Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/n_A5HqgHFzvnXI5XVlOFghONN0k.roa
File: n_A5HqgHFzvnXI5XVlOFghONN0k.roa (raw, json)
Hash identifier: QpzkFepeO2pgUhdflJBjf6G46f5Ht5aOLaNQhYMWIvc=
Subject key identifier: 9F:F0:39:1E:A8:07:17:3B:E7:5C:8E:57:56:53:85:82:13:8D:37:49
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EA33B6FC1F8E6DDDDFA491B8BC9674F03
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/n_A5HqgHFzvnXI5XVlOFghONN0k.roa
Signing time: Wed 03 Apr 2024 09:12:45 +0000
ROA not before: Wed 03 Apr 2024 09:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 03 Apr 2024 10:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:3b:6f:c1:f8:e6:dd:dd:fa:49:1b:8b:c9:67:4f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 3 09:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ff0391ea807173be75c8e5756538582138d3749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:7b:9b:47:5f:da:0f:6f:48:05:01:23:3d:
c8:76:dd:19:e0:b1:3c:62:f3:a5:4c:39:f5:9d:48:
e0:15:cd:22:a5:84:77:cb:79:8f:69:48:5b:13:bd:
2d:af:e2:29:f9:0a:61:2b:76:39:ae:70:3f:1d:39:
8d:dc:8f:01:fb:b0:87:63:7d:e6:cd:9c:61:e9:51:
13:8b:73:8f:45:f9:98:1d:0d:e0:23:3c:60:36:ad:
82:59:e8:3f:14:f8:7c:59:9e:38:49:77:c4:1c:76:
41:13:1e:34:29:0d:74:9f:49:5c:1e:ad:2a:a5:2d:
28:37:1d:14:d5:cf:6b:4c:f1:58:01:b8:a5:39:2e:
ab:16:7e:95:ed:9b:45:38:20:47:25:11:1b:61:f2:
25:f1:d3:85:e6:65:57:c4:f8:b3:66:4f:f7:85:fe:
14:f5:ca:45:5e:24:5c:b7:b0:d6:4e:75:25:47:a1:
65:30:fe:53:4c:01:af:2b:02:cb:7e:17:f0:fb:94:
7f:67:2c:4b:8d:aa:fe:ad:2d:df:65:bf:1f:71:4b:
eb:90:fa:03:83:3c:98:29:91:05:78:54:fc:2b:bc:
d8:2c:53:0b:dc:95:39:fa:1d:83:48:2a:49:95:cb:
1b:41:86:11:8d:12:d5:a9:22:2f:0b:5c:9d:c3:91:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:39:1E:A8:07:17:3B:E7:5C:8E:57:56:53:85:82:13:8D:37:49
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/n_A5HqgHFzvnXI5XVlOFghONN0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:7e:73:b9:52:5e:c4:bd:1b:78:e4:48:db:5b:81:08:95:50:
06:5e:ec:ef:0e:25:2a:a1:c4:bf:d0:48:dd:39:18:c5:4e:38:
1c:8b:cc:fd:42:63:19:cf:2b:b5:a1:d9:f4:8d:60:63:81:d9:
ff:94:bf:e8:23:0f:aa:2b:b3:1d:8c:0c:c5:82:53:14:5f:82:
45:2c:b5:f8:1c:8e:50:05:07:59:3d:96:23:72:00:23:7f:96:
2f:cb:0a:67:ee:e0:a4:bd:57:60:c5:67:58:dc:c1:ab:66:10:
13:ce:44:80:47:47:8a:bb:79:21:7c:1d:31:1c:60:65:47:4f:
51:73:74:2f:23:d4:ff:bc:93:4c:bd:97:3b:7a:be:9c:85:02:
27:42:f8:28:67:39:d3:53:35:1b:67:65:05:09:1b:4e:54:79:
ce:19:c0:3c:1c:34:a7:ed:1d:41:ab:7e:e1:64:d8:09:ad:c8:
16:21:21:d1:d3:b2:95:1e:06:33:a2:4c:ca:ea:12:6c:1e:45:
73:f2:2e:95:3b:9c:33:43:f0:99:ad:e7:57:e2:87:09:ef:61:
0b:81:e6:6b:2c:66:ea:0b:77:da:39:65:dd:92:cc:fc:85:f0:
db:a2:10:65:89:86:82:c2:32:45:b3:26:64:a9:a3:81:a5:de:
83:c2:a4:a4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6jO2/B+Obd3fpJG4vJZ08DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDAzMDkxMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmYwMzkxZWE4MDcxNzNiZTc1YzhlNTc1NjUzODU4MjEzOGQzNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryd7m0df2g9vSAUBIz3Idt0Z4LE8
YvOlTDn1nUjgFc0ipYR3y3mPaUhbE70tr+Ip+QphK3Y5rnA/HTmN3I8B+7CHY33m
zZxh6VETi3OPRfmYHQ3gIzxgNq2CWeg/FPh8WZ44SXfEHHZBEx40KQ10n0lcHq0q
pS0oNx0U1c9rTPFYAbilOS6rFn6V7ZtFOCBHJREbYfIl8dOF5mVXxPizZk/3hf4U
9cpFXiRct7DWTnUlR6FlMP5TTAGvKwLLfhfw+5R/ZyxLjar+rS3fZb8fcUvrkPoD
gzyYKZEFeFT8K7zYLFML3JU5+h2DSCpJlcsbQYYRjRLVqSIvC1ydw5HX6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ/wOR6oBxc751yOV1ZThYITjTdJMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvbl9BNUhxZ0hGenZuWEk1WFZsT0ZnaE9OTjBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF9+c7lSXsS9G3jkSNtb
gQiVUAZe7O8OJSqhxL/QSN05GMVOOByLzP1CYxnPK7Wh2fSNYGOB2f+Uv+gjD6or
sx2MDMWCUxRfgkUstfgcjlAFB1k9liNyACN/li/LCmfu4KS9V2DFZ1jcwatmEBPO
RIBHR4q7eSF8HTEcYGVHT1FzdC8j1P+8k0y9lzt6vpyFAidC+ChnOdNTNRtnZQUJ
G05Uec4ZwDwcNKftHUGrfuFk2AmtyBYhIdHTspUeBjOiTMrqEmweRXPyLpU7nDND
8Jmt51fihwnvYQuB5mssZuoLd9o5Zd2SzPyF8NuiEGWJhoLCMkWzJmSpo4Gl3oPC
pKQ=
-----END CERTIFICATE-----
Generated at Wed Apr 3 16:33:23 2024 by rpki-client on console.sobornost.net