Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vAjPofLnEdgo5hqigfaI5JvA7pI.roa
File: vAjPofLnEdgo5hqigfaI5JvA7pI.roa (raw, json)
Hash identifier: up8tPAvErIcRf56M+eBwWu0RToDZD5Q1x1p8UBc6QU0=
Subject key identifier: BC:08:CF:A1:F2:E7:11:D8:28:E6:1A:A2:81:F6:88:E4:9B:C0:EE:92
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E20C735896C009ECAD155AC212A1F7F64
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vAjPofLnEdgo5hqigfaI5JvA7pI.roa
Signing time: Sat 09 Mar 2024 01:15:09 +0000
ROA not before: Sat 09 Mar 2024 01:15:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 09 Mar 2024 02:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:20:c7:35:89:6c:00:9e:ca:d1:55:ac:21:2a:1f:7f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 9 01:15:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc08cfa1f2e711d828e61aa281f688e49bc0ee92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:7f:c5:ff:74:45:32:1a:a9:2e:ce:18:60:
1d:57:86:8e:e5:5e:1c:c2:79:1e:5c:f6:a0:25:90:
5c:3f:5b:29:6b:72:42:b3:17:2b:55:94:b9:57:3c:
91:55:30:39:80:fa:6d:8d:80:06:53:4f:9e:ea:77:
22:ff:85:4d:92:82:7c:d9:67:18:98:dd:11:4f:a2:
fa:c5:4c:9f:63:46:67:9d:9a:20:73:ce:6e:57:cf:
9d:c6:92:30:a0:f1:d2:f7:73:b4:50:c0:c5:a7:aa:
63:cd:00:c5:43:6a:ac:0e:04:6e:56:ad:4b:40:10:
ce:6d:e5:79:c8:95:50:c7:ae:60:5f:2c:4a:84:8e:
b3:52:fc:00:7c:a5:d5:07:73:8b:76:a9:5f:33:64:
ce:92:56:dc:73:ac:99:68:8d:d0:70:7d:fd:f2:d2:
04:72:49:7d:77:33:ed:e7:6b:37:79:02:51:15:1b:
8d:c1:26:a2:69:79:2b:ab:c9:aa:f3:b5:6d:04:51:
2f:ef:c2:38:6d:24:30:c4:89:6a:0d:a1:48:c2:1a:
1a:e4:92:b9:f8:2f:92:3d:13:e6:0e:87:e6:bd:d5:
95:fa:b1:37:20:58:be:83:b2:43:8a:3b:92:05:cd:
7a:f3:20:da:41:75:db:8e:dc:7b:39:27:64:9d:50:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:08:CF:A1:F2:E7:11:D8:28:E6:1A:A2:81:F6:88:E4:9B:C0:EE:92
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vAjPofLnEdgo5hqigfaI5JvA7pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:cc:0c:af:89:ba:7b:75:e0:ad:13:59:f9:44:1e:b8:08:0d:
c7:3e:c0:8e:d6:5f:07:36:6c:8d:f7:fa:39:54:94:b0:5f:e7:
d7:63:f9:45:e3:86:ee:db:03:1e:85:ff:53:23:17:5a:87:34:
1b:f7:6a:28:9d:e8:52:28:14:2d:5b:bd:ce:9d:c8:d2:cc:d0:
1f:26:58:03:13:d2:1e:c1:b2:21:0b:1e:a2:0f:66:b2:17:b3:
f6:aa:7a:28:80:1a:38:3f:9d:3e:87:8f:ac:25:70:35:27:6d:
06:cc:9a:95:e5:e3:67:d5:77:e7:3d:06:25:e6:50:e9:8d:6a:
07:78:50:d2:e8:56:ce:21:4e:c9:3a:1e:e2:3e:13:d9:2c:01:
c0:da:06:e0:6a:57:ca:f6:61:7e:97:8e:20:ae:4a:d7:b8:cc:
2a:30:7e:37:25:4b:26:46:c0:aa:83:56:e3:86:90:93:39:ed:
0c:d5:cd:3c:e3:f7:fa:37:28:6e:eb:7c:d2:ee:b1:04:e0:a9:
80:7c:91:68:90:37:85:82:89:9b:c9:54:9f:94:23:f0:77:fb:
79:55:c0:a3:1f:8c:b8:a3:56:bc:c6:24:c3:12:bb:ab:d4:5a:
de:13:3f:a3:a2:94:8d:13:40:9f:7f:53:0c:b8:29:20:46:32:
2f:14:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 07:50:02 2024 by rpki-client on console.sobornost.net