Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_S-EWrBnwUWUSF2SJZABQsZsShI.roa
File: _S-EWrBnwUWUSF2SJZABQsZsShI.roa (raw, json)
Hash identifier: nhf4gFB46i91nUZ8bNl7Xuivk89EnYGZbitw00Tn6FI=
Subject key identifier: FD:2F:84:5A:B0:67:C1:45:94:48:5D:92:25:90:01:42:C6:6C:4A:12
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2A391ED41DE930882F64A9901D625A6C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_S-EWrBnwUWUSF2SJZABQsZsShI.roa
Signing time: Sun 10 Mar 2024 21:16:10 +0000
ROA not before: Sun 10 Mar 2024 21:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 10 Mar 2024 22:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2a:39:1e:d4:1d:e9:30:88:2f:64:a9:90:1d:62:5a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 10 21:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd2f845ab067c14594485d9225900142c66c4a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:f5:01:cc:01:2b:e3:35:09:1e:f9:b0:fa:
2a:35:37:a0:f1:ec:ac:b5:c9:3d:0f:7a:b8:2d:01:
42:5f:06:4c:b1:e3:d3:b7:ee:30:07:53:c4:33:77:
42:fa:f6:ae:a1:99:f5:d4:18:66:56:f1:0d:ed:3a:
1b:a7:e3:60:9f:c8:26:7a:15:3d:63:25:74:2c:82:
e9:96:82:be:e2:2f:c9:63:90:6a:9c:2f:3a:5d:95:
bb:29:8e:cf:ae:d6:d3:4a:c2:a2:63:1a:03:2c:14:
8f:68:5d:a7:67:a3:3b:35:ed:dd:8e:2f:16:eb:de:
98:f3:5d:30:37:05:cd:a1:f1:7c:03:a6:bf:e9:fd:
67:74:1f:d9:f5:fb:4c:ab:f1:8c:ec:00:91:ac:ab:
b3:b4:07:5a:af:e2:53:59:7f:6e:d8:0e:b1:7b:da:
64:6f:f6:38:20:69:01:cf:b8:af:9b:c1:43:2a:c1:
de:12:47:4f:ad:0b:c1:2e:99:35:3d:35:c6:03:53:
c2:62:2e:a7:4e:bf:f6:9a:a5:ec:eb:8a:a1:41:85:
72:a0:49:cd:95:25:44:81:bd:7c:4d:bd:77:d0:76:
f1:d2:4e:6f:36:8f:8b:d4:0a:1c:1d:dc:1c:3a:2c:
b9:84:2c:11:11:47:6c:67:24:f6:f8:7f:50:52:8c:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2F:84:5A:B0:67:C1:45:94:48:5D:92:25:90:01:42:C6:6C:4A:12
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/_S-EWrBnwUWUSF2SJZABQsZsShI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:be:1f:8e:b8:34:a7:8f:06:01:c7:99:af:51:a4:f9:6b:21:
42:c6:6f:e5:58:4d:e3:29:d4:b8:91:a4:16:bc:d7:1c:e2:f5:
a7:c9:13:50:00:f5:17:a6:30:4c:71:4d:a9:f9:89:7b:e6:7a:
25:a8:91:49:65:b0:09:67:c0:aa:b4:4f:e2:fd:d2:d6:40:9d:
2b:89:8b:6d:0f:c5:ff:4c:44:44:76:31:46:94:e1:2d:4e:77:
20:aa:d3:d0:c1:4d:70:6a:ac:9a:8f:f4:39:9b:05:19:5a:d8:
1b:b4:11:35:a1:6b:71:b0:eb:3b:4d:22:d5:d1:10:63:fb:2c:
c9:77:3d:b8:b9:f3:cf:f5:69:3b:88:9e:59:9f:fc:dd:da:59:
41:e9:39:3e:51:c7:56:88:28:0a:7f:73:c7:02:ee:41:52:e8:
0e:8e:29:2a:92:7b:4c:89:cf:50:f1:67:38:bb:a9:f5:2c:7a:
2f:18:02:5b:d6:dd:78:8a:a9:11:b7:2f:2b:ef:44:7c:93:81:
00:1c:a9:2f:9d:7d:06:cd:09:f7:d8:4c:70:c4:4f:59:31:88:
4d:62:3b:91:07:3b:1c:1d:6c:19:bc:a5:03:a4:28:94:8f:b5:
40:1d:fb:e3:4e:d4:2c:51:79:df:e3:d1:ca:b1:32:8e:4b:11:
01:d6:b4:59
-----BEGIN CERTIFICATE-----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Generated at Mon Mar 11 03:24:24 2024 by rpki-client on console.sobornost.net