Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/64v-b4gGsft0zJ1ChggNc9ymoBw.roa
File: 64v-b4gGsft0zJ1ChggNc9ymoBw.roa (raw, json)
Hash identifier: K76CYDIMZQuQH2yIScaDDhHCa+2gto9pAiKPJHljKFc=
Subject key identifier: EB:8B:FE:6F:88:06:B1:FB:74:CC:9D:42:86:08:0D:73:DC:A6:A0:1C
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0185DE1CA4BA343184E87EBB348644F7A9E5
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/64v-b4gGsft0zJ1ChggNc9ymoBw.roa
Signing time: Mon 23 Jan 2023 10:11:37 +0000
ROA not before: Mon 23 Jan 2023 10:11:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.232.0/24 maxlen: 24
213.21.237.0/24 maxlen: 24
213.21.236.0/24 maxlen: 24
213.21.240.0/24 maxlen: 24
213.21.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jan 2023 16:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:1c:a4:ba:34:31:84:e8:7e:bb:34:86:44:f7:a9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 23 10:11:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb8bfe6f8806b1fb74cc9d4286080d73dca6a01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:48:07:1c:34:b1:81:71:3c:d3:e3:7f:e6:
cc:69:95:59:8c:bf:44:a8:17:f1:0f:23:31:eb:0a:
4f:72:d5:cc:26:be:e9:04:c5:b3:d2:6c:f5:cc:95:
60:46:41:7a:d6:e2:92:c1:48:7c:c5:8c:84:59:d9:
41:4e:20:7e:48:00:d4:18:dc:02:c0:ae:f1:1c:c9:
7e:44:aa:2c:c9:e4:e2:b2:bd:75:eb:aa:6f:6c:b4:
ba:2d:11:78:1f:6a:4d:44:f1:26:e1:1d:99:2b:bb:
c7:ba:c4:03:68:ca:11:dc:dc:38:67:51:cb:91:9d:
bb:c7:3a:8a:62:35:2f:c5:17:04:d0:95:89:6a:7d:
55:e0:a0:f9:de:34:2f:55:ad:4c:1b:45:ef:90:5c:
08:f7:24:b1:88:7c:c3:73:f8:01:11:33:46:94:5f:
90:d3:07:67:15:ba:c9:0f:77:cf:68:42:45:c0:17:
f0:14:d6:e2:c0:5f:ad:7e:75:2b:9d:fc:9a:7e:ec:
64:8a:d6:2e:ac:d1:d9:00:2d:6b:3b:ee:b7:63:26:
00:b2:72:b3:0c:45:ce:fe:60:9f:28:fd:3e:ba:4f:
a0:c4:10:c8:bb:f5:54:1f:85:02:d5:39:df:e8:24:
12:5d:38:28:e6:1d:37:6c:5f:7b:ee:ca:a0:c4:70:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8B:FE:6F:88:06:B1:FB:74:CC:9D:42:86:08:0D:73:DC:A6:A0:1C
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/64v-b4gGsft0zJ1ChggNc9ymoBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.232.0/24
213.21.236.0/23
213.21.240.0/23
Signature Algorithm: sha256WithRSAEncryption
23:af:60:89:d0:39:6b:41:84:31:e2:74:9d:35:d8:99:8d:3f:
a3:23:be:32:42:b6:c4:06:2a:79:ce:ab:47:f7:9c:6e:7c:9e:
8b:8d:d2:da:c3:20:ff:c9:f1:dd:af:99:9a:d3:ed:d5:6f:ff:
04:e9:fc:4d:64:5e:b4:68:68:0e:10:71:21:3c:6d:ef:da:c1:
e2:bf:54:5f:fe:1e:1f:39:58:cf:42:aa:da:6e:ee:ac:72:a9:
08:4d:65:49:3c:1c:9b:52:0c:01:3c:e2:fe:5c:c3:1c:da:21:
18:8a:44:5a:89:b6:eb:55:4a:d4:f8:52:e9:f5:b2:cf:4b:a5:
f4:5e:ba:1a:3e:b0:7a:dd:29:9f:4b:84:6f:28:fa:65:d2:b2:
5f:6f:70:e3:2e:ce:92:1c:4e:b8:67:3d:ad:5b:0c:e4:11:1c:
7b:c2:fe:04:c6:65:57:41:84:64:1a:2c:ea:e7:86:af:93:34:
c8:e9:be:a4:6c:62:98:cd:24:88:15:5f:5a:2a:f4:cc:5b:c5:
d9:f6:73:e6:cb:51:6a:e3:bd:a3:3b:d2:18:e0:ad:51:97:90:
50:08:01:23:02:78:65:6d:b2:59:38:60:0f:f4:63:bf:78:a9:
93:fa:69:3d:d2:f4:08:6e:66:d1:21:99:e9:ac:3d:ab:5f:53:
57:53:49:a1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYXeHKS6NDGE6H67NIZE96nlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjMwMTIzMTAxMTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjhiZmU2Zjg4MDZiMWZiNzRjYzlkNDI4NjA4MGQ3M2RjYTZhMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdlIBxw0sYFxPNPjf+bMaZVZjL9E
qBfxDyMx6wpPctXMJr7pBMWz0mz1zJVgRkF61uKSwUh8xYyEWdlBTiB+SADUGNwC
wK7xHMl+RKosyeTisr1166pvbLS6LRF4H2pNRPEm4R2ZK7vHusQDaMoR3Nw4Z1HL
kZ27xzqKYjUvxRcE0JWJan1V4KD53jQvVa1MG0XvkFwI9ySxiHzDc/gBETNGlF+Q
0wdnFbrJD3fPaEJFwBfwFNbiwF+tfnUrnfyafuxkitYurNHZAC1rO+63YyYAsnKz
DEXO/mCfKP0+uk+gxBDIu/VUH4UC1Tnf6CQSXTgo5h03bF977sqgxHBOkQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOuL/m+IBrH7dMydQoYIDXPcpqAcMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvNjR2LWI0Z0dzZnQwekoxQ2hnZ05jOXltb0J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1RXoAwQB
1RXsAwQB1RXwMA0GCSqGSIb3DQEBCwUAA4IBAQAjr2CJ0DlrQYQx4nSdNdiZjT+j
I74yQrbEBip5zqtH95xufJ6LjdLawyD/yfHdr5ma0+3Vb/8E6fxNZF60aGgOEHEh
PG3v2sHiv1Rf/h4fOVjPQqrabu6scqkITWVJPBybUgwBPOL+XMMc2iEYikRaibbr
VUrU+FLp9bLPS6X0XroaPrB63SmfS4RvKPpl0rJfb3DjLs6SHE64Zz2tWwzkERx7
wv4ExmVXQYRkGizq54avkzTI6b6kbGKYzSSIFV9aKvTMW8XZ9nPmy1Fq472jO9IY
4K1Rl5BQCAEjAnhlbbJZOGAP9GO/eKmT+mk90vQIbmbRIZnprD2rX1NXU0mh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org