Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sQ0NYwLD-q9kfMmi14EHqyYi_rM.roa
File: sQ0NYwLD-q9kfMmi14EHqyYi_rM.roa (raw, json)
Hash identifier: 5qtGVOsVCeqyMhnT37r2dfKpNBTnhtFJDnqpfzaCgSQ=
Subject key identifier: B1:0D:0D:63:02:C3:FA:AF:64:7C:C9:A2:D7:81:07:AB:26:22:FE:B3
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E53661EC590A0FDCD7ED6FBE3630499BC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sQ0NYwLD-q9kfMmi14EHqyYi_rM.roa
Signing time: Mon 18 Mar 2024 21:09:45 +0000
ROA not before: Mon 18 Mar 2024 21:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 18 Mar 2024 22:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:53:66:1e:c5:90:a0:fd:cd:7e:d6:fb:e3:63:04:99:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 18 21:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b10d0d6302c3faaf647cc9a2d78107ab2622feb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:93:0c:9d:b2:7b:09:9a:de:a3:07:2d:71:3f:
52:81:8a:75:93:d3:06:51:11:cf:12:ca:56:75:c0:
41:46:ea:bd:28:b3:a7:bd:95:75:46:73:60:71:40:
45:68:ab:1c:99:15:e1:0d:bc:2f:8f:c3:a7:f1:5e:
d7:5d:6e:d0:cd:a0:a4:17:88:34:db:01:d8:59:a2:
0c:a9:70:fd:2b:d4:6d:a0:06:69:6c:62:81:52:f7:
a3:51:ed:78:7c:a2:69:5c:fe:ad:05:e9:64:9a:4f:
b4:82:03:00:36:9c:ed:63:56:de:7c:42:b1:d7:95:
40:5b:18:a4:41:81:45:9b:f8:9c:52:c9:40:f7:49:
99:35:1d:a7:17:d5:bd:c4:79:bd:7e:b3:f8:40:f6:
9d:5b:f0:c9:68:bf:29:3f:3a:62:5e:18:c7:46:a3:
a8:89:a3:cd:94:c7:a5:8a:f6:f8:90:48:eb:e9:17:
3a:6a:54:e5:9a:f8:56:30:97:fa:e4:06:3a:7b:a3:
13:25:78:51:57:92:5f:95:a4:02:65:17:bf:98:68:
85:70:82:33:d4:a4:a1:aa:50:d7:60:f7:8f:7d:83:
e3:de:fa:b4:99:90:57:d1:73:0f:c2:94:46:55:31:
4d:b3:63:fa:05:c9:0c:61:e3:f1:44:c9:c2:8c:f4:
01:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0D:0D:63:02:C3:FA:AF:64:7C:C9:A2:D7:81:07:AB:26:22:FE:B3
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/sQ0NYwLD-q9kfMmi14EHqyYi_rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:c3:f6:cf:a4:69:1c:fd:10:a0:9a:3a:be:c9:6d:96:f8:b1:
88:1d:e8:02:93:fc:38:8a:b0:e1:1a:1f:2c:d0:ba:82:59:ff:
16:9b:2a:85:86:d4:ea:4b:43:46:b9:ac:f2:c4:4b:2f:93:4b:
14:0f:d4:20:26:d4:83:2d:a5:a7:a2:3c:09:f4:47:53:6b:0c:
76:d4:80:9c:67:46:1b:c2:15:02:2e:d1:d5:bf:0b:ca:c3:5d:
83:97:e0:e5:5a:1e:d0:10:d2:e3:ad:a3:51:98:79:83:4e:07:
c3:36:99:fa:dc:22:8b:52:40:07:6c:f0:f7:66:ae:7b:dc:52:
63:c4:23:1f:8d:11:b3:6b:d1:5c:db:52:ea:48:f1:86:d5:0d:
06:f6:5f:61:93:e7:dc:46:aa:46:4f:86:0a:87:e3:4d:04:d9:
13:96:13:9b:3b:ed:dc:8b:cd:fe:f1:87:c4:0c:d2:af:db:ff:
f2:a8:70:c3:6e:f7:aa:c7:5a:76:d0:ac:bf:1a:03:e3:76:35:
ca:47:93:82:3f:4e:99:ad:65:5b:35:bc:87:c9:0e:54:3c:32:
66:a5:c8:c0:4a:5e:6a:3c:2c:55:20:12:f2:c4:57:ef:46:ce:
44:b7:86:5b:b9:2e:35:e8:ba:67:ef:c5:58:36:5b:d9:6c:b9:
31:c0:b1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 05:23:27 2024 by rpki-client on console.sobornost.net