Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/FZANIq8MWqkTsbhapBJo3qADF1o.roa
File: FZANIq8MWqkTsbhapBJo3qADF1o.roa (raw, json)
Hash identifier: YqIQUTgoDyBjz/HPZpgAh9dfiapz8wa0hmnI6Ci+Vss=
Subject key identifier: 15:90:0D:22:AF:0C:5A:A9:13:B1:B8:5A:A4:12:68:DE:A0:03:17:5A
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018995BEA9B2197B2D476F85E240E8626445
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/FZANIq8MWqkTsbhapBJo3qADF1o.roa
Signing time: Thu 27 Jul 2023 05:07:27 +0000
ROA not before: Thu 27 Jul 2023 05:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.236.0/24 maxlen: 24
213.21.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:be:a9:b2:19:7b:2d:47:6f:85:e2:40:e8:62:64:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jul 27 05:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15900d22af0c5aa913b1b85aa41268dea003175a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:61:3e:42:f0:46:69:30:da:eb:67:4e:11:e9:
32:e1:74:c8:60:c3:05:ba:3d:33:b3:71:b8:bf:5a:
16:27:88:1a:57:ae:7f:7d:9a:13:8a:a1:4b:ec:09:
f8:44:2d:2a:6d:f5:dd:fb:c4:64:e6:73:fa:dd:1d:
c4:cb:e5:e5:24:cf:55:ad:2d:85:99:c4:e2:4d:c7:
5b:46:1c:dc:8b:b6:a7:13:44:38:f7:51:7f:a6:fc:
78:aa:d1:98:43:94:1a:66:4c:04:4a:db:cf:09:d9:
cc:eb:9e:a2:f8:7e:56:4c:a8:ad:92:61:d2:c4:51:
07:5b:fc:fc:52:b2:f8:82:64:cf:c1:ea:76:e7:c2:
e9:82:26:c3:68:62:79:f7:e0:77:27:5c:23:0e:85:
87:cb:99:be:a8:71:74:45:3b:b0:8c:ca:81:d5:d9:
72:51:84:c5:41:72:a7:17:2c:a5:c7:7c:81:7b:aa:
58:ac:a2:64:74:eb:47:b3:6a:ea:f3:75:83:be:c4:
f3:48:ea:e0:b7:a4:7b:20:87:27:a4:c6:f6:93:87:
ae:5e:6c:96:30:a9:19:30:b8:8c:9d:a0:46:8b:00:
dd:78:43:06:74:9f:ba:a2:20:4c:79:05:f6:c0:bb:
2f:b5:4d:09:80:2a:77:06:04:65:2b:b4:20:e5:b9:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:90:0D:22:AF:0C:5A:A9:13:B1:B8:5A:A4:12:68:DE:A0:03:17:5A
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/FZANIq8MWqkTsbhapBJo3qADF1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.236.0/24
213.21.245.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:86:0e:f7:d5:22:b0:9e:63:37:69:03:80:a5:06:e2:84:f8:
f6:1c:f7:78:dd:99:92:b6:aa:9f:13:bc:44:58:e1:0b:1d:a0:
36:8e:33:dd:1e:8f:66:1f:54:6f:68:1e:7a:33:f4:8d:8c:1a:
c5:90:26:80:70:f7:dc:03:bd:6e:e0:64:38:d0:c8:be:5a:af:
42:79:1a:37:a2:aa:ca:c5:13:5d:23:e3:d0:c6:dd:da:83:b8:
e3:83:d3:99:ce:4f:9b:a0:d3:fc:52:3f:67:a2:69:f5:a4:1a:
67:4f:ac:a6:7a:be:6c:5a:a3:79:17:88:dc:5f:50:7d:21:63:
d9:19:4c:63:a4:4c:e9:06:02:cd:dd:5d:1e:93:9b:fa:43:20:
e8:c9:5e:cc:e9:8c:f1:4d:dc:b1:ea:17:16:ae:a1:b6:b5:52:
d9:72:87:3c:5e:a9:e9:ee:b2:fc:d8:6b:58:1f:c2:6e:5a:79:
f3:01:a9:f1:5d:60:4b:16:ab:db:1c:7d:cf:a7:bc:f7:d8:0a:
fc:df:5a:69:6d:7e:87:61:6e:61:f7:82:09:90:1a:3a:c0:ab:
77:07:40:78:4a:88:65:94:4e:e7:81:e5:13:c0:f4:74:ab:ff:
c8:a7:dc:02:ea:bf:50:b1:1f:ca:4c:3f:19:7b:6e:89:38:30:
8b:73:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 10:36:10 2023 by rpki-client on console-ams.rpki-client.org