Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h50_sz9GP7eefMpNk_WLZjXDXEs.roa
File: h50_sz9GP7eefMpNk_WLZjXDXEs.roa (raw, json)
Hash identifier: PUvtE3ms/6wKcD0kYPVcTg7KnaQ/n4KILdPthup4EYo=
Subject key identifier: 87:9D:3F:B3:3F:46:3F:B7:9E:7C:CA:4D:93:F5:8B:66:35:C3:5C:4B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CECD831DF8586959D9A5B70ADFA3E02EE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h50_sz9GP7eefMpNk_WLZjXDXEs.roa
Signing time: Tue 09 Jan 2024 06:10:40 +0000
ROA not before: Tue 09 Jan 2024 06:10:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 07:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ec:d8:31:df:85:86:95:9d:9a:5b:70:ad:fa:3e:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 9 06:10:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=879d3fb33f463fb79e7cca4d93f58b6635c35c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6a:c2:07:74:6b:17:8d:b4:4a:c7:97:39:46:
9f:65:48:be:57:7b:7e:2f:b8:0a:b5:e7:5a:da:da:
8e:52:ac:d3:ee:f7:f7:11:bc:3d:c4:c5:8d:d7:d6:
2f:0d:50:21:0f:55:0c:e8:53:d7:02:8a:f6:f7:50:
13:05:56:f1:fe:10:90:30:66:27:98:26:8e:c7:bd:
6f:12:7b:5e:ea:97:63:dd:60:16:a4:e5:df:40:16:
5b:cd:61:b2:91:6f:3d:cc:04:84:64:f9:d7:92:f4:
42:59:3e:bb:87:26:84:e3:dd:fb:5a:4a:66:f3:44:
22:dc:23:0d:82:3b:ed:61:5b:19:1f:84:0b:05:42:
67:0f:ae:ed:67:34:8c:3a:95:8f:b1:76:44:28:be:
64:04:99:67:ca:aa:2e:37:28:f1:fd:7e:be:71:4b:
0c:1c:71:3f:9d:bd:af:01:67:94:e7:93:b7:2c:d5:
0d:35:96:61:c0:04:1d:dc:ff:a5:8a:7d:da:53:8b:
c8:75:45:1d:d6:62:6e:6b:e3:66:d6:7e:21:42:38:
02:e9:7b:58:66:0c:08:eb:0a:f1:77:43:5b:5f:49:
dd:3b:d9:89:13:40:83:d7:c2:43:61:29:08:40:81:
7e:a6:f3:84:87:cc:a1:63:80:9f:06:39:f4:75:55:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9D:3F:B3:3F:46:3F:B7:9E:7C:CA:4D:93:F5:8B:66:35:C3:5C:4B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h50_sz9GP7eefMpNk_WLZjXDXEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:db:97:72:3d:76:f8:32:64:89:17:7b:40:73:c2:d7:84:c5:
9c:71:16:17:f1:ce:45:c1:2e:6f:fb:09:e2:06:9d:22:4a:b9:
ad:94:10:20:31:61:12:3c:1c:6f:6b:aa:b3:1f:aa:4e:48:b0:
3f:95:80:d9:1e:4f:96:4d:c0:9c:a7:7e:9e:ee:02:ed:a3:94:
cd:52:d0:40:86:60:fb:5f:7d:6b:1c:91:58:2c:a2:bf:9a:46:
d3:69:8d:c9:15:6b:6c:4d:aa:43:a4:5a:e5:fa:a6:0f:e2:05:
f6:7f:b0:f5:42:d4:7d:c3:d2:fd:1e:9c:55:e1:cc:d1:a2:1c:
60:48:fa:b7:19:98:57:f5:bb:d0:ff:3b:b0:63:4c:f9:85:67:
55:d5:ea:4c:91:01:eb:f0:02:18:32:9c:ea:5a:45:c0:bb:41:
33:a6:a9:ea:0c:43:cf:ad:ef:93:ad:72:82:34:7c:76:72:29:
eb:9c:b7:fc:3e:c2:a7:9f:7d:15:a0:d4:77:6c:cd:e5:4b:36:
7f:36:f7:5b:73:4e:88:a2:fc:71:22:ff:be:03:15:39:5d:41:
69:d8:31:b0:3c:7a:e3:be:cf:7c:c2:1d:20:ea:ba:43:00:c9:
a6:63:0e:fe:79:d4:a2:b2:d8:40:bb:c9:7d:c4:6a:a4:fb:9a:
18:7c:0c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 14:32:28 2024 by rpki-client on console.sobornost.net