Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0zZ97-oiIpSxuxUc_GeIY1Ujdgg.roa
File: 0zZ97-oiIpSxuxUc_GeIY1Ujdgg.roa (raw, json)
Hash identifier: P0fBcbMA6X/jaktRoKNDM9GnNSRKcMXxx91gHCDss1E=
Subject key identifier: D3:36:7D:EF:EA:22:22:94:B1:BB:15:1C:FC:67:88:63:55:23:76:08
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019059247241C36BCA79360706AA140DBF46
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0zZ97-oiIpSxuxUc_GeIY1Ujdgg.roa
Signing time: Thu 27 Jun 2024 10:01:18 +0000
ROA not before: Thu 27 Jun 2024 10:01:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.232.0/24 maxlen: 24
213.21.236.0/24 maxlen: 24
213.21.237.0/24 maxlen: 24
213.21.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 09:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:24:72:41:c3:6b:ca:79:36:07:06:aa:14:0d:bf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jun 27 10:01:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3367defea222294b1bb151cfc67886355237608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:fa:80:ae:b1:05:74:9c:13:d0:3a:b7:ea:
6c:86:6b:59:e8:38:ea:0e:63:af:52:c3:6e:05:92:
76:fa:c8:cf:fc:9f:78:3f:48:65:d6:de:8f:f8:10:
7f:b6:c2:74:83:c2:dd:9d:26:b8:b0:a3:32:10:6d:
79:4f:ab:d4:28:5f:3c:45:60:4a:be:42:2c:09:dd:
dc:39:18:44:f5:31:60:10:36:c1:0f:2d:2c:f5:c5:
cc:c8:63:3d:f2:0d:a1:fc:6d:5e:df:52:aa:e9:61:
0f:39:75:0a:49:8b:75:a0:b6:1d:e0:0c:84:18:a6:
61:53:ad:82:df:cf:e2:69:9a:3d:a6:a5:d9:e5:cf:
5b:68:79:a2:a0:d3:a4:4b:b7:d8:ef:4e:d4:7c:84:
ef:c0:33:23:ec:1b:bd:43:a3:1b:22:8b:da:4e:68:
aa:16:5a:ad:7e:3d:38:61:77:a8:88:ac:b0:2a:3a:
17:2d:44:05:28:80:27:f7:6d:f9:fd:e4:1e:59:da:
99:fd:98:00:43:cb:15:13:ef:98:53:b2:8f:2c:61:
98:7f:36:a6:fc:2b:a5:e3:8a:17:6e:27:ea:20:2f:
72:86:2c:e7:9b:48:ca:ee:41:f8:5f:f5:36:ec:9c:
bf:29:c1:32:60:4c:04:0b:8b:ba:d6:ff:52:3d:c0:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:36:7D:EF:EA:22:22:94:B1:BB:15:1C:FC:67:88:63:55:23:76:08
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/0zZ97-oiIpSxuxUc_GeIY1Ujdgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.232.0/24
213.21.236.0/23
213.21.243.0/24
Signature Algorithm: sha256WithRSAEncryption
57:57:43:4e:91:a9:26:54:5e:47:f5:1c:a5:19:a9:61:38:1d:
6b:a6:a4:d5:6a:82:03:af:93:ae:97:6d:a9:8f:e3:2e:2f:24:
bb:4b:6c:e3:0b:44:25:bb:4d:bb:3d:ba:34:f3:a5:cb:3c:54:
1f:a4:75:5e:06:fc:1a:b4:94:2e:0a:28:35:8f:55:48:a9:9c:
e9:72:76:b6:cb:cd:89:d7:76:70:32:6d:29:c1:69:21:7d:1d:
56:c8:a9:1e:c3:57:1a:bb:fc:5c:f1:06:3a:5b:83:70:48:4a:
12:1c:eb:a0:e2:ad:a2:92:f5:4e:c1:54:df:25:3d:cb:2a:a2:
f7:4a:61:1a:67:8f:39:f1:fc:1f:d9:81:5d:c2:ea:1d:2d:08:
31:55:7c:bb:ce:fd:04:94:8e:08:72:d8:12:b1:58:9d:28:0e:
8d:e0:7b:04:0b:8a:48:9e:9f:69:59:7a:65:95:e6:1f:bd:8e:
ff:44:5c:54:e7:ad:5c:2d:9d:d4:8c:fd:61:dc:4a:fe:4b:87:
a6:a8:86:33:a2:5b:fe:0a:2f:8a:e0:15:c8:c3:4d:7e:d0:5c:
57:f9:87:40:8d:ae:59:93:51:96:6a:13:ce:70:1b:56:8a:4f:
9b:bf:d7:8f:37:c8:51:7a:29:00:ea:99:59:42:82:c9:15:b3:
15:7b:a5:3e
-----BEGIN CERTIFICATE-----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 at Mon Jul 15 13:10:34 2024 by rpki-client on console-ams.rpki-client.org