Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fHSkOSIcmYqzrRY8aLyVUTUspNQ.roa
File: fHSkOSIcmYqzrRY8aLyVUTUspNQ.roa (raw, json)
Hash identifier: eKYIfkNk00hgLtUj+TyF7jtTuvSWDcLEsicDSnfzf0I=
Subject key identifier: 7C:74:A4:39:22:1C:99:8A:B3:AD:16:3C:68:BC:95:51:35:2C:A4:D4
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CEAB4B587BEA1FC3F9E66EFDF4B0C9BB2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fHSkOSIcmYqzrRY8aLyVUTUspNQ.roa
Signing time: Mon 08 Jan 2024 20:12:40 +0000
ROA not before: Mon 08 Jan 2024 20:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Jan 2024 21:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ea:b4:b5:87:be:a1:fc:3f:9e:66:ef:df:4b:0c:9b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 8 20:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c74a439221c998ab3ad163c68bc9551352ca4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:51:5c:4c:fb:e3:ce:3b:f8:59:11:90:8c:
1f:43:df:31:43:9a:f8:fe:68:8b:05:42:8b:66:7a:
f5:16:24:db:c3:f2:a6:b2:0e:c9:83:06:42:0b:93:
41:64:91:6c:d2:60:85:97:22:5b:de:a2:70:62:11:
d0:57:fd:47:f1:0f:cd:4f:5e:49:9c:78:81:04:c6:
f0:21:71:8d:9c:2d:dc:4c:d7:60:d8:30:b1:b0:53:
45:e1:d7:7e:69:23:99:ef:4c:32:1f:20:02:9c:9f:
57:07:53:ce:5e:2e:73:e3:a2:8d:ce:90:83:72:4d:
e2:f6:12:a0:64:45:e2:91:27:bd:1a:cb:b7:94:02:
92:8f:7f:81:49:db:8e:f4:85:c9:0b:e5:a5:7c:2a:
aa:1f:d9:50:8c:90:f5:44:fb:5e:70:de:69:ba:32:
4f:6e:dc:29:6f:28:f4:ff:cc:b7:ae:6e:0a:bc:f0:
6f:51:3f:eb:4e:61:b2:35:2f:97:dc:8c:65:35:96:
2e:2a:a3:b3:7a:b4:8b:af:79:26:bf:37:6f:1e:dd:
e9:4f:83:39:d7:88:99:ab:91:cd:4e:c8:10:7e:46:
c6:1d:6c:19:52:70:cf:5b:e4:5b:d6:73:bd:05:f1:
60:39:b3:29:54:1e:f0:22:5b:ad:aa:59:aa:75:36:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:74:A4:39:22:1C:99:8A:B3:AD:16:3C:68:BC:95:51:35:2C:A4:D4
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/fHSkOSIcmYqzrRY8aLyVUTUspNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:de:ce:83:8f:f7:7b:49:fd:b9:97:8f:9d:db:89:af:0d:1a:
fc:d2:f2:26:59:fc:a6:1d:5c:ed:6c:62:77:a7:72:27:55:92:
d4:e0:a9:74:59:28:56:45:1e:47:05:b5:b6:e2:7e:75:51:9b:
78:5a:fa:f7:1d:9e:68:67:2e:43:04:c4:ba:87:1f:2f:5a:91:
bb:62:be:12:d5:f2:66:10:b0:b3:69:78:6f:a4:05:79:2e:9e:
a5:32:93:90:22:5d:e4:cb:1b:6d:1c:65:73:d2:13:b5:5c:6b:
7e:31:86:cd:b4:e0:23:ec:51:24:3d:72:50:90:66:2a:2e:d0:
85:d4:e4:52:35:7f:f9:13:67:5d:fd:05:f9:09:95:40:c0:b2:
bc:44:9e:94:38:b9:52:ae:e9:e6:40:45:01:75:5e:38:75:c5:
90:84:d3:15:0e:00:b3:fa:57:cb:21:58:e7:0b:98:bb:b6:8b:
08:5a:7b:b5:73:ff:db:25:d4:b2:f5:cb:e8:30:5d:9d:c2:6b:
18:5b:13:11:37:31:4a:36:94:8a:4b:c5:85:3b:62:6c:56:2a:
06:91:13:12:8c:7d:f5:7d:b7:95:0e:47:66:98:4c:f8:a9:2a:
6f:82:68:b6:05:37:80:40:1c:0a:eb:d6:78:67:bf:79:24:55:
fc:2b:85:10
-----BEGIN CERTIFICATE-----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Generated at Mon Jan 8 23:01:25 2024 by rpki-client on console.sobornost.net