:e7:d4:e7:7f:08:a1:4d:2b:45:49:f7:8e:c3:
8e:e9:00:e3:d9:35:9a:12:e4:41:38:51:4d:d8:48:
d0:5c:eb:57:73:69:96:ab:62:25:31:8f:7e:cf:0b:
9d:44:33:40:67:a7:de:e5:83:e9:df:e3:fd:fe:c8:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EF:63:D7:F0:D9:B0:40:A1:5B:72:2E:D0:EF:6B:67:65:2B:30:BD
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ZO9j1_DZsEChW3Iu0O9rZ2UrML0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:05:87:65:94:85:6f:2b:a4:61:8c:6a:c5:c9:ab:cc:99:54:
3f:55:77:d3:33:59:c3:0e:84:7a:69:13:85:fe:54:c6:e0:bf:
d4:af:aa:8f:f6:01:0b:ca:53:90:40:74:89:ad:f8:64:c0:0f:
dd:8c:1b:93:ef:1b:99:a2:7f:0a:88:c7:39:27:3c:e1:91:ba:
ef:bb:41:d6:cc:13:91:a6:cc:78:c2:31:84:b0:9f:ae:db:fd:
8a:9f:49:4b:a1:c5:46:f0:35:9a:1d:92:c6:27:75:90:67:74:
ce:52:70:06:84:c4:16:66:0b:bd:24:43:de:4d:aa:3e:ef:36:
72:40:cb:0f:d7:13:92:f8:df:cd:15:e1:5a:79:af:ec:12:cc:
4f:4f:43:c7:7e:77:59:da:56:8e:6b:71:2c:1c:8a:1e:f3:ce:
e3:17:0c:5e:4f:18:2d:7d:29:b3:03:2d:2b:52:f1:fd:37:f9:
0b:9f:66:a2:6f:d3:00:d8:c0:d5:db:8b:ba:37:1c:16:d6:ce:
10:c9:65:bc:a7:ef:55:18:71:71:c3:a2:0c:4f:82:30:18:10:
f9:a9:11:fe:e4:f7:79:c8:fe:6a:c4:e4:15:d0:9f:bb:26:76:
db:5a:ca:16:1f:b1:e7:86:bd:e9:f5:cb:49:95:8f:0a:57:12:
d3:a9:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 11:04:21 2024 by rpki-client on console.sobornost.net