Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/x6rve4uRVSFRAhoOqV6pPxJ_QaU.roa
File: x6rve4uRVSFRAhoOqV6pPxJ_QaU.roa (raw, json)
Hash identifier: pVCQisQwGdP6b5H94E6iB1r80u1zULgZYJGMIo3bvNc=
Subject key identifier: C7:AA:EF:7B:8B:91:55:21:51:02:1A:0E:A9:5E:A9:3F:12:7F:41:A5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E18D4C583F8331D255D02317A184DEF10
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/x6rve4uRVSFRAhoOqV6pPxJ_QaU.roa
Signing time: Thu 07 Mar 2024 12:13:01 +0000
ROA not before: Thu 07 Mar 2024 12:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 07 Mar 2024 13:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:d4:c5:83:f8:33:1d:25:5d:02:31:7a:18:4d:ef:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 7 12:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7aaef7b8b91552151021a0ea95ea93f127f41a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:00:03:49:71:d4:e9:25:19:ee:29:55:40:
89:cb:c9:80:2c:c1:9d:e8:49:c2:0a:3d:80:a6:c5:
6e:5d:9f:9b:1a:9f:1f:55:e7:f4:2c:27:aa:7b:8b:
bc:63:17:4d:fa:e4:64:78:a0:26:e5:a9:d5:fe:84:
0a:11:38:82:0e:4d:2e:dc:ed:dc:8b:6a:de:d2:3e:
87:d3:6c:60:8c:81:48:e1:04:4c:66:d4:11:1c:27:
ec:84:d2:40:98:87:3a:39:e9:0e:f3:95:71:99:7a:
e7:c4:36:37:63:fe:ae:2e:02:24:e7:b7:a8:5e:ba:
36:39:cc:76:57:a6:83:f2:f1:5f:ba:bd:4e:44:bd:
50:e3:51:60:c1:d4:be:80:0b:60:17:b0:5c:23:a5:
6c:ce:ac:eb:03:8e:c4:2f:d5:0b:ad:d0:f4:87:9a:
87:89:87:ef:30:dc:a9:84:ab:f9:26:44:61:36:cd:
30:51:fc:22:22:4c:79:c9:83:e8:40:59:01:5e:85:
ea:a3:62:07:45:3e:06:7a:2f:4d:08:c2:3a:ab:e7:
44:07:65:2a:ec:e4:2c:b5:1b:58:68:40:56:91:41:
25:73:ce:b9:8f:0e:94:7e:ff:e3:14:10:16:20:3d:
b7:9a:84:3b:08:dc:35:9d:50:86:a1:a9:ef:9e:aa:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AA:EF:7B:8B:91:55:21:51:02:1A:0E:A9:5E:A9:3F:12:7F:41:A5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/x6rve4uRVSFRAhoOqV6pPxJ_QaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:9b:36:87:9f:15:e3:94:f3:79:c9:0c:d7:10:76:be:3b:91:
57:10:a5:f4:09:03:9e:b9:7e:d6:7b:aa:9c:9b:60:da:e9:16:
15:cf:3c:5d:f5:fb:be:22:d9:d5:40:05:3d:b8:d0:9f:1a:3d:
1b:ce:88:1c:09:47:ce:84:5b:9c:f0:54:8e:8e:80:2a:3b:1c:
32:93:52:4f:9f:7d:8c:d3:88:7e:ac:7b:9c:18:eb:5f:02:f0:
22:d8:79:11:6c:c5:f2:84:34:cd:e7:b5:06:db:b1:fe:99:b2:
a5:eb:cb:a8:22:fc:7f:a6:90:95:e7:fb:0d:6b:3a:9f:8b:f1:
72:90:79:32:25:10:e6:40:7b:fe:4c:6f:b3:3f:c1:3e:1f:7c:
29:1c:2c:9e:3a:90:b8:b5:b2:84:00:b8:e7:6f:e5:73:41:f9:
65:79:a7:7c:70:5e:3e:28:c1:5f:c9:93:f9:54:79:cc:74:1e:
b6:59:c7:71:91:0e:57:dc:3e:e6:75:a3:ce:78:a9:bd:04:22:
25:13:b8:52:ff:8f:c7:eb:78:d0:f2:a0:68:d5:66:86:1c:0d:
2a:c8:d8:22:14:79:82:1d:b4:82:69:88:47:ec:9c:40:36:4a:
c6:75:9f:17:8c:9d:73:c4:39:32:71:62:b5:94:62:ae:24:85:
b1:9b:b1:a0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4Y1MWD+DMdJV0CMXoYTe8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzA3MTIxMzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2FhZWY3YjhiOTE1NTIxNTEwMjFhMGVhOTVlYTkzZjEyN2Y0MWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzkAA0lx1OklGe4pVUCJy8mALMGd
6EnCCj2ApsVuXZ+bGp8fVef0LCeqe4u8YxdN+uRkeKAm5anV/oQKETiCDk0u3O3c
i2re0j6H02xgjIFI4QRMZtQRHCfshNJAmIc6OekO85VxmXrnxDY3Y/6uLgIk57eo
Xro2Ocx2V6aD8vFfur1ORL1Q41FgwdS+gAtgF7BcI6VszqzrA47EL9ULrdD0h5qH
iYfvMNyphKv5JkRhNs0wUfwiIkx5yYPoQFkBXoXqo2IHRT4Gei9NCMI6q+dEB2Uq
7OQstRtYaEBWkUElc865jw6Ufv/jFBAWID23moQ7CNw1nVCGoanvnqoKxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMeq73uLkVUhUQIaDqleqT8Sf0GlMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEveDZydmU0dVJWU0ZSQWhvT3FWNnBQeEpfUWFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH6bNoefFeOU83nJDNcQ
dr47kVcQpfQJA565ftZ7qpybYNrpFhXPPF31+74i2dVABT240J8aPRvOiBwJR86E
W5zwVI6OgCo7HDKTUk+ffYzTiH6se5wY618C8CLYeRFsxfKENM3ntQbbsf6ZsqXr
y6gi/H+mkJXn+w1rOp+L8XKQeTIlEOZAe/5Mb7M/wT4ffCkcLJ46kLi1soQAuOdv
5XNB+WV5p3xwXj4owV/Jk/lUecx0HrZZx3GRDlfcPuZ1o854qb0EIiUTuFL/j8fr
eNDyoGjVZoYcDSrI2CIUeYIdtIJpiEfsnEA2SsZ1nxeMnXPEOTJxYrWUYq4khbGb
saA=
-----END CERTIFICATE-----
Generated at Thu Mar 7 20:06:57 2024 by rpki-client on console.sobornost.net