Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yUwi2DOPOhVKNeG_bLJysARfhfE.roa
File: yUwi2DOPOhVKNeG_bLJysARfhfE.roa (raw, json)
Hash identifier: h94mqleUZLyn5f9ywz8AHbtIWK1hH1j2xslyJKirvK4=
Subject key identifier: C9:4C:22:D8:33:8F:3A:15:4A:35:E1:BF:6C:B2:72:B0:04:5F:85:F1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CDAD8764BA4716C23B23EE21A0798F624
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yUwi2DOPOhVKNeG_bLJysARfhfE.roa
Signing time: Fri 05 Jan 2024 18:17:48 +0000
ROA not before: Fri 05 Jan 2024 18:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:da:d8:76:4b:a4:71:6c:23:b2:3e:e2:1a:07:98:f6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 5 18:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c94c22d8338f3a154a35e1bf6cb272b0045f85f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:9f:42:41:00:4d:dd:28:67:ed:e8:c2:fe:
7d:11:6b:a2:90:cb:17:7d:17:4e:b8:ba:fd:bf:dc:
83:8d:c5:46:45:37:be:5b:1b:f4:04:15:aa:62:54:
8a:00:d7:3f:f7:ca:b7:d7:15:f0:ae:4e:53:b1:06:
f7:2f:df:15:f6:5f:14:94:4c:ed:1f:cc:3e:08:e5:
38:f3:76:99:29:5c:02:3e:b5:f5:f6:b0:36:94:4e:
cd:46:e2:e0:b0:63:9b:cf:d7:0c:ed:7d:e1:9c:e5:
ef:75:45:72:8c:04:7e:85:89:eb:ab:30:92:5e:d6:
37:4a:75:8e:26:b5:be:49:e0:65:73:26:bf:cc:eb:
51:c2:1c:6f:5c:81:0a:c1:67:ea:4f:ec:23:f8:d4:
72:94:78:51:59:02:2a:45:ff:aa:99:de:5b:24:be:
da:56:ff:81:ed:ef:a8:40:7b:4f:5e:ac:ce:6e:79:
f5:53:ca:50:05:0b:ca:01:4c:c1:ee:b8:01:57:96:
a0:d5:67:4c:ed:0f:1f:02:bc:bd:fa:96:0d:6d:f6:
51:31:8d:ba:7f:d7:ac:3b:b9:2e:c4:cd:2a:79:27:
99:8b:26:2d:f0:47:b1:02:2d:d4:a2:6a:4e:e5:3a:
e5:2f:21:a5:03:1c:65:83:a8:1c:30:a8:57:d5:71:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4C:22:D8:33:8F:3A:15:4A:35:E1:BF:6C:B2:72:B0:04:5F:85:F1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yUwi2DOPOhVKNeG_bLJysARfhfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:11:cf:dd:8c:da:23:37:52:0c:64:60:d4:13:b2:71:a5:28:
19:16:95:85:b8:1e:a2:bb:6f:27:47:17:c2:45:27:a8:3e:ca:
72:be:98:09:51:90:d1:1f:38:9c:9a:6d:ad:4b:06:1b:cc:48:
7c:18:6a:e3:d6:24:95:82:4e:42:5f:01:82:aa:3e:d6:78:08:
5d:08:27:6e:63:0e:a5:c4:7e:99:5e:8e:b8:cb:cc:2e:36:a1:
01:b7:b1:0a:69:35:5a:3e:a9:0f:0a:c2:33:50:33:07:c3:54:
fe:8d:91:5d:53:e6:4e:f9:24:8a:50:4f:99:67:d7:24:e5:5f:
e4:b8:11:39:69:a4:4d:ed:ed:29:08:85:fd:01:f2:f8:e1:93:
5c:dd:e8:01:dd:98:e5:66:03:ff:32:b5:3e:e1:e4:43:c7:32:
70:47:55:02:26:7b:95:b9:fb:84:f3:74:d2:38:f1:d2:c5:5c:
86:f0:5b:bd:f2:8e:22:f4:62:01:e3:62:b5:53:0a:e7:9a:5e:
fb:29:7a:7a:aa:cd:44:38:78:f7:68:31:ca:0d:a8:51:27:c9:
7e:fb:4e:22:ac:7b:07:83:97:66:e8:c3:4a:c6:bc:61:ac:fd:
27:40:1d:93:19:69:49:70:65:52:4c:db:e6:44:63:fa:1f:84:
39:68:8c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 21:04:02 2024 by rpki-client on console.sobornost.net