Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iEUhNHHanMjxbWPM6PZIUnVIf3w.roa
File: iEUhNHHanMjxbWPM6PZIUnVIf3w.roa (raw, json)
Hash identifier: NoXSRgU3VztPZ+cJ/tkhW+AK+h1C5V8+KZq2Ou/rGwM=
Subject key identifier: 88:45:21:34:71:DA:9C:C8:F1:6D:63:CC:E8:F6:48:52:75:48:7F:7C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E4C524A420939AF38FB4868FD67C08198
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iEUhNHHanMjxbWPM6PZIUnVIf3w.roa
Signing time: Sun 17 Mar 2024 12:10:45 +0000
ROA not before: Sun 17 Mar 2024 12:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 17 Mar 2024 13:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4c:52:4a:42:09:39:af:38:fb:48:68:fd:67:c0:81:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 17 12:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8845213471da9cc8f16d63cce8f6485275487f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:fe:93:a1:af:90:89:d2:c1:c3:7f:2e:9f:
5c:16:70:04:a7:cf:55:ea:2f:18:4b:a7:ec:fa:2d:
fe:ac:dd:3c:a6:b0:81:24:5b:ad:f9:8e:f7:3c:12:
d9:26:4a:79:ac:ee:8f:91:a2:2d:02:bb:37:ae:da:
9b:2e:f8:4e:71:2e:e6:56:2d:51:16:b9:62:56:28:
90:21:4e:5c:78:34:82:53:a8:07:3e:cb:98:a1:7f:
a4:56:2f:17:07:f3:e4:d4:92:30:df:37:cc:06:7b:
9e:51:08:c3:b1:eb:98:96:5a:4e:16:18:29:43:58:
25:78:28:9e:ee:78:6f:38:9b:47:a2:7a:b5:4d:44:
c3:79:bc:75:56:e1:93:74:38:1e:8f:41:e8:3d:3f:
2d:99:3e:f3:4f:0d:7e:ab:ee:a3:3f:06:e5:37:ac:
e3:94:29:35:f1:19:d7:f4:f3:8f:5d:03:86:c1:ff:
0d:e9:98:dc:3f:91:12:12:c7:7b:1f:0b:b0:e5:48:
c1:8b:61:11:1a:ee:ff:cf:0e:79:cb:58:98:db:02:
2e:34:85:cc:7a:08:bd:d9:ac:af:b0:73:5a:09:d9:
31:cc:71:41:38:33:ac:41:74:94:b3:71:d7:6d:0d:
60:57:63:4a:12:27:58:fb:76:f2:24:92:9c:12:6f:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:21:34:71:DA:9C:C8:F1:6D:63:CC:E8:F6:48:52:75:48:7F:7C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iEUhNHHanMjxbWPM6PZIUnVIf3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:90:85:b2:2e:2e:09:84:4a:35:e8:1a:02:52:e2:63:9c:42:
20:4e:c7:99:b9:0c:00:3f:21:5e:7a:bd:60:e4:d2:6a:65:00:
16:10:08:f9:e1:54:89:30:86:8c:36:cf:40:5c:43:13:19:e1:
2e:f6:77:e7:56:14:d0:b9:e7:29:9a:53:93:b4:e2:7f:fc:66:
2e:ab:08:7a:0e:c4:26:fb:88:e9:ef:c2:90:57:65:a7:d2:28:
71:b3:19:62:49:19:aa:e8:e6:8c:d4:45:57:3b:06:74:9e:61:
c5:83:a0:73:65:33:50:c6:4c:e3:c9:04:bf:09:37:6f:ad:45:
09:48:d1:26:14:6f:95:99:e6:6b:08:34:bc:dc:02:82:64:cc:
89:3e:fd:7f:0f:35:2e:46:9e:04:08:30:c4:a4:6d:3b:5a:92:
ee:d7:ce:ed:91:80:72:58:eb:ba:f6:73:30:8a:27:de:7c:98:
28:f3:d4:e4:76:ec:04:b8:bd:a9:fe:b5:ec:06:d0:4b:fa:8c:
89:eb:4d:fe:1d:1f:1b:8d:2d:e3:e5:75:18:07:56:8d:03:1a:
70:62:af:7b:ab:fe:c6:38:fd:54:98:f8:40:c7:43:b4:81:fb:
dc:b3:79:fc:11:63:ec:dc:2b:7d:15:dc:bd:e1:73:b2:63:22:
be:ee:b9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 17:30:27 2024 by rpki-client on console.sobornost.net