Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/th2qYIwWptKzhmZBdwsE33LBoaE.roa
File: th2qYIwWptKzhmZBdwsE33LBoaE.roa (raw, json)
Hash identifier: WxxvFdmYELawn76EeyXcfkry7LMJG01elAhq+UPxSYw=
Subject key identifier: B6:1D:AA:60:8C:16:A6:D2:B3:86:66:41:77:0B:04:DF:72:C1:A1:A1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E732C93D44BDEB19A7C08381BD1B478CC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/th2qYIwWptKzhmZBdwsE33LBoaE.roa
Signing time: Mon 25 Mar 2024 01:14:44 +0000
ROA not before: Mon 25 Mar 2024 01:14:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 25 Mar 2024 02:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:73:2c:93:d4:4b:de:b1:9a:7c:08:38:1b:d1:b4:78:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 25 01:14:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b61daa608c16a6d2b3866641770b04df72c1a1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:13:2c:f9:df:59:5c:92:a6:d0:42:8e:4b:76:
fa:b3:e7:8c:e5:ea:c8:74:06:46:c5:79:bc:e6:d2:
7c:98:d6:9a:37:88:3b:9b:65:57:42:f9:c7:52:8c:
00:6b:43:85:89:b4:60:65:7b:88:03:f6:20:d8:b5:
e6:53:f4:95:05:67:2f:6d:6f:b8:bc:ca:14:b3:e1:
99:f0:fc:0f:83:ce:3d:83:09:8e:9f:2d:50:a5:fa:
e8:c2:8c:de:17:f2:78:c8:c9:0d:30:48:ba:cc:2a:
11:b9:c4:03:0b:8b:71:bf:5b:28:41:be:bb:3d:f7:
8c:a9:1b:fe:01:ec:34:26:d4:c3:9c:a3:b2:b4:39:
a4:76:5f:f6:b2:9c:be:be:05:78:18:07:2f:ce:61:
77:72:37:01:24:0b:c4:a4:0b:3a:98:a5:f4:42:db:
4e:ce:5e:6c:14:bc:84:01:7c:db:dc:22:c1:a4:31:
12:24:e0:dd:64:1f:c8:0f:ce:31:23:1c:a5:5f:62:
b0:37:2c:cd:a9:d8:d3:60:68:5e:1b:e5:02:33:ad:
55:66:93:12:8f:11:d5:c5:46:c8:33:44:65:78:50:
5d:40:1e:1d:ba:23:50:79:40:a2:1d:8b:69:2b:3b:
c8:25:39:e5:ff:13:6c:fe:e5:04:63:59:2a:f3:c9:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1D:AA:60:8C:16:A6:D2:B3:86:66:41:77:0B:04:DF:72:C1:A1:A1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/th2qYIwWptKzhmZBdwsE33LBoaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:65:a8:89:cc:97:2d:e6:0c:59:f6:0e:04:b9:58:7d:2c:25:
6a:90:f0:d8:9e:a0:4e:87:c6:94:69:c5:f8:20:f3:21:7a:ef:
d2:0c:08:2f:a5:ee:03:81:fe:d3:b2:23:91:34:cb:6e:64:f4:
eb:67:4e:10:77:3a:a1:66:84:d0:39:ad:3f:2a:fd:29:af:40:
31:83:b2:57:dd:d4:d5:db:14:6d:11:79:48:55:f2:89:41:a4:
ac:89:09:06:c3:dd:2c:28:51:14:11:e8:49:7f:a4:aa:2b:b2:
a0:a5:59:8f:b2:d0:97:a4:c5:0e:03:31:a6:42:31:a9:5d:6a:
e3:06:a5:b2:0a:81:3c:78:29:7b:be:b8:35:c0:34:97:45:41:
a1:cf:0d:da:30:65:26:ff:cb:14:e5:6f:50:89:f6:c6:76:81:
17:98:65:6a:e9:35:fc:74:24:fc:18:d0:5a:5f:b5:43:74:ea:
bb:1b:29:2b:9f:12:4c:fa:a3:e7:41:d0:b0:53:16:51:f9:e3:
11:50:b0:61:fc:22:90:7e:f5:f0:47:da:f4:f4:26:8c:66:25:
70:8c:e9:86:65:d9:1d:08:1c:87:dd:22:ec:56:28:55:d9:4d:
81:37:d4:0b:6e:c6:22:ef:3b:8a:0f:65:fa:c5:c1:ab:60:80:
35:4f:ad:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 07:31:05 2024 by rpki-client on console.sobornost.net