Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_3vELpB3OoSgeSQ91S3l61zR1LE.roa
File: _3vELpB3OoSgeSQ91S3l61zR1LE.roa (raw, json)
Hash identifier: +7+Z7oNb+gyfPZeSz2eZJW1nKFm4pLyhQqQq3JfA8Z8=
Subject key identifier: FF:7B:C4:2E:90:77:3A:84:A0:79:24:3D:D5:2D:E5:EB:5C:D1:D4:B1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E48E3624E4A9E659C23A14709E933A177
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_3vELpB3OoSgeSQ91S3l61zR1LE.roa
Signing time: Sat 16 Mar 2024 20:10:45 +0000
ROA not before: Sat 16 Mar 2024 20:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 16 Mar 2024 21:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:e3:62:4e:4a:9e:65:9c:23:a1:47:09:e9:33:a1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 16 20:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff7bc42e90773a84a079243dd52de5eb5cd1d4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:15:56:72:ab:c0:6e:0f:57:3b:93:b8:5e:e4:
68:d1:b4:25:36:7c:3a:8d:64:53:6d:95:e8:f5:a1:
34:ae:92:fa:be:dd:f6:97:5b:de:08:bf:46:e4:9d:
32:b0:2f:71:47:d5:6a:94:b0:2d:fb:a2:41:14:65:
04:84:6f:58:76:74:4a:83:00:aa:17:17:67:b2:c2:
0b:dc:5f:2e:7d:e7:2b:a4:48:ee:c9:ee:31:23:b3:
a6:66:36:a0:cc:fc:9c:85:7c:a1:1f:3b:95:3f:72:
1d:7c:cd:1c:e5:e2:6a:78:4e:9f:aa:4e:db:01:04:
b2:e8:7e:48:68:a4:cb:78:c2:de:31:e0:2e:42:19:
a3:34:77:e3:e2:3c:2a:21:23:2e:e0:c8:c9:af:c5:
4c:18:7f:99:4e:7e:3f:c4:15:ad:23:55:83:44:c4:
bd:ca:f7:50:68:7a:38:99:6d:81:72:1c:a4:30:af:
62:b8:69:c0:22:65:57:14:1b:e8:cc:5c:98:52:73:
ca:d3:c6:8c:8b:a1:ac:68:b7:9a:a4:43:87:58:9a:
48:2e:29:2e:db:4b:9b:e2:d7:d8:74:42:0d:d1:c4:
c1:e4:79:8f:cd:39:3c:56:5b:0f:5f:4e:f6:b9:dc:
fe:5b:5c:43:a5:e9:2d:c5:bf:1e:eb:ae:b5:bb:69:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:C4:2E:90:77:3A:84:A0:79:24:3D:D5:2D:E5:EB:5C:D1:D4:B1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_3vELpB3OoSgeSQ91S3l61zR1LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:36:4b:3b:dc:66:0c:b6:2c:1e:b7:4d:1e:cf:32:75:f1:99:
31:df:93:09:b1:9f:08:70:52:bf:ca:85:5b:a1:60:ed:29:e3:
b7:72:3b:7e:09:d1:7b:25:6f:cf:27:a5:7b:63:56:d2:cd:e1:
63:92:a8:79:dd:fe:d4:74:0b:e7:e6:a1:72:1d:f1:12:dc:63:
cc:80:bc:2a:a9:c7:b9:6b:1a:50:1a:ee:ea:62:dd:75:95:42:
a0:2c:2b:a3:08:ca:83:62:d3:95:16:73:1c:03:14:a9:92:30:
b2:d9:e3:67:cd:e1:46:f2:56:9c:57:66:0d:c5:d4:19:8a:c7:
05:1d:10:07:23:aa:75:cb:37:da:3b:c2:47:f8:22:f2:e6:cd:
c5:52:06:a7:2a:69:e9:fe:c1:6a:5d:c6:0e:be:bc:38:08:96:
90:b4:22:ec:b1:47:57:a0:1e:94:3f:28:59:4a:7b:71:87:e7:
d9:47:1e:8f:19:c7:50:36:43:d8:9a:0d:22:d5:e2:8a:23:12:
9b:8f:53:39:48:a1:2a:f6:06:9c:16:61:39:61:61:1a:ed:0f:
45:3d:bd:8c:1c:a7:8b:bf:96:37:4e:3c:1e:51:8f:8b:cb:52:
0a:63:3f:5e:fc:c6:72:50:71:d3:d0:6f:65:cc:6c:d4:f8:3b:
f7:2e:e3:e4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY5I42JOSp5lnCOhRwnpM6F3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzE2MjAxMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjdiYzQyZTkwNzczYTg0YTA3OTI0M2RkNTJkZTVlYjVjZDFkNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xVWcqvAbg9XO5O4XuRo0bQlNnw6
jWRTbZXo9aE0rpL6vt32l1veCL9G5J0ysC9xR9VqlLAt+6JBFGUEhG9YdnRKgwCq
FxdnssIL3F8ufecrpEjuye4xI7OmZjagzPychXyhHzuVP3IdfM0c5eJqeE6fqk7b
AQSy6H5IaKTLeMLeMeAuQhmjNHfj4jwqISMu4MjJr8VMGH+ZTn4/xBWtI1WDRMS9
yvdQaHo4mW2BchykMK9iuGnAImVXFBvozFyYUnPK08aMi6GsaLeapEOHWJpILiku
20ub4tfYdEIN0cTB5HmPzTk8VlsPX072udz+W1xDpektxb8e6661u2mZjwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP97xC6QdzqEoHkkPdUt5etc0dSxMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvXzN2RUxwQjNPb1NnZVNROTFTM2w2MXpSMUxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFo2SzvcZgy2LB63TR7P
MnXxmTHfkwmxnwhwUr/KhVuhYO0p47dyO34J0Xslb88npXtjVtLN4WOSqHnd/tR0
C+fmoXId8RLcY8yAvCqpx7lrGlAa7upi3XWVQqAsK6MIyoNi05UWcxwDFKmSMLLZ
42fN4UbyVpxXZg3F1BmKxwUdEAcjqnXLN9o7wkf4IvLmzcVSBqcqaen+wWpdxg6+
vDgIlpC0IuyxR1egHpQ/KFlKe3GH59lHHo8Zx1A2Q9iaDSLV4oojEpuPUzlIoSr2
BpwWYTlhYRrtD0U9vYwcp4u/ljdOPB5Rj4vLUgpjP178xnJQcdPQb2XMbNT4O/cu
4+Q=
Generated at Sun Mar 17 03:43:10 2024 by rpki-client on console.sobornost.net