Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gXL325_QWhilQrslTJLXWb9V9Ng.roa
File: gXL325_QWhilQrslTJLXWb9V9Ng.roa (raw, json)
Hash identifier: EwkWI0xdX1SRitW6P8K0SX0P2lfaoCCujnRz8xJy8NU=
Subject key identifier: 81:72:F7:DB:9F:D0:5A:18:A5:42:BB:25:4C:92:D7:59:BF:55:F4:D8
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6831E8C46B6600BA1AC4779170251572
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gXL325_QWhilQrslTJLXWb9V9Ng.roa
Signing time: Fri 22 Mar 2024 22:04:45 +0000
ROA not before: Fri 22 Mar 2024 22:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:6831:84fd/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 22 Mar 2024 22:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:68:31:e8:c4:6b:66:00:ba:1a:c4:77:91:70:25:15:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 22 22:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8172f7db9fd05a18a542bb254c92d759bf55f4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:69:91:d8:dc:5d:55:c0:11:8e:16:93:6c:
83:6e:fd:c0:64:c8:d0:27:c3:46:fe:7b:89:8c:dd:
03:dc:5d:ec:86:c9:fa:61:43:98:bf:e3:b2:4b:40:
5d:5e:5a:a5:1f:fb:98:9a:b9:93:ff:8e:76:1c:d5:
67:e0:e1:02:63:65:71:94:09:20:fa:13:5d:93:9d:
79:b1:b3:97:04:b9:e6:a2:43:b1:b3:e0:f5:83:89:
0d:69:bf:6d:ec:14:ca:93:5a:79:66:78:42:69:bd:
a3:16:c7:15:d4:21:ad:16:ea:fa:c3:52:fb:e1:b2:
91:b8:78:9b:bb:2a:49:36:c9:62:ac:f5:28:91:38:
67:ff:52:9b:98:7e:80:9d:b7:94:35:b6:c4:51:57:
8c:3f:37:8b:5a:a9:3a:3a:2f:3d:ec:64:c5:7b:de:
a2:73:6b:ea:31:cd:db:92:86:05:46:d0:ce:20:9f:
32:82:8c:13:59:8f:21:ca:60:29:a0:53:91:cb:9e:
e4:39:60:5b:20:63:f9:da:d2:fa:55:53:0a:f5:d6:
52:39:75:0f:54:76:c5:19:0b:c3:8e:79:c4:56:e3:
3d:f4:ef:71:51:77:b9:64:bb:0a:57:32:95:e2:7e:
17:32:46:46:5c:e1:29:5f:b8:aa:fb:83:0d:5e:17:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:72:F7:DB:9F:D0:5A:18:A5:42:BB:25:4C:92:D7:59:BF:55:F4:D8
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/gXL325_QWhilQrslTJLXWb9V9Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:4e:bf:90:73:0e:93:e6:d5:20:62:33:16:46:0b:20:d4:28:
6a:df:6d:de:ea:3a:0e:de:93:08:27:8f:80:d6:38:9c:8e:39:
88:ff:1f:5a:91:e4:ab:79:f9:54:ec:48:6e:88:86:27:df:e1:
5f:f3:c6:6c:da:11:1b:a8:bd:8e:88:31:80:bd:3c:1b:99:28:
e8:32:ed:0e:e6:2f:d5:63:eb:f6:b6:db:02:6d:98:82:2b:37:
51:44:00:1d:90:b1:4d:4d:46:35:f4:22:bd:61:c3:ee:2f:3b:
6e:e8:10:40:fa:25:26:a1:4b:d2:8c:ed:aa:8a:a5:c9:bc:c0:
9a:30:6d:07:ea:53:47:dd:a2:8f:dc:0c:e0:ed:31:38:d8:09:
b9:f9:1a:80:69:a0:f3:b8:f2:de:32:5b:2f:dd:c3:fe:ab:3c:
30:f8:26:f2:6e:87:14:c0:5b:3a:22:30:fb:b3:81:10:23:3d:
22:38:18:2e:ac:c6:6b:28:7d:61:3a:7e:de:4a:89:ab:d4:63:
66:d1:05:4e:31:d9:10:4d:6c:82:a7:df:04:b4:a1:54:65:e5:
85:56:f6:13:0c:6d:f6:4b:9b:8a:66:6f:bd:ac:96:ab:4c:51:
8a:70:b6:cb:c1:17:73:17:15:fe:59:ab:7f:c9:89:de:ec:8a:
61:3b:a7:0e
-----BEGIN CERTIFICATE-----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Generated at Sat Mar 23 05:56:25 2024 by rpki-client on console.sobornost.net