Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iWHBzm6AfPP_89DKnatQ_3fexNc.roa
File: iWHBzm6AfPP_89DKnatQ_3fexNc.roa (raw, json)
Hash identifier: R8EwOD2UglwQ0lCxwzRYWhvTvYRvml/ZkL2K4QXBWR0=
Subject key identifier: 89:61:C1:CE:6E:80:7C:F3:FF:F3:D0:CA:9D:AB:50:FF:77:DE:C4:D7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E1BD5CFFF9FEE9588046566E7D54DB3F2
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iWHBzm6AfPP_89DKnatQ_3fexNc.roa
Signing time: Fri 08 Mar 2024 02:13:01 +0000
ROA not before: Fri 08 Mar 2024 02:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 08 Mar 2024 03:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1b:d5:cf:ff:9f:ee:95:88:04:65:66:e7:d5:4d:b3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 8 02:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8961c1ce6e807cf3fff3d0ca9dab50ff77dec4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:e6:a2:f3:f7:bf:a1:87:d7:ce:d8:6c:d7:
b2:f0:6c:b7:54:18:41:0a:15:b4:5f:14:28:e7:75:
69:34:0b:af:c8:1e:29:8c:ab:0f:79:14:48:06:9b:
4f:85:0e:29:28:7a:12:91:37:be:85:9b:c2:99:8a:
f2:5b:15:c8:f1:67:70:e4:cf:81:f7:23:c1:7f:47:
46:9e:8c:6a:12:09:f6:b8:e4:a2:54:ae:fc:09:c9:
04:d3:78:de:75:e5:dc:55:a0:de:76:97:a1:7e:95:
9c:bc:71:e1:c1:19:73:30:24:c6:c4:ec:13:38:bd:
d6:2c:ba:49:96:77:80:27:2c:ab:e7:59:39:62:51:
d2:0e:08:c2:22:11:cf:38:e6:7e:79:73:f5:24:57:
4c:30:80:d6:25:c9:ba:c4:3c:d3:ab:9c:26:90:53:
da:9b:be:27:36:47:c1:86:84:20:bc:35:bf:ca:cf:
30:fc:8f:a5:ff:07:d1:c2:0d:88:e4:8b:4f:ab:6d:
6d:24:da:d9:4a:a8:fb:1e:f3:80:ac:9b:75:f9:35:
a6:ef:18:6a:03:9d:b5:fd:14:d1:17:65:01:2e:71:
17:5a:99:fc:9f:8a:ed:66:2a:76:84:16:08:cd:46:
e5:82:43:63:5c:c9:a5:e2:28:52:35:5a:21:4c:63:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:C1:CE:6E:80:7C:F3:FF:F3:D0:CA:9D:AB:50:FF:77:DE:C4:D7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/iWHBzm6AfPP_89DKnatQ_3fexNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:31:5e:ae:f8:b0:6c:18:5b:35:3e:4e:79:3f:2c:3e:ff:2b:
4d:88:8c:fb:45:98:0f:f4:46:ce:6f:c5:eb:1e:5d:59:eb:0e:
5c:28:cb:3e:34:86:65:dc:87:db:26:ea:a0:ce:0d:24:18:7f:
a8:22:b0:f4:9e:f6:e7:11:98:5a:4a:c4:ff:02:6d:cd:dc:a8:
08:82:53:15:be:fc:e0:bd:45:db:b0:18:9b:21:37:05:6d:4b:
47:f5:8b:38:9a:ee:93:73:37:62:bc:f7:77:aa:3d:6a:68:43:
a4:d6:5e:59:80:ef:22:22:dd:93:a8:2c:be:ec:37:30:a5:ca:
b1:81:9a:96:81:82:a5:b6:bd:45:57:c0:bf:77:2f:35:41:4d:
66:98:f0:c1:d8:fb:b0:2e:e6:08:92:7d:74:12:04:9d:bb:7e:
32:9e:8e:78:a6:ba:d1:d7:79:62:95:4a:74:cb:8d:d4:36:cf:
15:63:51:94:33:1c:db:4d:af:02:06:da:c5:2e:41:b4:54:21:
01:40:cf:05:a9:ce:c5:d2:0d:94:70:56:1c:b9:79:b3:2b:fc:
30:80:69:a1:3e:8d:38:f1:56:98:99:55:92:dd:f0:79:8b:eb:
d1:a5:9e:b2:4b:51:f8:99:5c:8e:cc:38:b5:11:7c:01:d3:03:
93:aa:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 10:14:52 2024 by rpki-client on console.sobornost.net