Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/l7rXnYvD9iEBBfhvNuPhDjDh3cw.roa
File: l7rXnYvD9iEBBfhvNuPhDjDh3cw.roa (raw, json)
Hash identifier: 5rJoLqdLIj7rSrSEO/U1QeoQmZd/dCK4ZPvCKW6mf1Q=
Subject key identifier: 97:BA:D7:9D:8B:C3:F6:21:01:05:F8:6F:36:E3:E1:0E:30:E1:DD:CC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E54466C1E744DFACE72D2526FE715E172
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/l7rXnYvD9iEBBfhvNuPhDjDh3cw.roa
Signing time: Tue 19 Mar 2024 01:14:45 +0000
ROA not before: Tue 19 Mar 2024 01:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 19 Mar 2024 02:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:54:46:6c:1e:74:4d:fa:ce:72:d2:52:6f:e7:15:e1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 19 01:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97bad79d8bc3f6210105f86f36e3e10e30e1ddcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:c2:aa:97:c3:40:b6:82:0c:96:b7:fb:bc:
d7:4c:4c:b6:64:9e:80:f1:15:4d:7c:60:60:74:87:
cc:c3:11:3a:d2:10:c8:fa:d1:8c:49:dc:a5:1c:b9:
59:44:55:e9:18:03:58:09:8b:10:54:e9:5c:5d:56:
21:62:87:51:75:a4:c2:2d:93:e7:b8:5f:8f:41:3f:
bd:68:d6:b1:17:42:f1:6f:45:5b:93:10:6e:c7:88:
b3:aa:7f:dd:e1:6e:03:f3:27:0a:67:39:2c:d3:e0:
e3:6e:09:1e:cc:5a:b0:b2:d7:b6:b4:7a:ce:c0:81:
6e:cd:55:1a:cc:f2:aa:e0:de:a8:c4:ac:ac:df:45:
3d:6c:d8:2c:81:a9:da:b7:aa:c6:17:2d:a0:3d:53:
28:70:57:b5:51:e9:43:fb:5f:08:20:77:30:be:bd:
2c:3c:db:47:ae:d6:33:06:34:e9:a1:81:68:d6:8d:
23:19:91:bb:75:4f:69:6b:c6:3b:20:b2:35:64:16:
09:bc:78:1c:43:9b:71:cd:ea:b1:6c:6c:d8:17:38:
99:69:25:b3:b6:cd:9c:b5:44:74:49:b5:45:6a:0e:
d8:43:df:83:60:68:43:fb:73:8f:61:37:d6:cb:37:
f5:97:6c:d8:5d:17:8c:22:70:05:a9:00:08:1c:45:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BA:D7:9D:8B:C3:F6:21:01:05:F8:6F:36:E3:E1:0E:30:E1:DD:CC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/l7rXnYvD9iEBBfhvNuPhDjDh3cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:0c:59:ea:ea:b7:3a:49:b6:44:7e:ac:ea:e1:a3:36:55:d5:
97:7c:a6:d2:e5:25:94:c1:5f:da:70:6a:16:9c:92:93:d3:51:
6f:82:7a:22:84:b1:50:aa:51:3a:34:11:27:02:73:52:06:1b:
d9:6b:43:49:50:20:ad:d1:c0:f0:af:da:ec:95:33:b8:86:27:
67:27:56:3f:a7:b4:84:b8:c8:13:db:a3:70:90:c9:0b:ac:98:
e8:df:65:02:ec:d1:27:05:29:03:99:e4:4b:48:d9:30:2e:55:
33:6d:15:2f:71:df:64:10:c1:e2:cd:96:f8:1c:54:6b:24:44:
48:9e:f6:29:72:3d:72:d7:77:6c:02:6b:84:58:cc:74:85:e8:
46:e7:7f:a0:a0:8d:bd:0c:4a:2c:07:3b:17:17:5e:66:1d:77:
e3:f9:92:e3:bb:8a:40:94:54:ba:ac:ae:60:1e:3f:ed:e7:5e:
bc:6c:f5:67:92:f5:63:0c:f3:52:99:0f:a3:6c:29:61:10:e2:
b7:5a:db:6b:ff:2b:d1:cd:ba:56:0b:d9:e2:8a:8a:fd:1c:21:
61:c8:de:1f:a0:70:97:c0:9c:55:67:64:39:24:2b:39:dd:fe:
fe:09:55:f3:cd:f4:42:aa:87:57:95:8e:5b:48:32:08:cc:2d:
f0:f7:2a:33
-----BEGIN CERTIFICATE-----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Generated at Tue Mar 19 07:20:32 2024 by rpki-client on console.sobornost.net