Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nYPYHinkUHasyR0Q6KvtxG0j4EQ.roa
File: nYPYHinkUHasyR0Q6KvtxG0j4EQ.roa (raw, json)
Hash identifier: BHN53Ee1l/yRgQ+wbp+2xTXIJIwfESFB4s0Qs7OMk0Y=
Subject key identifier: 9D:83:D8:1E:29:E4:50:76:AC:C9:1D:10:E8:AB:ED:C4:6D:23:E0:44
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E93239026FEC95FA908ED8896002CC7C6
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nYPYHinkUHasyR0Q6KvtxG0j4EQ.roa
Signing time: Sun 31 Mar 2024 06:12:45 +0000
ROA not before: Sun 31 Mar 2024 06:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 31 Mar 2024 07:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:93:23:90:26:fe:c9:5f:a9:08:ed:88:96:00:2c:c7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 06:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d83d81e29e45076acc91d10e8abedc46d23e044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:9e:f4:60:f3:24:12:89:88:a7:95:4d:b3:
0f:3e:47:85:1f:df:93:cc:58:75:b8:fe:cd:e4:4c:
86:06:99:76:7e:d9:9a:0c:b7:bd:4f:dd:63:7f:6a:
98:71:27:d6:55:7d:94:9a:f3:91:b7:e0:8b:18:3e:
77:94:5c:61:dd:bc:38:c2:9a:a5:df:6c:ed:e7:de:
0e:83:3c:94:2f:b5:e6:bf:1d:66:d5:b5:bf:a6:cd:
9e:79:23:81:6d:42:6c:a6:f1:65:36:93:58:a7:dd:
d8:d4:b8:99:f6:7d:5b:1d:73:7c:ad:8c:4d:f2:ea:
ea:df:bf:d4:23:02:14:80:96:d4:07:c8:4c:a1:e1:
05:5e:08:b7:0b:b2:f7:dd:de:f9:5b:44:05:de:8d:
f7:ca:79:8f:9d:a7:ad:29:a8:e3:76:97:9a:dd:eb:
1b:b7:14:3c:b0:f6:b6:24:d6:b0:3e:0b:13:6d:c8:
7f:a8:ac:24:50:1b:60:53:7b:99:8a:cc:f9:6f:a6:
08:64:a1:5c:5f:39:a5:5d:2b:77:9d:0c:f3:7f:dc:
92:fa:c6:7f:0a:c4:26:1d:4f:4d:4a:82:a7:47:bc:
f8:12:57:73:9a:9d:6c:0c:a7:49:6a:68:76:b6:56:
ba:68:6a:28:56:b6:f9:0a:8c:ae:97:2d:01:20:4a:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:83:D8:1E:29:E4:50:76:AC:C9:1D:10:E8:AB:ED:C4:6D:23:E0:44
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nYPYHinkUHasyR0Q6KvtxG0j4EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:51:7d:e3:c0:07:f1:0c:f8:d9:97:6f:01:17:c8:0e:dc:40:
76:70:d7:a5:96:c4:43:82:45:e5:fb:b1:a8:23:1d:d2:51:54:
df:fa:cb:fe:fb:66:12:70:d9:ff:42:93:db:92:1a:17:d3:70:
b8:7c:c0:af:03:30:2b:a9:1d:e8:bb:f0:cd:57:b7:21:12:4f:
07:44:b4:03:28:a9:48:b4:c6:ab:57:4c:33:dd:58:b9:7f:02:
59:a2:15:bb:21:53:00:29:55:4e:d1:8d:26:a2:6e:52:90:8f:
92:be:16:55:fb:2d:97:fe:69:1b:85:5e:5a:93:db:74:91:af:
54:5e:f2:2b:95:63:30:2f:e5:ad:d1:93:35:32:8b:28:02:90:
ad:43:7a:a1:de:90:8c:64:e0:0c:9f:a4:7a:d3:25:49:d6:b1:
9e:af:fe:3d:88:ec:02:51:8f:79:ee:d9:14:19:66:87:16:3c:
db:f8:5d:7c:b2:af:fc:15:00:f1:07:6b:6e:54:62:d8:ff:97:
26:b0:be:a1:2b:75:60:b3:8c:5e:58:9d:31:78:23:dd:29:0f:
af:1f:4b:38:77:18:ed:65:6b:9f:ad:9c:8a:42:fc:78:f7:a8:
7a:09:7e:79:b5:64:a2:10:df:3b:e5:97:5e:f3:ae:d8:09:8a:
01:df:57:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 12:03:00 2024 by rpki-client on console.sobornost.net