Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e5QjU6g5ekzmshsqb38YUzai44c.roa
File: e5QjU6g5ekzmshsqb38YUzai44c.roa (raw, json)
Hash identifier: HCBHDy1UHp8Y4MEGhiLE1+8MgMUv0YzJtAAqMa7+dbw=
Subject key identifier: 7B:94:23:53:A8:39:7A:4C:E6:B2:1B:2A:6F:7F:18:53:36:A2:E3:87
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED0E8E33B143E9132EA7BD6C70D093300
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e5QjU6g5ekzmshsqb38YUzai44c.roa
Signing time: Fri 12 Apr 2024 06:05:07 +0000
ROA not before: Fri 12 Apr 2024 06:05:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:d0e8:9762/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 12 Apr 2024 06:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d0:e8:e3:3b:14:3e:91:32:ea:7b:d6:c7:0d:09:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 12 06:05:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b942353a8397a4ce6b21b2a6f7f185336a2e387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8c:fb:a3:47:8f:e7:ff:16:68:80:01:00:18:
bf:13:08:2c:aa:07:b2:71:74:df:bd:6a:25:6e:ab:
bb:41:37:1b:6b:46:32:39:82:27:a7:2d:a4:d0:14:
3d:fe:01:e6:cc:d6:ba:87:81:dc:8a:e7:17:36:9a:
fc:2e:fb:e7:0e:5c:d7:f4:c8:55:e5:95:19:62:bb:
a5:c0:9c:19:80:b2:12:a5:fe:59:4e:63:78:16:1f:
39:d8:47:ed:ef:13:fc:07:33:b4:2a:e6:21:5c:80:
f6:86:22:cb:c8:2e:77:9b:6a:db:a8:9f:5e:ae:7c:
60:d0:a3:8d:a9:a0:0e:26:98:bb:92:c0:79:90:c9:
c3:29:41:21:66:13:e5:b5:13:4f:50:f0:ca:5c:6e:
8a:e4:84:2e:89:6c:4e:b1:42:6e:0c:5a:0e:f3:bf:
cc:e4:32:50:de:ad:f8:3d:3f:00:af:93:42:5b:59:
49:9e:12:cb:82:21:ea:79:62:1d:08:11:20:cb:53:
ce:1a:78:ff:74:0e:eb:fa:45:f5:0d:f2:b9:17:1e:
2d:f2:b9:75:b6:a7:00:74:7d:21:8f:1b:c2:0b:21:
a4:b1:79:1a:dd:25:4c:c7:14:4d:fe:62:ef:87:68:
6a:51:c5:f4:43:21:10:db:b5:91:c1:08:62:98:db:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:94:23:53:A8:39:7A:4C:E6:B2:1B:2A:6F:7F:18:53:36:A2:E3:87
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/e5QjU6g5ekzmshsqb38YUzai44c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:7b:1f:0f:9e:1e:d1:60:19:4f:45:a9:95:97:9e:a2:cf:ea:
d0:51:3e:69:a1:39:b2:4a:d4:50:d8:90:6a:e0:a5:35:2c:24:
33:93:ec:f3:a8:86:f0:37:f7:4b:9a:39:ac:37:b0:00:46:0a:
93:22:ae:e0:e6:74:5b:de:c5:b0:6d:87:2b:d5:01:0c:0c:9f:
ec:14:60:ad:77:2b:2c:28:d2:b5:87:f4:18:b5:46:d4:dc:5a:
9f:a0:62:9e:e4:23:21:d3:a3:de:92:75:ae:95:c2:95:4c:00:
88:07:d6:84:62:86:90:91:e6:60:b9:90:2c:ff:fe:ab:9c:91:
bb:66:c8:68:2b:ff:b4:67:02:a6:f0:89:91:fe:3a:f9:65:b3:
0f:fc:ad:ef:e1:6f:2a:4e:57:74:0d:1b:3b:fa:fd:7e:6e:bd:
a6:5d:26:44:72:a5:7a:b8:34:1c:94:3d:46:7f:53:b5:4a:ab:
58:ba:1a:20:b0:5e:5e:65:f2:94:eb:8f:31:18:12:75:20:17:
a8:ad:08:d0:70:da:f6:88:04:8d:f9:5c:0c:35:67:98:cd:7a:
1d:25:20:64:0e:73:02:3f:1d:b5:c2:23:27:86:1c:38:9c:a9:
54:c3:ac:b5:70:d4:36:ad:51:55:8a:5f:1e:e4:5b:69:81:24:
52:64:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 12:42:00 2024 by rpki-client on console.sobornost.net