Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cSdCJkw0t8rQr3PV-y1Gq-1Rbnk.roa
File: cSdCJkw0t8rQr3PV-y1Gq-1Rbnk.roa (raw, json)
Hash identifier: X6QmVZOWqrPALTOCMLXvDP11icZ3xr+VqAkeHGod2zE=
Subject key identifier: 71:27:42:26:4C:34:B7:CA:D0:AF:73:D5:FB:2D:46:AB:ED:51:6E:79
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E438099D14F64EB83B72E2E3B58894D34
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cSdCJkw0t8rQr3PV-y1Gq-1Rbnk.roa
Signing time: Fri 15 Mar 2024 19:04:45 +0000
ROA not before: Fri 15 Mar 2024 19:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:4380:42c7/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 15 Mar 2024 19:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:80:99:d1:4f:64:eb:83:b7:2e:2e:3b:58:89:4d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 15 19:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=712742264c34b7cad0af73d5fb2d46abed516e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:50:f6:29:61:83:96:95:44:ab:5d:b8:e5:0b:
a1:87:31:55:34:84:84:27:51:3d:67:c1:ba:df:c0:
e7:3b:ba:42:60:69:be:6d:43:e1:65:26:a3:7a:ba:
db:e5:33:e9:5a:58:bc:f3:07:f4:44:a6:76:64:5a:
e8:45:0a:66:ae:53:a5:e0:ce:bf:32:92:18:8b:13:
8b:74:ae:f2:c3:66:94:64:f8:6d:e8:2a:43:67:ba:
b5:d9:1e:bf:25:9a:c6:de:0c:9e:3f:29:08:92:9e:
ee:f7:33:c6:76:1d:d8:fb:1a:87:db:a9:64:14:fa:
1e:6a:17:e9:f2:6e:9c:e3:c2:bc:ff:9c:60:e3:62:
9a:e1:38:8d:83:57:ed:7f:a7:64:8f:ff:16:8b:68:
3d:b5:7e:70:33:42:03:ca:bd:bf:4e:4a:00:af:7a:
fa:9c:c8:5f:7d:91:4d:0a:e5:9e:7e:18:70:50:a0:
9d:85:cc:82:22:7a:17:c4:4c:5a:10:a2:ee:30:30:
9b:8f:69:ac:d2:30:b9:0f:61:3d:9e:9b:c9:95:21:
b7:57:24:93:d2:c0:27:02:2d:76:6e:ca:3d:7c:d4:
36:e0:13:65:27:e5:68:16:57:87:24:96:83:38:68:
6c:94:af:50:80:10:14:5e:6e:bb:1d:63:7d:8e:e3:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:42:26:4C:34:B7:CA:D0:AF:73:D5:FB:2D:46:AB:ED:51:6E:79
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/cSdCJkw0t8rQr3PV-y1Gq-1Rbnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:41:b2:bd:40:25:11:bc:c5:4d:91:bf:28:6c:dd:a4:da:14:
b9:d1:cb:5e:7b:6d:92:f3:4f:0c:c9:ca:09:f9:d5:f1:7a:e5:
bd:c9:4a:e0:51:de:6a:a2:72:c2:fd:05:93:b8:c7:ea:48:91:
41:b6:8d:bf:79:bb:14:59:e3:ca:a7:7d:45:d4:a8:9a:d0:67:
45:58:d1:ce:c4:7a:67:52:6b:ff:51:b7:ee:bb:b8:1c:44:fb:
a7:1f:93:05:37:76:b9:9e:a6:35:09:e7:11:7d:6f:8f:e8:2e:
4b:9b:df:e1:9f:45:bc:36:99:a3:ff:9e:8a:53:61:06:96:9a:
3c:14:4a:d7:4c:63:e2:07:a0:84:02:fc:77:47:aa:e6:63:c1:
53:1a:eb:a9:e4:e8:46:80:9f:9b:87:6e:a6:11:f6:a7:1d:d6:
41:5a:d3:d5:90:ba:4f:d1:66:be:c8:54:eb:5e:40:8e:cb:13:
82:91:bb:51:29:c0:5b:06:f2:2b:53:f4:a7:24:0e:88:43:75:
a2:7a:3b:89:2f:91:35:e9:fe:26:22:67:d3:13:9a:50:c8:5d:
bd:5a:67:73:ba:85:e2:93:72:e0:de:8f:31:7a:40:96:36:2a:
28:d3:2b:a0:bd:26:9a:43:fe:05:af:d1:c1:06:71:73:91:0b:
c2:87:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 07:52:07 2024 by rpki-client on console.sobornost.net