Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1-egijJrbiQEFCsWE5g7YEvLBvu0.roa
File: 1-egijJrbiQEFCsWE5g7YEvLBvu0.roa (raw, json)
Hash identifier: 1ytoHel4C+wB68mTuRt4iLgotYGM8Wsk2ceMlQH62qA=
Subject key identifier: F9:E8:22:8C:9A:DB:89:01:05:0A:C5:84:E6:0E:D8:12:F2:C1:BE:ED
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01936A0D807432061C1C77D3265F8A1C79B1
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1-egijJrbiQEFCsWE5g7YEvLBvu0.roa
Signing time: Tue 26 Nov 2024 19:58:09 +0000
ROA not before: Tue 26 Nov 2024 19:58:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8285
IP address blocks: 213.21.253.0/24 maxlen: 24
2a06:e8c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 02 Dec 2024 11:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:0d:80:74:32:06:1c:1c:77:d3:26:5f:8a:1c:79:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Nov 26 19:58:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9e8228c9adb8901050ac584e60ed812f2c1beed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:bd:2b:2c:84:78:92:af:d7:8a:f4:d8:85:
9b:fe:1f:12:5c:8c:4b:24:8f:9e:6d:c5:cc:00:2b:
f3:e4:c1:32:e3:20:5c:29:39:22:e4:ee:75:f5:78:
28:8e:82:ec:c0:a7:05:34:ef:f2:78:82:0f:f4:73:
2e:6d:4f:69:e8:7f:f6:d5:43:d3:e6:f3:1c:9d:39:
ec:f9:bd:85:a8:19:aa:ec:b0:20:55:0f:95:c3:b0:
ef:97:f0:ef:47:f8:8c:53:c7:eb:b1:98:6b:ac:ea:
ad:aa:03:86:4c:0b:2d:cb:c8:90:5d:76:43:b8:ae:
cf:56:75:8f:58:ab:ce:bb:8a:c3:47:6e:6d:0f:31:
dc:5f:a0:70:50:97:aa:1d:cd:75:53:8a:8a:e7:7f:
53:e0:92:a9:9b:88:cd:44:db:90:0b:e6:93:0d:44:
ac:2a:f2:9b:e1:64:7d:ce:64:d4:f7:4f:7e:c4:0d:
f8:37:e4:20:66:d3:10:3f:50:7e:65:9d:d4:2c:57:
20:a9:16:a2:82:78:67:dd:e8:0d:d5:08:3d:5a:92:
61:b0:3b:b4:83:dc:9c:8f:13:9d:60:16:a1:da:15:
5b:16:64:17:8e:d7:ad:09:58:d2:18:8e:6e:db:a9:
20:93:c2:b4:70:60:e1:05:7a:5d:25:5e:a1:23:a4:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E8:22:8C:9A:DB:89:01:05:0A:C5:84:E6:0E:D8:12:F2:C1:BE:ED
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1-egijJrbiQEFCsWE5g7YEvLBvu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.253.0/24
IPv6:
2a06:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
63:49:e7:86:ed:71:f2:c0:7f:57:e4:e7:6f:a6:52:40:e7:52:
47:0c:68:3a:c6:4f:00:59:9c:a4:e7:4c:58:90:ce:8b:1b:c6:
32:04:c2:99:8f:3b:1f:dc:99:d5:bb:20:85:04:92:12:22:0a:
94:dd:b8:1d:cf:8b:66:87:55:88:04:7e:af:37:8e:d0:24:78:
1c:0f:9c:d1:d0:af:83:2f:f3:ba:66:67:fa:e1:ec:b7:4f:4d:
ab:87:ad:6e:5a:e5:a0:80:45:47:e1:86:4b:ed:34:7c:19:8f:
9a:c9:43:d5:53:ff:3b:a4:aa:83:8d:35:82:8a:5e:bf:32:b9:
ea:e6:d8:62:fa:fb:ae:b2:c9:87:95:fc:fc:12:e3:7e:d2:f1:
99:e4:3b:4d:f0:ab:3c:b3:25:67:d1:75:80:23:04:ae:4b:9e:
ce:2a:31:a4:f6:e1:3e:69:ad:6f:31:a1:73:75:ab:e0:ee:b6:
5f:bd:f7:75:3f:1d:fe:2f:26:c7:7c:7c:ec:e6:10:22:5e:a8:
bb:39:26:8f:d3:72:95:ed:e6:63:22:91:fd:dc:a6:3c:87:e6:
a3:ab:93:6f:2a:c5:df:6f:1a:7f:74:e9:f8:61:f7:78:91:ec:
0b:63:cf:28:4b:ef:be:dc:aa:3c:c4:47:2c:c0:bf:39:85:16:
79:92:9c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:55 2025 by rpki-client