Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vUuEEZX4dqYOk1Tpkqk-_C_i4rs.roa
File: vUuEEZX4dqYOk1Tpkqk-_C_i4rs.roa (raw, json)
Hash identifier: OG9cIenex5otOJvknhnKKZeNT9qUbLbgUGzkZxh28Ss=
Subject key identifier: BD:4B:84:11:95:F8:76:A6:0E:93:54:E9:92:A9:3E:FC:2F:E2:E2:BB
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E37F0B2C3437400FF60DF16B7E6D971A4
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vUuEEZX4dqYOk1Tpkqk-_C_i4rs.roa
Signing time: Wed 13 Mar 2024 13:11:45 +0000
ROA not before: Wed 13 Mar 2024 13:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Wed 13 Mar 2024 14:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:f0:b2:c3:43:74:00:ff:60:df:16:b7:e6:d9:71:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 13 13:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd4b841195f876a60e9354e992a93efc2fe2e2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:15:c0:98:b2:97:d9:59:d4:6e:27:81:7b:
5a:a6:56:92:89:c9:22:89:a9:10:05:16:e9:93:8e:
79:0d:e1:3f:f1:07:bb:0e:b9:96:25:af:32:96:01:
7e:d8:6e:c0:b5:12:99:d1:9e:9f:00:88:51:25:7b:
ad:5b:c5:75:39:38:90:e5:5e:5d:df:2e:96:68:97:
0d:1c:d1:d8:12:35:e3:f7:08:31:ea:88:02:d2:92:
f6:05:3d:f4:38:c1:2d:73:51:f2:7d:09:b0:ba:dc:
72:2b:4c:a4:f0:53:1b:1f:b0:75:b1:1a:fa:98:04:
c0:bb:46:6f:9f:94:4c:55:7e:d7:9b:db:95:8f:75:
0b:13:cb:25:e5:5d:d2:fe:5c:71:f1:73:f8:6e:d3:
e3:6e:53:c8:6e:0d:df:00:bf:87:8c:ee:8d:4b:a1:
2f:84:3f:d4:8b:41:2c:66:3f:e6:01:72:2f:e7:ef:
4b:92:ea:30:3e:66:7c:f5:9d:c1:b9:22:13:bf:be:
ef:2f:d3:46:c8:de:72:22:c9:aa:63:15:cc:de:14:
21:ca:d1:8c:c9:41:09:15:74:de:aa:67:6e:13:34:
1e:fb:6c:ab:11:90:07:67:ea:f1:68:c8:c1:bc:60:
ff:b6:c9:cb:b6:e9:0d:94:73:8b:d7:91:e0:5c:e3:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4B:84:11:95:F8:76:A6:0E:93:54:E9:92:A9:3E:FC:2F:E2:E2:BB
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vUuEEZX4dqYOk1Tpkqk-_C_i4rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:c6:b8:b0:ea:9d:43:e8:a3:89:00:b3:b0:d6:62:bd:a7:61:
a0:a9:08:00:e6:45:6a:bb:f7:64:a9:60:f0:7c:9a:f4:f3:60:
cb:98:04:95:0c:e7:26:25:ea:49:5a:7b:9e:45:9b:23:2d:58:
a2:0f:10:4a:77:a5:f2:d1:5e:43:22:f2:00:14:ec:b6:34:e2:
8e:e5:b7:67:07:9c:36:90:84:1f:08:03:a3:da:8b:a2:eb:24:
1c:77:ea:eb:35:90:a2:b3:d8:e9:25:a0:8f:7c:5d:68:1b:88:
28:e1:4d:7d:a7:e1:86:e2:2c:cb:ac:9c:be:f1:c5:39:f6:7d:
82:0c:93:23:d5:8d:81:75:74:1b:8a:b8:e0:55:3c:e7:f1:b1:
cb:a3:76:9c:03:20:b7:e5:2e:39:e3:39:89:e5:b7:ec:57:ec:
86:66:43:5e:41:ab:c7:6a:63:5f:fa:18:80:33:16:11:f8:52:
0d:70:c9:a7:3e:15:53:09:c3:18:22:c0:e7:79:d4:9a:a7:24:
8a:a6:11:9d:e8:60:af:d3:3f:8b:fe:73:51:37:49:76:56:45:
23:fd:67:73:52:68:58:bf:c1:e1:57:75:da:2c:26:2d:4d:8c:
ce:7c:73:f5:e4:63:44:38:73:09:84:9e:0a:fd:d6:89:c4:f0:
2b:95:63:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 21:00:18 2024 by rpki-client on console.sobornost.net