Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/q1oTl42zlxYNWGFaTHLPBvHh-Xw.roa
File: q1oTl42zlxYNWGFaTHLPBvHh-Xw.roa (raw, json)
Hash identifier: z4uhZjVd0L5Ni6cuht02xIq8yGSFyQo1HP4megwYx+g=
Subject key identifier: AB:5A:13:97:8D:B3:97:16:0D:58:61:5A:4C:72:CF:06:F1:E1:F9:7C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE4E9AC7543D9FB8F64E2032FA9EBEE4B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/q1oTl42zlxYNWGFaTHLPBvHh-Xw.roa
Signing time: Sun 07 Jan 2024 17:12:48 +0000
ROA not before: Sun 07 Jan 2024 17:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jan 2024 18:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e4:e9:ac:75:43:d9:fb:8f:64:e2:03:2f:a9:eb:ee:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 7 17:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab5a13978db397160d58615a4c72cf06f1e1f97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:97:06:a0:73:2d:f0:9f:c6:8a:2d:d6:4c:
1e:20:65:70:49:16:92:5a:77:cd:51:9f:af:b1:bc:
10:7a:52:4d:75:28:8c:b3:c2:aa:e9:21:e6:fe:3f:
2b:ba:4b:f1:f3:e9:be:80:34:03:99:a4:8d:68:98:
5f:6b:11:68:a6:30:be:97:30:a4:4a:92:37:15:01:
1b:77:e6:4e:0f:f8:52:73:ac:88:7f:e4:1a:ef:e4:
ee:b2:fb:25:12:83:b9:20:57:87:b9:59:87:5c:2e:
3c:ce:ff:18:42:69:90:98:26:9e:cc:62:a8:37:e5:
e9:e1:52:f6:99:75:d1:1c:a9:36:53:e3:dc:d0:67:
e8:20:14:4d:59:10:93:a6:58:62:08:66:61:3f:df:
ba:70:55:f7:aa:75:a9:36:42:76:91:45:7d:5f:ab:
c2:85:58:98:20:89:8e:da:cc:86:20:9b:04:5a:8a:
54:f3:9f:ce:ea:a7:56:07:d0:a6:f9:ec:fc:11:88:
e0:2e:8b:24:33:1e:82:81:8c:86:0f:d9:7c:e3:f8:
4c:be:49:54:a1:8d:9b:40:47:49:8c:50:87:c8:98:
6c:ca:d2:2b:a8:45:a6:ce:a6:28:b2:e5:88:b2:72:
a6:9c:73:9d:8d:ab:27:6c:31:d3:d1:48:db:66:9b:
96:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5A:13:97:8D:B3:97:16:0D:58:61:5A:4C:72:CF:06:F1:E1:F9:7C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/q1oTl42zlxYNWGFaTHLPBvHh-Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:fd:51:d5:b7:f4:ab:04:45:35:99:da:98:7a:3c:8f:02:f0:
64:0a:9c:b4:8c:50:6d:7b:ea:11:1e:91:a8:20:36:51:9a:ab:
bc:39:b4:fc:9b:1e:ed:f8:f2:4b:0d:4d:27:54:f7:92:b5:c0:
8e:3b:e2:6c:3f:bc:0d:18:27:04:17:ea:fc:38:2b:41:55:72:
6d:20:c7:0c:75:25:72:73:9f:96:8c:47:63:0d:35:fc:c8:61:
55:80:04:11:7a:ef:9b:39:66:4d:7a:2f:14:7b:61:6d:52:f9:
bc:5d:8a:30:3a:0c:e9:6c:81:8d:6e:78:e6:b2:76:fa:0f:67:
12:19:48:35:f6:d1:fa:57:a5:4c:57:4d:91:30:3b:1a:80:1b:
13:ca:f1:52:4d:ec:67:8b:e1:73:5c:f2:4e:36:b8:09:2a:c2:
fa:a8:c7:bd:03:2b:b0:fb:e9:2e:02:30:c8:b1:c5:0c:19:a0:
88:b4:c9:dd:2b:87:9d:12:71:0a:2d:35:52:10:b8:e6:35:76:
0d:81:7b:66:cc:5a:d2:ea:bc:09:ef:5a:a4:10:6c:f7:a1:0a:
73:1e:4b:2d:f9:67:4b:77:46:76:c9:1b:05:bc:98:d0:61:1b:
b3:c8:3a:da:36:8b:92:f2:2f:07:21:54:28:9b:de:cc:9f:14:
dd:6a:3d:2e
-----BEGIN CERTIFICATE-----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Generated at Sun Jan 7 21:22:08 2024 by rpki-client on console.sobornost.net