Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ck3yAR5Mx55pe8-3Cf8dSEyahXA.roa
File: ck3yAR5Mx55pe8-3Cf8dSEyahXA.roa (raw, json)
Hash identifier: 8ifLc3qN2zz1o5Fnq6GBakyTe4WlNfbkIn2NsiXm+LE=
Subject key identifier: 72:4D:F2:01:1E:4C:C7:9E:69:7B:CF:B7:09:FF:1D:48:4C:9A:85:70
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E7C9AD2AB691D3009B85425DF5BF7A80C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ck3yAR5Mx55pe8-3Cf8dSEyahXA.roa
Signing time: Tue 26 Mar 2024 21:11:45 +0000
ROA not before: Tue 26 Mar 2024 21:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 26 Mar 2024 22:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7c:9a:d2:ab:69:1d:30:09:b8:54:25:df:5b:f7:a8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 26 21:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=724df2011e4cc79e697bcfb709ff1d484c9a8570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:58:41:e9:34:3d:fd:ca:b6:42:40:e8:41:
4f:f1:32:b7:4c:95:cd:2b:db:03:3f:3c:6a:7c:c0:
9c:8e:d3:77:47:87:3f:3d:ad:fb:eb:e4:2e:86:05:
78:a3:28:fc:a0:04:6d:79:81:a9:2d:ca:a4:14:a2:
63:cf:12:c4:eb:b9:89:1a:25:63:f8:63:a8:61:bf:
f1:f6:ee:21:55:bc:dd:f3:f2:9a:a2:d2:46:bb:2f:
8e:48:09:ac:be:92:33:dd:5f:f6:c3:54:7f:39:75:
db:d9:c7:70:a9:7a:ad:40:fe:ca:b2:1d:49:9f:b7:
99:8d:93:93:c7:ea:ac:e4:b3:ff:9b:e5:fd:c2:c0:
1d:66:eb:41:9b:5e:4c:5d:13:c5:b2:4e:73:07:58:
bd:81:54:a0:de:f2:9d:c4:af:d1:12:51:54:e4:11:
82:ec:cb:1c:11:12:8b:ea:7e:28:89:07:11:3f:32:
5f:7e:38:b9:c8:ad:10:cf:50:1b:af:d1:67:e5:03:
23:ff:29:d9:8e:93:61:13:6d:bd:9f:b7:10:d8:f5:
27:8b:71:f7:fd:56:c6:8f:20:db:6e:6c:6f:7f:1c:
1f:e4:d9:8a:56:98:65:34:b3:51:f8:bf:58:4d:22:
52:73:0a:eb:91:c0:37:ff:9e:e3:27:03:22:25:50:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4D:F2:01:1E:4C:C7:9E:69:7B:CF:B7:09:FF:1D:48:4C:9A:85:70
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ck3yAR5Mx55pe8-3Cf8dSEyahXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:8b:c4:a1:c1:ad:d5:77:66:af:ba:e1:b5:a2:aa:e9:2b:90:
e1:4b:36:5b:31:e9:27:f8:8c:6a:3c:7f:b6:0f:d5:bf:c7:ee:
09:20:c0:9e:c1:cc:dd:21:37:3b:09:3d:bc:28:e0:32:04:d9:
d9:1d:6d:d6:79:0c:bb:ba:8b:08:41:44:48:5b:30:14:50:3a:
d7:e6:0e:66:97:23:06:31:71:07:84:50:2f:8e:82:35:92:80:
eb:34:30:33:eb:af:27:b6:0e:53:9f:61:d1:11:3f:bf:30:35:
82:a0:e3:89:d0:a8:9c:be:1c:7e:bd:06:0b:01:7e:02:e3:8a:
d5:0e:b0:1e:23:83:20:e5:81:d5:05:47:5c:00:6a:56:b8:27:
b9:e5:dc:99:66:ba:67:1c:b1:8b:ca:c3:65:50:29:c6:09:8f:
92:85:5b:58:b3:37:47:63:88:7b:0a:6d:f4:90:b1:25:6c:9e:
c0:d8:53:3f:be:2b:f8:7c:83:d1:18:44:66:97:aa:28:b9:d0:
81:ad:5e:39:7c:d5:e1:c0:cd:29:b2:f2:93:f3:5b:48:15:28:
1e:19:13:d7:62:51:f4:f1:c0:00:13:34:07:6a:93:17:41:b3:
e5:1a:e7:b6:5f:fb:3f:3c:5a:7d:8a:9e:23:dd:a1:b5:4a:cf:
3c:ef:09:3c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY58mtKraR0wCbhUJd9b96gMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzI2MjExMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjRkZjIwMTFlNGNjNzllNjk3YmNmYjcwOWZmMWQ0ODRjOWE4NTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3VYQek0Pf3KtkJA6EFP8TK3TJXN
K9sDPzxqfMCcjtN3R4c/Pa376+QuhgV4oyj8oARteYGpLcqkFKJjzxLE67mJGiVj
+GOoYb/x9u4hVbzd8/KaotJGuy+OSAmsvpIz3V/2w1R/OXXb2cdwqXqtQP7Ksh1J
n7eZjZOTx+qs5LP/m+X9wsAdZutBm15MXRPFsk5zB1i9gVSg3vKdxK/RElFU5BGC
7MscERKL6n4oiQcRPzJffji5yK0Qz1Abr9Fn5QMj/ynZjpNhE229n7cQ2PUni3H3
/VbGjyDbbmxvfxwf5NmKVphlNLNR+L9YTSJScwrrkcA3/57jJwMiJVAYFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHJN8gEeTMeeaXvPtwn/HUhMmoVwMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvY2szeUFSNU14NTVwZTgtM0NmOGRTRXlhaFhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABGLxKHBrdV3Zq+64bWi
qukrkOFLNlsx6Sf4jGo8f7YP1b/H7gkgwJ7BzN0hNzsJPbwo4DIE2dkdbdZ5DLu6
iwhBREhbMBRQOtfmDmaXIwYxcQeEUC+OgjWSgOs0MDPrrye2DlOfYdERP78wNYKg
44nQqJy+HH69BgsBfgLjitUOsB4jgyDlgdUFR1wAala4J7nl3JlmumccsYvKw2VQ
KcYJj5KFW1izN0djiHsKbfSQsSVsnsDYUz++K/h8g9EYRGaXqii50IGtXjl81eHA
zSmy8pPzW0gVKB4ZE9diUfTxwAATNAdqkxdBs+Ua57Zf+z88Wn2KniPdobVKzzzv
CTw=
-----END CERTIFICATE-----
Generated at Wed Mar 27 06:25:42 2024 by rpki-client on console.sobornost.net