Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mlZxsF-7M4ZquuWfFmtCnWypys8.roa
File: mlZxsF-7M4ZquuWfFmtCnWypys8.roa (raw, json)
Hash identifier: PUfKK3MdXyBvf4eapUwwAa4IA4l4pQyjMOCn31Eq3k4=
Subject key identifier: 9A:56:71:B0:5F:BB:33:86:6A:BA:E5:9F:16:6B:42:9D:6C:A9:CA:CF
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA85F426DD68DDC692C9F195870EFBD84
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mlZxsF-7M4ZquuWfFmtCnWypys8.roa
Signing time: Thu 04 Apr 2024 09:09:58 +0000
ROA not before: Thu 04 Apr 2024 09:09:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 04 Apr 2024 10:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:5f:42:6d:d6:8d:dc:69:2c:9f:19:58:70:ef:bd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 4 09:09:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a5671b05fbb33866abae59f166b429d6ca9cacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bd:27:2d:73:6b:59:68:79:7e:2e:f5:42:11:
85:71:46:56:6e:07:cd:c5:64:e2:10:4a:ed:1d:0f:
2a:7b:21:31:6a:72:a6:95:8b:b2:8b:38:cc:f8:48:
db:bc:cd:f9:8a:f9:90:be:d2:7d:49:bb:d3:2e:fa:
0b:af:01:f6:2d:78:e4:34:22:9a:bf:95:fa:db:e4:
fa:66:a6:1d:74:24:d5:5f:33:45:13:0d:b9:57:38:
04:08:f5:0f:7c:d3:bf:ec:d4:e1:3e:2b:1e:e7:e6:
c8:7a:9e:20:e4:81:1a:9a:70:e9:f0:b2:f0:0f:55:
0e:b1:ff:40:94:79:11:f4:51:56:64:ea:15:ba:01:
e4:c9:c5:32:60:4c:dc:4e:11:c3:8d:d6:f3:33:2b:
76:fe:b5:29:08:4b:48:6c:25:e3:b2:16:af:f8:a8:
dc:f8:52:51:af:b1:23:a4:8c:3e:23:a3:a7:61:0d:
c0:47:e3:70:e1:63:d1:7b:23:75:a5:54:92:f1:72:
64:49:0f:b4:c2:32:34:41:fb:e9:6a:03:84:37:ec:
f1:fb:53:04:44:58:36:34:dd:67:44:33:63:75:b8:
2b:73:3c:8e:01:1e:ad:66:f5:79:c2:1a:51:ec:1a:
8a:ff:fd:83:93:e5:48:4e:ec:98:9e:87:2a:fb:bc:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:56:71:B0:5F:BB:33:86:6A:BA:E5:9F:16:6B:42:9D:6C:A9:CA:CF
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mlZxsF-7M4ZquuWfFmtCnWypys8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:b1:f2:b2:65:14:9d:8d:40:40:2e:01:f5:15:e1:15:d1:34:
83:41:16:4f:a3:18:20:84:33:19:9a:8f:58:49:85:31:67:be:
f6:76:26:2d:b3:71:30:1a:b7:45:fe:34:7d:eb:ac:f2:8a:2c:
5d:16:f0:52:d6:35:18:f5:90:a7:1c:68:8e:d8:2d:ed:90:51:
af:87:10:6c:f4:12:98:e2:e8:db:8f:3b:2e:44:70:f3:72:a1:
f5:d3:a6:0a:df:9d:8a:15:d2:2e:01:33:3a:f0:16:56:9c:95:
09:6c:6f:e8:4b:ba:d0:f7:32:0e:4b:e5:ef:4c:66:ab:5b:6a:
ba:00:fc:1b:3f:d3:40:2c:cd:0f:fc:23:e7:80:8e:5a:ee:72:
5c:47:19:a8:03:b4:db:f4:b5:46:8c:58:6d:d6:52:c2:19:7e:
ba:83:b3:66:c4:c3:86:55:73:a7:24:7d:ad:2c:a8:f1:42:a4:
c0:e3:3b:75:59:77:76:d4:78:9d:8b:5d:76:37:a7:f9:85:c4:
db:42:d7:b0:7e:76:14:35:7a:65:29:32:6e:5d:22:32:fa:ab:
3a:0b:4a:ce:a9:d7:d9:44:bd:00:d0:4c:f9:63:e3:d1:a9:1a:
94:12:c8:56:71:9f:86:7a:f6:12:66:a1:41:57:5f:e4:28:71:
ad:41:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 16:20:06 2024 by rpki-client on console.sobornost.net