Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w0Z6dzPoFysxf0yZPqM8XW34XTk.roa
File: w0Z6dzPoFysxf0yZPqM8XW34XTk.roa (raw, json)
Hash identifier: hl1nvdXzB0xG/+qqlnDmOZuUBtQeQPov7AY9UE/W23Y=
Subject key identifier: C3:46:7A:77:33:E8:17:2B:31:7F:4C:99:3E:A3:3C:5D:6D:F8:5D:39
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E0F3082303236E7566538A85317A54CA7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w0Z6dzPoFysxf0yZPqM8XW34XTk.roa
Signing time: Tue 05 Mar 2024 15:17:01 +0000
ROA not before: Tue 05 Mar 2024 15:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 05 Mar 2024 16:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:30:82:30:32:36:e7:56:65:38:a8:53:17:a5:4c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 5 15:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3467a7733e8172b317f4c993ea33c5d6df85d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:a5:76:6b:16:3c:df:fc:5c:36:dc:b7:7b:
de:77:64:06:97:1a:f1:15:3b:a5:a2:57:2e:2e:c5:
fa:80:81:e1:5e:2f:6c:3c:5b:1d:fd:29:3f:43:2d:
9e:5a:52:ff:e7:f8:fa:da:51:fc:30:cf:25:c6:dd:
25:06:bc:11:7f:e4:14:a6:00:62:bd:f7:53:fa:67:
fa:52:92:0c:87:bf:30:61:58:79:4d:47:36:56:86:
ee:22:70:b3:0d:e6:9f:eb:da:17:fc:83:4e:a8:5e:
36:58:9e:d4:6b:8a:dc:39:aa:f7:77:c6:3a:53:98:
b0:61:61:87:1c:7d:88:5b:28:32:d4:92:b3:ce:5f:
07:98:2f:3b:8f:29:4b:54:1a:14:76:f1:00:c8:b7:
97:bc:8a:d4:0f:1f:f3:e0:ac:6a:b8:72:26:d6:3c:
d8:13:b2:81:04:bb:fe:be:32:71:7b:a6:88:01:29:
08:66:c5:89:5a:e9:30:47:b8:dd:41:25:81:49:cb:
71:ac:8a:e5:7d:e1:f9:40:25:a6:b4:e5:e5:31:a0:
ec:04:bb:77:0e:97:40:4e:c0:bc:2d:ad:ce:83:80:
33:0d:b9:cb:a5:f8:12:8b:81:a5:ba:b5:a2:1d:1c:
00:52:89:92:1c:7d:4e:f4:f4:c4:00:4a:1b:bc:a4:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:46:7A:77:33:E8:17:2B:31:7F:4C:99:3E:A3:3C:5D:6D:F8:5D:39
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/w0Z6dzPoFysxf0yZPqM8XW34XTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:94:0d:ad:7e:b7:d4:59:ac:9f:2c:30:08:60:b6:8f:7a:9c:
cd:58:01:04:73:41:1a:a2:6d:f4:8b:3d:61:78:86:59:a4:47:
9a:e5:34:a1:be:95:9e:6b:f0:a5:fa:15:9e:d5:13:47:ec:eb:
73:7e:b1:3b:c4:d1:f0:0a:04:d7:e7:f0:7a:2e:00:60:f8:98:
75:6b:31:9f:cc:43:37:80:f9:63:cc:4d:8a:fd:51:f8:7c:00:
a3:a3:79:ab:7a:9e:4c:cb:39:36:46:04:d3:41:de:f9:e0:ae:
1b:02:b5:66:54:68:dc:63:69:c8:d4:3e:f3:91:9f:69:b1:86:
9c:0f:47:13:6c:94:2d:16:91:4b:18:72:39:f1:c2:b1:dd:31:
86:e8:a7:44:59:b6:2f:4c:93:94:57:a8:d5:8c:a8:93:5d:9f:
b2:0a:37:a1:31:60:68:bd:3a:08:31:0e:9d:67:1b:f7:8d:27:
31:f6:bd:9e:a2:4e:13:8f:4b:9c:31:43:20:68:58:a2:6a:47:
fb:40:67:12:b3:5f:6e:95:54:4c:ee:cc:25:01:4e:b3:fe:3b:
39:05:fa:b9:01:10:90:f8:52:24:f4:b4:ee:27:62:ec:56:0b:
1a:c9:14:a1:09:83:f5:99:91:d2:fb:c9:1b:12:a7:5b:69:e0:
54:18:93:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 22:31:43 2024 by rpki-client on console.sobornost.net