Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/kzTS0nTNkzRwaHll2fBqcc-sVpA.roa
File: kzTS0nTNkzRwaHll2fBqcc-sVpA.roa (raw, json)
Hash identifier: GZ63vtPDdH7zOWTGqdxC1W1lfS/0xQPIwf8MdtlPXrc=
Subject key identifier: 93:34:D2:D2:74:CD:93:34:70:68:79:65:D9:F0:6A:71:CF:AC:56:90
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EDC4EAB0D85905FC6B56350D3BF85BC34
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/kzTS0nTNkzRwaHll2fBqcc-sVpA.roa
Signing time: Sun 14 Apr 2024 11:12:06 +0000
ROA not before: Sun 14 Apr 2024 11:12:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 Apr 2024 12:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dc:4e:ab:0d:85:90:5f:c6:b5:63:50:d3:bf:85:bc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 14 11:12:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9334d2d274cd933470687965d9f06a71cfac5690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:1e:2c:76:f9:b4:02:95:69:cd:b3:c2:dc:
23:95:ad:10:73:6f:6c:29:2f:51:64:76:33:ac:9f:
62:c4:58:e3:48:dc:2e:ea:1f:41:69:5d:65:ab:c8:
be:8b:f2:5e:fc:a6:b9:65:8f:65:e2:a5:da:c1:be:
79:2b:e4:cb:34:6f:e1:39:32:8f:41:92:69:81:a5:
68:1b:b4:52:67:99:1d:2f:63:64:08:e8:72:0a:9d:
73:cc:5a:73:16:ca:7f:17:5f:71:50:e3:89:1f:93:
fd:f7:bc:ee:bc:2d:e3:f6:53:3e:c7:22:a7:45:28:
87:a8:f5:50:0c:a4:cc:f3:b2:44:49:e7:97:d8:f8:
fd:9b:3c:bf:3b:1c:9e:d0:73:48:c4:d1:1a:e2:b9:
e6:a2:5f:82:e4:67:b0:71:0b:48:a3:aa:64:09:11:
4d:fb:9c:c7:b3:bc:3f:9a:f4:50:c6:69:01:a4:88:
b9:6b:b6:32:5a:c3:07:24:14:07:f2:c8:2e:bf:f1:
71:2f:85:08:87:d0:cf:f8:66:7d:ce:a3:72:55:69:
f0:73:67:28:a9:6e:bc:93:3d:a9:f8:31:4f:a1:9d:
00:07:9d:49:0c:6b:ec:4e:1f:a6:b2:89:e9:13:2a:
61:77:48:f0:66:7a:51:e5:b9:08:fc:fe:08:fe:4e:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:34:D2:D2:74:CD:93:34:70:68:79:65:D9:F0:6A:71:CF:AC:56:90
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/kzTS0nTNkzRwaHll2fBqcc-sVpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:ba:9c:2d:32:3d:36:85:29:10:89:99:e2:04:b2:a6:39:0d:
a0:f4:55:73:5a:b3:cd:42:0a:e6:36:75:b7:7a:e8:c7:d7:c8:
c1:3f:10:6a:d4:c4:b4:8f:aa:18:e5:56:dc:2b:11:cc:80:a8:
e8:0f:20:f3:3c:75:c9:c6:50:af:f7:ae:ec:f8:85:5e:0c:b9:
4f:0b:56:37:77:d8:3e:38:48:32:94:6b:3a:bf:d6:ca:9d:06:
37:d2:28:dc:de:c2:90:73:2b:99:cd:bf:06:00:0c:b9:7a:82:
b8:41:6e:c7:3c:64:fd:cd:2c:8e:3d:84:d7:e9:30:89:84:1e:
8f:d0:bf:b3:c0:b1:a6:9a:90:3c:b2:c8:a4:0e:2c:e3:86:69:
10:51:30:44:a1:42:c8:a1:0b:78:e7:f3:b7:40:67:fe:e7:6e:
e0:34:77:86:6e:a1:4b:fb:89:a2:6a:21:ed:9e:3e:e2:60:2d:
11:89:6b:a3:93:6a:f4:0f:fb:3d:49:10:4a:c5:0c:49:c3:fd:
53:af:ee:d4:27:8a:87:35:15:02:54:f4:27:01:0f:79:6a:95:
30:17:42:83:f0:29:26:96:62:01:67:47:8b:9d:df:12:d8:eb:
68:e0:bf:6b:45:15:f9:8c:2c:f4:02:04:e2:6c:b3:8f:99:ed:
ac:5e:50:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 16:37:36 2024 by rpki-client on console.sobornost.net