Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ndv8-ZysEQOkGD_a-wZaEMNVMhM.roa
File: ndv8-ZysEQOkGD_a-wZaEMNVMhM.roa (raw, json)
Hash identifier: huhJEWkUpfxb+Cpa5AZydipWfE1VCekDN4uT/i5patg=
Subject key identifier: 9D:DB:FC:F9:9C:AC:11:03:A4:18:3F:DA:FB:06:5A:10:C3:55:32:13
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E89E7ABABD354CFAEB229DB25E2910C35
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ndv8-ZysEQOkGD_a-wZaEMNVMhM.roa
Signing time: Fri 29 Mar 2024 11:10:45 +0000
ROA not before: Fri 29 Mar 2024 11:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 29 Mar 2024 12:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:89:e7:ab:ab:d3:54:cf:ae:b2:29:db:25:e2:91:0c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 29 11:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ddbfcf99cac1103a4183fdafb065a10c3553213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:bd:80:88:fb:34:1f:77:88:a8:15:20:2f:
d2:31:81:bb:f1:bd:04:fc:f2:09:a5:aa:c9:a2:e6:
30:a0:5a:5e:5a:ce:cb:ff:f5:93:9a:86:67:2f:87:
9d:2f:d5:ae:d3:71:bd:bf:68:1e:97:39:b8:ed:a2:
1a:ac:c5:db:b2:aa:cc:45:06:c6:54:62:4f:68:4c:
94:58:92:4a:ec:2a:d4:f9:2b:89:d2:4a:99:31:ae:
93:98:38:1a:ce:40:aa:33:e8:e2:d9:56:f2:67:ba:
1a:75:b8:85:4f:0e:71:c6:11:48:bf:a9:9d:24:60:
24:00:bf:ea:16:eb:58:db:18:65:fa:57:73:04:c4:
12:4b:e7:25:3f:80:0d:ba:99:b2:79:25:9e:7f:4f:
39:b5:e4:48:9f:a5:af:89:c1:ed:74:ef:67:f0:ba:
f0:3d:d5:03:ec:da:1e:b3:59:c5:e0:b2:88:47:7a:
e2:f3:1f:bb:71:9e:de:81:77:ad:dc:c6:da:57:99:
82:5b:70:e0:b6:b6:59:d2:d0:a1:ec:25:c0:50:d3:
76:4e:e3:56:c0:48:51:ff:58:28:5d:d1:af:99:e6:
56:1c:7b:6d:ae:ac:5e:f9:78:df:a6:88:ac:89:dd:
8e:f9:b0:3a:cf:cc:f8:33:3b:b9:27:39:76:28:2b:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DB:FC:F9:9C:AC:11:03:A4:18:3F:DA:FB:06:5A:10:C3:55:32:13
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ndv8-ZysEQOkGD_a-wZaEMNVMhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:27:19:f8:54:2c:a4:12:02:15:89:1a:21:c4:1b:11:ff:4a:
2c:4f:42:1a:d1:cc:ef:46:48:b8:52:6b:13:2f:f5:4e:0d:66:
31:7f:c8:58:78:04:20:92:68:7f:e5:3d:e3:99:8d:82:38:e0:
51:96:22:8b:b2:aa:7f:f8:c3:63:4c:71:91:36:33:6f:3f:ab:
09:6e:8a:ac:2c:bd:53:ff:54:57:68:dc:78:16:8a:88:cd:3f:
93:cd:f1:7b:0c:03:0d:fc:39:0c:00:e1:60:48:0c:6a:b5:f7:
bb:ca:99:36:bb:12:00:6d:af:90:7a:f9:aa:c8:63:d1:0e:20:
3d:34:ef:ba:ee:6c:e9:3b:fa:fd:ad:23:43:31:bf:66:08:2d:
80:c7:71:e4:7c:8e:28:4c:7c:aa:c7:25:6f:b1:2d:64:2b:7d:
da:e2:21:f4:c4:cf:94:e5:37:04:6d:59:5c:63:42:e3:3c:97:
3f:a1:af:e2:31:fb:83:0a:97:f4:cd:81:12:b4:1c:dd:50:51:
d1:1b:14:c7:d2:d2:53:16:e7:21:ce:ad:ad:6f:2b:6e:27:a1:
e5:3f:59:9e:4e:b5:43:5c:90:99:b7:cd:c6:3f:24:74:21:84:
31:d6:cf:89:fc:74:b9:3a:54:e3:95:e9:df:65:a4:bc:52:86:
73:07:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 17:59:46 2024 by rpki-client on console.sobornost.net