Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sI0ZiSOhADKqTYWFpeLhgUKig6A.roa
File: sI0ZiSOhADKqTYWFpeLhgUKig6A.roa (raw, json)
Hash identifier: vbrhEeX9hvYIAvMItEED6Xor7yrZhXxUOAoiPyDQJSs=
Subject key identifier: B0:8D:19:89:23:A1:00:32:AA:4D:85:85:A5:E2:E1:81:42:A2:83:A0
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CE2207907B8B71452D3C45B523EED3BF7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sI0ZiSOhADKqTYWFpeLhgUKig6A.roa
Signing time: Sun 07 Jan 2024 04:13:48 +0000
ROA not before: Sun 07 Jan 2024 04:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jan 2024 05:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e2:20:79:07:b8:b7:14:52:d3:c4:5b:52:3e:ed:3b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 7 04:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b08d198923a10032aa4d8585a5e2e18142a283a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:01:39:55:b9:02:67:b7:49:5e:8d:7d:c4:
c0:af:cf:d0:9f:29:19:df:b7:60:23:04:18:f8:48:
df:66:9c:a8:25:7c:8a:ae:14:dc:73:ae:e5:ef:25:
7b:95:99:05:f6:5f:ff:8f:40:e4:98:71:f1:b3:c9:
c5:38:49:6e:59:c1:74:3f:d8:0d:94:93:e4:82:2d:
21:f9:ac:34:c6:0a:61:70:6d:00:ad:ba:a8:8c:9b:
b2:bd:fd:9a:3d:21:f0:e8:e9:69:4d:4a:4c:90:df:
c3:17:61:ce:f0:34:8a:bc:8f:b5:70:bc:b7:43:fc:
fb:33:4b:62:8b:96:38:0f:77:1a:35:96:60:9e:f3:
fc:d8:15:a9:e6:54:2a:a5:88:1b:b5:a6:69:e2:ae:
ca:c9:8f:a4:f3:ef:4e:30:fd:ee:13:80:e2:bf:9f:
3b:a8:90:24:aa:f6:43:05:db:b4:f2:b3:ed:81:08:
24:8b:a0:4c:de:5e:be:79:53:db:e4:ac:f8:a1:b9:
5c:d7:d5:5b:30:af:4d:3c:a1:f6:64:90:ea:bb:5a:
80:d6:43:9f:2e:d0:2a:12:52:f7:ca:16:91:ff:29:
b0:3e:11:8f:fa:52:f4:d9:12:7b:87:75:b3:51:51:
c4:60:7c:da:ec:08:6d:0d:c9:fd:9d:fc:59:09:2e:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8D:19:89:23:A1:00:32:AA:4D:85:85:A5:E2:E1:81:42:A2:83:A0
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sI0ZiSOhADKqTYWFpeLhgUKig6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:cd:7d:78:4e:9d:97:5a:48:2c:7b:18:59:99:57:53:49:87:
ca:d8:7d:7d:02:89:64:25:1f:c5:c2:69:e4:6c:c4:d4:ba:ce:
73:23:cf:5c:e6:d6:cd:e7:a4:39:9a:da:52:a0:0c:df:a3:e3:
a1:b5:28:6a:19:2a:e8:14:03:0e:ac:a5:a2:c5:ad:0b:2c:75:
e7:76:ed:f8:9d:32:7d:2c:c1:41:8c:96:51:b6:18:e8:38:c2:
ab:95:5e:b7:0d:9c:50:45:9a:f8:78:9e:94:ce:17:70:c8:62:
92:fa:8f:27:0a:99:9f:78:d6:99:05:40:a5:ce:87:e2:6f:c9:
89:44:2c:1f:83:54:98:8e:51:bf:fe:d6:75:07:c7:bc:38:48:
d7:76:4f:93:24:db:4e:4b:c8:30:0d:26:21:2a:6e:94:b7:33:
00:8e:5c:2e:71:0c:ec:2a:85:7b:0d:d9:95:33:8e:ec:84:93:
22:22:e8:c7:4d:8e:7d:92:9a:29:09:dc:6c:ad:68:4f:c1:fb:
41:2f:65:42:59:e1:69:86:e0:16:d8:16:a8:de:f8:af:b9:15:
05:a5:6b:ea:15:b1:37:99:44:28:96:60:1c:68:74:e1:27:c4:
1d:78:d1:3e:83:9f:be:91:c6:4b:42:7f:8b:45:26:24:d2:77:
9f:f3:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 07:21:17 2024 by rpki-client on console.sobornost.net