Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i1w6_jhVCTon3Ks0F8SyvBqwm98.roa
File: i1w6_jhVCTon3Ks0F8SyvBqwm98.roa (raw, json)
Hash identifier: jr+ZxKVrzOgVS/RKLqeaWrxWNmDiPJrtHhQjpsxwpwI=
Subject key identifier: 8B:5C:3A:FE:38:55:09:3A:27:DC:AB:34:17:C4:B2:BC:1A:B0:9B:DF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E3A82F683ACF4B1B98E19705B0C7E0857
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i1w6_jhVCTon3Ks0F8SyvBqwm98.roa
Signing time: Thu 14 Mar 2024 01:10:45 +0000
ROA not before: Thu 14 Mar 2024 01:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 14 Mar 2024 02:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3a:82:f6:83:ac:f4:b1:b9:8e:19:70:5b:0c:7e:08:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 14 01:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b5c3afe3855093a27dcab3417c4b2bc1ab09bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:5c:d6:01:f7:82:80:2e:c5:41:9e:ba:f4:
03:40:c7:1a:0f:a6:a7:09:5e:d1:72:b8:af:46:4b:
41:f8:1e:d6:d8:a8:5b:3a:09:8b:c0:1c:50:11:31:
72:b5:c4:dc:a5:d0:4a:a2:7f:a0:0b:af:29:b6:c8:
26:c4:94:78:55:1b:84:14:65:ca:a2:56:62:3f:76:
5a:86:d4:32:d7:ba:cc:f8:0f:5d:8d:20:5d:0c:c4:
f7:56:17:8a:2f:11:0c:2d:cf:81:43:9f:ba:ce:ee:
83:b4:70:a9:4c:08:86:75:58:8c:93:33:c9:1f:f4:
fe:30:ab:79:5f:c3:fb:b6:aa:c4:75:47:59:1c:7a:
74:d7:e0:87:e8:ee:b8:3b:9c:6c:1a:a2:20:a5:d2:
26:6d:4d:b7:49:4c:3e:e0:8f:10:30:c6:e9:65:1d:
95:a1:08:4f:2d:d5:b7:a1:a9:ee:17:93:43:01:04:
a8:b3:e4:ba:d1:d6:01:ba:51:be:68:b8:98:88:dc:
55:bb:eb:ca:1f:03:68:b5:e2:e3:ca:c5:33:a8:5c:
d6:c1:72:42:e1:64:8e:a5:a9:86:4a:ec:8b:d0:65:
aa:2c:98:b7:76:4f:6c:6d:92:7d:5f:c7:89:a0:47:
95:fa:b1:94:a3:56:9a:62:20:0e:fa:70:c3:b0:12:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5C:3A:FE:38:55:09:3A:27:DC:AB:34:17:C4:B2:BC:1A:B0:9B:DF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/i1w6_jhVCTon3Ks0F8SyvBqwm98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:12:1e:5c:4d:69:2d:c2:f1:12:3a:01:56:b7:34:eb:10:e1:
94:17:92:8a:73:ad:e4:04:e8:6c:e6:86:d4:5b:da:59:4d:79:
6c:37:f1:7a:98:ab:15:16:15:57:a7:63:e0:2f:e1:47:5d:03:
5b:2f:2a:91:31:29:58:5d:4a:9d:d9:40:a6:29:4f:2b:66:a8:
77:b6:99:a2:75:76:bb:39:6c:c8:5a:3b:20:94:01:b8:5b:0a:
31:68:60:c4:12:26:f3:10:56:db:61:02:fd:34:4b:c5:03:65:
5a:e6:10:1c:ae:5e:a9:f8:a0:af:46:97:dc:f8:4d:c6:bc:bd:
f9:a8:d4:45:92:4c:2d:75:2f:e7:d7:19:f1:e2:1e:97:30:31:
8c:7c:d9:92:b8:81:3a:29:cb:2c:d1:d9:b9:1a:27:55:d4:dd:
db:7c:79:e4:20:c1:c2:41:a1:79:e0:9c:09:d8:32:ba:9f:c7:
bc:b6:f9:a3:72:b7:59:6a:1d:b7:ec:a0:86:c2:86:65:74:73:
5e:4c:c2:c4:c0:ef:ff:c0:1a:d0:27:8a:93:2b:55:4b:14:41:
a8:e6:6b:29:d1:8c:18:32:76:89:14:b4:7d:7b:0b:dd:fe:72:
c0:b2:fa:0e:fa:ec:2e:fe:09:11:13:6d:4c:bd:73:18:8d:33:
60:1c:ce:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 08:11:55 2024 by rpki-client on console.sobornost.net