Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mCXLNnItc48BBuB4Z7jJuOeIzqw.roa
File: mCXLNnItc48BBuB4Z7jJuOeIzqw.roa (raw, json)
Hash identifier: p1UdI1njHocEF/PvChN31GpKCGels5BQ5zwtjz5BQ9s=
Subject key identifier: 98:25:CB:36:72:2D:73:8F:01:06:E0:78:67:B8:C9:B8:E7:88:CE:AC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E246C21BF3EF16D8F3AB2AD05AA524A62
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mCXLNnItc48BBuB4Z7jJuOeIzqw.roa
Signing time: Sat 09 Mar 2024 18:14:10 +0000
ROA not before: Sat 09 Mar 2024 18:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 09 Mar 2024 19:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:24:6c:21:bf:3e:f1:6d:8f:3a:b2:ad:05:aa:52:4a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 9 18:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9825cb36722d738f0106e07867b8c9b8e788ceac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:a9:a5:1d:d5:ed:11:ed:9e:e7:33:d6:0c:
9b:03:e0:02:22:0f:3f:c2:25:de:89:ad:55:5a:51:
47:4b:c0:98:d2:82:32:0e:ab:d4:ad:a7:d4:2f:0e:
19:dd:f4:b4:4f:6a:66:e3:ec:15:e8:58:ef:05:35:
c5:ab:be:70:f1:a7:81:f5:09:3d:a5:c6:08:9c:b2:
fa:8a:b4:5e:b0:7a:be:15:90:4b:09:fd:00:bb:38:
ff:9d:2d:b3:4d:1c:84:b6:e8:30:33:a9:bd:fc:5e:
33:5c:2d:ec:cc:04:00:90:f2:39:37:f0:ca:34:7f:
4e:1a:f9:f3:5c:ac:8d:3e:f5:f0:10:d2:c8:f2:e3:
d8:87:77:32:67:c1:49:2f:be:4b:a2:14:42:5c:5e:
c4:87:60:1c:ff:9c:19:cb:e9:41:74:a0:d2:07:cf:
d0:27:c0:8a:88:49:75:74:7d:4c:44:25:c1:05:c3:
70:b8:40:87:83:9b:0a:9f:9b:2c:27:58:ce:d5:7f:
9e:f5:6a:65:76:1e:f4:6f:26:77:72:40:fc:b7:32:
69:ff:dd:fa:37:13:5f:fb:c9:6c:90:67:90:b5:46:
3c:f8:e0:18:f7:2c:0f:c3:3f:b7:81:6c:2e:53:3a:
91:08:84:ee:f4:62:e4:87:7b:b9:d2:67:7c:35:6a:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:25:CB:36:72:2D:73:8F:01:06:E0:78:67:B8:C9:B8:E7:88:CE:AC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mCXLNnItc48BBuB4Z7jJuOeIzqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:2d:ae:d9:63:03:8c:ae:05:1e:11:a1:e7:01:48:5e:07:07:
a7:2c:11:7f:cc:17:d9:6d:6d:1c:fb:ad:e4:03:e3:67:dc:ae:
ed:33:be:8d:c6:b5:da:5f:52:14:9e:25:21:3c:b9:ea:9b:8f:
18:8c:d9:43:1f:fc:25:16:91:81:fc:cf:7c:20:6b:d7:f5:a9:
cb:e1:7d:0f:b4:58:7c:e6:41:df:53:1b:e4:89:8b:7a:5e:f5:
f8:fa:be:79:8a:04:95:3a:55:7b:ec:03:80:eb:08:93:c7:91:
43:d3:f9:08:78:46:89:5e:a6:59:b6:7a:44:3f:84:7d:af:d7:
01:48:a0:27:b3:63:2b:18:31:df:98:d1:d0:44:51:5d:94:67:
a8:33:b8:f3:29:25:e8:cd:3f:f0:c6:a9:70:7d:3a:24:51:a6:
98:53:36:1b:88:fc:d8:a6:3f:81:e5:09:9e:32:b6:99:b5:4a:
73:db:53:5a:9e:0e:80:8f:6d:2c:dc:29:fe:e3:fd:0a:ef:d7:
ce:00:c1:2e:d0:13:f6:07:8b:3f:5a:de:17:ee:46:00:fc:31:
f8:f2:ab:5b:20:93:0d:c7:56:97:48:84:e8:91:21:94:4b:c1:
28:16:ae:14:9b:f2:3d:e0:53:6b:f2:44:14:3e:db:d4:0e:49:
4a:fb:af:c7
-----BEGIN CERTIFICATE-----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Generated at Sat Mar 9 22:09:17 2024 by rpki-client on console.sobornost.net