Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uBelXm-3tjDhF9d0YCEHjZ6rxUE.roa
File: uBelXm-3tjDhF9d0YCEHjZ6rxUE.roa (raw, json)
Hash identifier: SsetvsxRFKty0n5pn36CGNsyGtWV37+fuAnmFIKHh0c=
Subject key identifier: B8:17:A5:5E:6F:B7:B6:30:E1:17:D7:74:60:21:07:8D:9E:AB:C5:41
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9A01605784508C76B846B5D73EE59DB7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uBelXm-3tjDhF9d0YCEHjZ6rxUE.roa
Signing time: Mon 01 Apr 2024 14:12:45 +0000
ROA not before: Mon 01 Apr 2024 14:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Apr 2024 15:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9a:01:60:57:84:50:8c:76:b8:46:b5:d7:3e:e5:9d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 1 14:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b817a55e6fb7b630e117d7746021078d9eabc541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4b:2b:90:ff:18:3b:2d:de:46:ce:d8:38:db:
4e:c6:37:29:6f:c3:f4:0d:fc:26:a6:f7:f8:73:7e:
8b:95:0d:87:43:40:73:da:41:0d:f0:f0:dd:64:cf:
e9:5d:9f:13:f9:73:89:ed:0f:dc:b8:7b:b4:4b:4f:
27:04:74:69:2a:f8:f9:44:27:1e:ea:f9:41:21:72:
c1:47:7d:2b:2b:f1:93:9a:e6:03:72:e0:ca:dd:a7:
6b:e1:46:9c:31:44:2c:e2:16:36:83:f0:6a:e6:a8:
a1:e1:cf:b8:ef:01:62:8d:6d:63:e2:cb:4a:3a:76:
50:1a:67:92:53:d9:ec:38:bc:04:b0:df:50:11:32:
34:28:17:33:22:06:5d:a1:34:1b:1b:ec:0a:a9:8f:
91:5b:bf:b4:61:0c:26:cf:6b:4f:07:5c:07:a8:97:
d4:76:15:48:25:8a:71:84:7b:c9:0d:e3:13:77:34:
73:a9:dd:d4:14:ad:53:a1:34:fe:0e:ae:e2:9e:ba:
e9:27:a4:bb:c8:58:b0:70:a0:30:95:c0:d9:bf:39:
8c:40:49:3a:fb:c6:0e:96:98:60:c1:d8:64:8a:5b:
8b:bf:68:d2:9b:39:50:5c:ba:aa:cf:9c:ab:25:9e:
d1:cc:f8:9d:1c:78:d1:c1:23:3b:a6:12:84:90:af:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:A5:5E:6F:B7:B6:30:E1:17:D7:74:60:21:07:8D:9E:AB:C5:41
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/uBelXm-3tjDhF9d0YCEHjZ6rxUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:25:da:fe:40:a9:d0:cf:49:35:ef:2b:aa:ef:d1:a2:bd:93:
03:44:ad:54:4a:93:29:5d:46:c2:25:06:0d:0d:17:79:a5:ee:
25:8b:b8:a5:11:a8:8f:82:a0:78:0f:51:17:d3:48:c1:85:1e:
9a:9c:0d:b4:38:52:8d:2e:6e:be:60:b2:bf:68:6d:4f:44:13:
92:e0:57:92:43:f6:75:c4:4f:ad:bb:dc:0b:af:26:99:eb:0a:
4b:30:96:21:23:e0:a0:a0:c7:19:47:c3:a8:aa:9c:ef:0e:43:
0d:b3:50:c6:33:38:d4:8b:1d:d2:e4:8d:59:29:b1:b4:a2:67:
cf:34:42:0e:0e:be:08:e5:c2:3c:65:5c:6f:d8:60:5d:c4:8f:
ba:e8:01:fb:9a:c7:65:50:bf:b8:ab:57:d7:4e:fc:81:f8:65:
22:d1:db:0d:3e:d3:78:56:5e:3f:a0:b5:9f:95:67:86:fa:00:
fe:6a:bd:51:ed:26:cf:4b:42:61:42:a5:1f:76:c2:9f:4c:4c:
d5:c8:21:8a:f1:42:8d:cc:92:6b:51:83:4a:45:d0:e0:1f:2d:
3c:71:e1:ff:f5:0b:00:5f:91:df:32:4c:81:a9:46:55:4e:80:
0e:31:85:5b:dc:c0:ed:e0:52:61:00:20:c9:f0:98:bc:fa:d1:
ea:37:cd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 20:28:34 2024 by rpki-client on console.sobornost.net