Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wdFjIYvqEsG1eUMoayHgnUwXVFc.roa
File: wdFjIYvqEsG1eUMoayHgnUwXVFc.roa (raw, json)
Hash identifier: Yx+6QrvzaMC0KO0YSg6+pqHQouAl59Y7yj/V22csb+E=
Subject key identifier: C1:D1:63:21:8B:EA:12:C1:B5:79:43:28:6B:21:E0:9D:4C:17:54:57
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8A8D61486A267E5D40774521F5EC690B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wdFjIYvqEsG1eUMoayHgnUwXVFc.roa
Signing time: Fri 29 Mar 2024 14:11:45 +0000
ROA not before: Fri 29 Mar 2024 14:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, certificate revoked on Fri 29 Mar 2024 15:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8a:8d:61:48:6a:26:7e:5d:40:77:45:21:f5:ec:69:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 29 14:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1d163218bea12c1b57943286b21e09d4c175457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:dd:57:4c:92:e7:81:47:06:4d:38:22:4e:
f6:b2:ce:23:7b:83:3c:7e:99:80:ed:90:13:85:b2:
3f:15:9b:5b:1a:bf:1f:6c:cd:19:54:44:5d:cf:ac:
6c:01:1d:86:05:c2:f1:fe:c3:59:e3:fb:f2:ea:f0:
ce:0c:60:6b:c1:f6:b0:ef:f9:d7:28:7a:6e:c6:25:
3d:58:97:63:cb:05:1b:be:bb:be:51:a9:7a:2e:9d:
ac:e5:97:68:c3:9f:9a:79:98:bc:05:4d:e9:a1:c7:
ac:53:1f:40:73:53:e1:7d:b6:2e:b7:43:37:4a:40:
f7:41:63:b9:9b:8e:b2:49:c2:b6:73:3d:cb:72:40:
ef:7b:73:4c:67:85:45:4f:e4:5c:03:8d:5a:21:2e:
0f:df:17:e0:58:bc:ac:fc:6c:92:38:90:3a:b2:fe:
bd:81:7f:70:9d:91:1b:03:bd:3e:b0:3c:1e:9a:0a:
be:58:9b:0f:90:d2:38:b4:71:90:78:7d:aa:7c:d3:
4e:7a:6c:38:24:1e:8b:5d:0b:5e:4e:48:42:b9:1c:
4b:5d:7e:8c:34:87:ce:3d:1f:05:8e:e3:74:5f:43:
ff:34:43:60:10:77:8f:22:07:dd:05:61:92:30:c8:
34:5d:bc:cd:2d:0f:84:2c:35:e5:9f:6d:81:96:64:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D1:63:21:8B:EA:12:C1:B5:79:43:28:6B:21:E0:9D:4C:17:54:57
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/wdFjIYvqEsG1eUMoayHgnUwXVFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:54:e9:73:61:9d:2b:3c:95:3a:d3:9c:cb:83:c9:bf:92:38:
00:1e:76:02:f1:f3:b7:7d:e9:8b:04:61:9a:fb:0d:60:2e:33:
c6:f6:e2:7e:e6:9d:2b:cc:71:d3:82:1b:44:7b:5c:a0:e3:0a:
46:25:d1:68:71:2c:51:72:fa:61:86:25:ef:52:b4:a0:96:05:
9e:eb:25:00:87:16:d3:f3:c3:e0:61:55:ea:1d:24:26:05:5b:
d3:86:49:82:7a:15:c3:71:8e:2b:98:88:a6:3a:96:6d:7d:5a:
d3:c4:45:be:2d:30:c9:3f:b1:77:5a:ce:e4:db:96:80:8e:d7:
aa:0f:a3:e2:01:50:d6:a4:ea:e3:46:65:8a:5c:dc:13:37:5a:
e4:88:96:d7:f8:86:b1:fe:8a:6a:c8:21:00:7f:fd:d6:52:6e:
89:e0:c4:ac:15:34:0c:ec:fb:12:82:41:8d:90:86:0f:37:b2:
36:b0:1d:d0:e1:09:1e:ab:83:c6:4b:fb:c1:ec:9f:14:f1:2c:
46:8c:2c:3e:9b:a0:84:0f:a2:2a:fd:ea:67:2f:97:a6:82:e9:
54:b6:04:2d:c2:61:38:0d:84:79:96:e8:c4:55:b2:f3:e3:80:
55:13:eb:f0:92:0e:d2:31:d7:46:1a:18:f2:03:96:c2:ce:66:
70:f3:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:15:57 2024 by rpki-client on console.sobornost.net