Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ohywqAf6wsjLgHzelc3K1sah3-k.roa
File: ohywqAf6wsjLgHzelc3K1sah3-k.roa (raw, json)
Hash identifier: IAavj6Q7lcQy250y800sZvbZQd7ABK0U9zPgZFqlYfM=
Subject key identifier: A2:1C:B0:A8:07:FA:C2:C8:CB:80:7C:DE:95:CD:CA:D6:C6:A1:DF:E9
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E1D8D440BC83D73CA743A7BA5C0EC5303
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ohywqAf6wsjLgHzelc3K1sah3-k.roa
Signing time: Fri 08 Mar 2024 10:13:01 +0000
ROA not before: Fri 08 Mar 2024 10:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 08 Mar 2024 11:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:8d:44:0b:c8:3d:73:ca:74:3a:7b:a5:c0:ec:53:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 8 10:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a21cb0a807fac2c8cb807cde95cdcad6c6a1dfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:b1:86:e7:46:00:f6:ab:47:16:11:55:b6:
d7:77:13:e6:de:1b:ac:52:47:5d:69:22:de:fa:20:
9c:27:3f:35:35:21:c1:2a:8d:f3:4d:7b:ca:60:53:
da:52:7f:d2:89:2e:18:1e:a8:cc:ea:cf:1c:f4:94:
8b:79:64:a6:96:93:7f:fb:57:3a:9e:32:6d:3a:32:
63:61:ff:65:a5:22:73:69:95:c9:d2:19:03:e7:66:
bd:df:84:fe:9f:08:36:71:83:b6:0d:1b:f5:80:5f:
8e:34:5f:3e:c4:11:d8:44:04:bd:00:19:9f:50:01:
ab:89:24:ed:a6:1f:f1:00:d6:ba:34:04:c0:31:0e:
c4:dc:da:6d:73:7e:db:66:51:1b:78:e7:3c:28:ff:
93:f5:b2:db:07:6a:fd:18:30:98:a6:4e:aa:3e:73:
4a:1f:1b:9a:f0:da:d8:8f:6a:03:36:52:44:03:63:
67:00:5f:44:46:85:c8:ba:a5:3e:bf:f6:63:66:58:
59:e9:3e:6a:4c:2b:5b:a7:0a:65:1d:39:ad:8c:46:
a2:4a:06:5d:08:f6:de:e3:95:67:85:28:70:4a:b4:
1e:87:c3:a4:13:dd:b3:07:72:c0:20:4a:73:b6:7c:
7f:cd:80:c3:7a:0a:53:17:b1:7e:56:99:9c:4f:07:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1C:B0:A8:07:FA:C2:C8:CB:80:7C:DE:95:CD:CA:D6:C6:A1:DF:E9
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ohywqAf6wsjLgHzelc3K1sah3-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:ae:27:dc:db:1c:0d:37:22:61:c3:4d:8b:21:28:67:d4:04:
8d:7c:37:46:60:90:59:96:28:18:36:cb:c7:52:e5:be:71:61:
a7:e6:8b:a3:9d:4d:1f:8f:59:9f:3c:be:9a:3e:16:c3:7f:a1:
a0:88:e3:c3:67:43:c7:4d:8a:e1:33:9c:42:c2:ad:e5:db:28:
e0:16:77:cd:b9:85:e2:25:41:e3:eb:73:c8:94:77:e3:61:9d:
be:7e:32:61:89:6d:67:1e:d1:32:47:c2:b9:06:49:19:5c:06:
c6:7b:93:dc:83:b5:ad:29:14:6c:17:f0:87:d1:97:57:a6:b2:
71:52:b9:e4:a4:8b:41:ea:1b:fd:05:65:be:dc:fd:1e:ed:35:
48:af:49:db:2a:7a:bb:a8:50:81:c3:5a:40:5a:8a:fa:5f:90:
04:68:a6:fa:79:1f:6a:a2:4f:f3:5e:9b:c5:3c:6d:0f:e1:2a:
c6:f7:ce:20:f3:b3:28:25:4f:b4:cc:61:49:70:01:08:e4:54:
d1:3d:52:7b:03:e9:22:a6:0f:29:e5:ca:ac:ad:67:63:af:f1:
02:d4:ab:62:55:f3:c0:4f:1e:39:e9:86:3a:7f:8d:57:0e:f1:
e6:05:90:59:c6:43:b8:26:45:5c:b8:e9:ba:9f:1b:26:22:ee:
e3:db:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 17:41:50 2024 by rpki-client on console.sobornost.net