Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_2KLuJjyAlx57SLLCh8xglhMMhs.roa
File: _2KLuJjyAlx57SLLCh8xglhMMhs.roa (raw, json)
Hash identifier: +m2lp+R4Vmi0mLPMo8yGuYytYo5NdbRjHxL9w5r+bvc=
Subject key identifier: FF:62:8B:B8:98:F2:02:5C:79:ED:22:CB:0A:1F:31:82:58:4C:32:1B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E849615EAB9732A69B7D687DD49F73A2C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_2KLuJjyAlx57SLLCh8xglhMMhs.roa
Signing time: Thu 28 Mar 2024 10:23:32 +0000
ROA not before: Thu 28 Mar 2024 10:23:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 28 Mar 2024 11:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:96:15:ea:b9:73:2a:69:b7:d6:87:dd:49:f7:3a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 28 10:23:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff628bb898f2025c79ed22cb0a1f3182584c321b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:62:8d:66:19:44:78:e4:c1:74:f1:c6:e3:
33:00:0c:49:35:38:04:3b:06:fa:ed:43:cf:fa:5a:
4c:15:f6:f8:5b:d6:9b:9f:3e:f8:99:c6:1c:d5:b4:
a3:19:12:14:a6:a2:ab:0c:fe:73:23:84:c8:51:bb:
62:a7:b9:0b:f4:49:33:38:d2:1c:82:55:47:d6:82:
99:70:c1:4e:0c:a4:10:fe:ec:eb:32:0e:d1:fa:03:
6d:3f:b3:39:66:c1:45:b6:60:48:d2:64:f7:a7:aa:
e9:49:ca:f1:38:8f:b1:56:23:a3:45:14:3a:51:7d:
02:22:85:12:34:ca:ff:b4:96:e2:20:8d:9e:43:8c:
99:36:64:d3:57:45:89:f3:84:85:fb:92:26:26:54:
dd:02:84:15:49:cc:28:ef:44:16:d9:0d:f9:18:8b:
a3:38:96:4d:9d:7e:77:6e:da:c4:66:35:14:88:c9:
15:1b:64:74:75:a8:4e:9b:11:49:07:81:23:86:13:
28:9c:e6:fa:6a:80:41:30:a7:00:e8:f8:11:7f:5e:
dc:d7:b6:ef:b2:08:fa:fe:a0:58:cb:8e:52:e6:b5:
70:46:39:71:d0:cd:4c:3c:98:5b:8d:7d:0e:d9:aa:
ad:83:25:a4:64:cc:25:49:86:70:04:4f:aa:bf:76:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:62:8B:B8:98:F2:02:5C:79:ED:22:CB:0A:1F:31:82:58:4C:32:1B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_2KLuJjyAlx57SLLCh8xglhMMhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:92:b2:ab:0b:02:4b:ee:a4:d6:d1:2a:18:b8:c3:d3:06:9d:
a7:3d:06:ef:8a:b6:85:72:9a:78:ca:88:98:09:3c:c1:b9:f9:
28:a1:41:8e:fb:db:bf:be:41:42:25:d2:89:ba:9c:eb:2d:6e:
91:af:6f:1a:ec:19:2c:bf:f5:05:61:6d:bc:1a:1a:f0:6b:21:
e4:c4:a7:88:59:df:27:80:f9:2b:28:2e:0d:79:c0:c3:f3:3f:
c8:e3:23:83:bb:30:41:86:6d:3a:80:86:5c:e5:11:c6:12:83:
5a:9c:a5:97:66:d2:ff:96:bc:85:f6:4f:5a:91:8b:56:d8:d1:
79:a0:eb:a0:c5:77:c3:8b:2b:c2:e5:d5:f4:97:f1:95:da:ed:
f7:e4:76:c8:da:a9:4f:0b:6d:57:e8:93:32:35:5a:6f:4d:d6:
62:ac:44:06:8c:a3:4f:e4:c5:86:9a:c7:a9:96:21:5d:0f:d0:
cb:4c:31:c7:1d:56:a9:5e:95:c7:59:aa:55:63:b7:77:f7:62:
d3:c0:f1:83:e0:ba:cc:bd:00:b3:4a:3f:01:53:b1:c9:d8:62:
e4:86:7f:15:17:3d:e5:97:cd:97:13:51:19:a3:83:42:e0:f2:
e2:64:fa:0a:88:a6:08:24:7a:2e:04:70:37:b0:7b:be:40:d2:
08:f4:51:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 17:46:24 2024 by rpki-client on console.sobornost.net