Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/m7RiJlVzy46rKPv9HuPt6DKemDA.roa
File: m7RiJlVzy46rKPv9HuPt6DKemDA.roa (raw, json)
Hash identifier: btw2QVG/datTs/HMv3fFP9nEb3XroYvJdIRrMSsQDoY=
Subject key identifier: 9B:B4:62:26:55:73:CB:8E:AB:28:FB:FD:1E:E3:ED:E8:32:9E:98:30
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2C545CDF89BBF90611EAA99C0FCAB30D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/m7RiJlVzy46rKPv9HuPt6DKemDA.roa
Signing time: Mon 11 Mar 2024 07:05:10 +0000
ROA not before: Mon 11 Mar 2024 07:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:2c53:a731/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 11 Mar 2024 07:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:54:5c:df:89:bb:f9:06:11:ea:a9:9c:0f:ca:b3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 11 07:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bb462265573cb8eab28fbfd1ee3ede8329e9830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c5:57:1c:a0:01:02:d0:1b:51:38:50:a0:c3:
20:ba:0e:0b:37:cf:b9:46:83:db:98:cc:ec:db:38:
ea:84:4d:12:d6:2c:b0:51:4a:4b:0e:36:6e:9d:5e:
9b:b8:30:f8:7a:bd:f3:34:be:d8:7b:80:83:40:e4:
44:e1:cd:57:da:e2:02:32:f1:ed:59:b9:4a:9a:f3:
18:fa:1f:46:be:39:4e:95:65:50:f5:81:cc:1d:29:
97:25:df:3f:5b:66:fd:54:9f:92:7d:ce:ac:64:c0:
11:c2:6e:26:ef:b1:84:41:5e:a6:5a:95:c0:95:cc:
ef:81:59:aa:99:2f:f1:c2:99:5f:36:1c:c1:96:c2:
8c:11:b0:52:3b:c9:ae:2b:2b:6b:11:89:af:e5:0d:
9f:7a:fc:2a:53:f6:7c:94:58:1d:bd:79:b5:70:af:
db:6e:1e:e1:0d:13:6a:75:cb:7a:7a:3b:bd:2a:08:
a9:08:76:93:fa:f1:c1:0d:68:71:f8:91:3a:4a:aa:
c9:b3:9e:0f:d3:65:47:a8:ea:f1:39:7a:c7:4c:17:
f5:a9:f7:82:98:06:04:43:69:23:ba:9d:60:d0:96:
76:ab:77:bf:41:0a:0f:78:f3:10:c1:31:de:20:81:
09:45:2a:e3:7f:c4:3d:fc:74:7e:8e:c7:0e:7d:98:
72:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B4:62:26:55:73:CB:8E:AB:28:FB:FD:1E:E3:ED:E8:32:9E:98:30
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/m7RiJlVzy46rKPv9HuPt6DKemDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:d3:43:f0:52:4c:9c:6d:94:c6:9f:31:85:eb:c2:7e:49:7d:
4e:1c:52:f3:0d:90:12:95:35:0e:0b:2f:23:33:8b:b8:0a:90:
23:bd:52:d2:01:1c:dd:f1:c1:a1:c2:6e:0c:d4:71:c8:01:11:
85:71:21:a9:63:93:74:3f:71:ef:59:00:c5:2c:b2:19:91:22:
65:09:bd:46:ce:d3:ed:bf:81:8f:8a:d6:0c:25:c9:42:e9:d6:
5e:e2:6c:c4:af:ef:63:0f:9f:96:1c:fe:b1:dd:df:76:ca:7d:
1b:f5:8a:95:55:a9:a8:bc:5f:5d:34:6e:ab:c2:b4:d9:bb:61:
79:57:c4:b6:34:6c:70:f7:6c:7e:df:8b:fa:ca:b0:9e:30:54:
9a:72:82:17:f0:1e:41:a5:09:35:e7:eb:91:a3:73:ff:3d:bc:
1e:db:51:44:ad:f0:c6:e4:22:c7:70:4f:53:74:ce:c6:0f:60:
08:b5:15:75:cc:69:35:a5:8c:e5:af:49:d6:37:27:2a:fd:0a:
a3:07:35:53:d8:4c:4c:87:5d:ea:a4:49:37:af:f2:0c:19:9f:
ca:27:dd:ae:85:a1:8d:6c:9f:76:0d:6b:f6:0f:34:ab:01:13:
07:ab:8a:4a:52:2a:29:10:0f:48:40:ce:60:ac:0e:46:de:d9:
d6:e9:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 14:02:48 2024 by rpki-client on console.sobornost.net