Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/G_GQLrJobSDTdcQSRXDJP2NSQL4.roa
File: G_GQLrJobSDTdcQSRXDJP2NSQL4.roa (raw, json)
Hash identifier: tU094fSI9F2B+AvtPKfqvCY+bqkXzxioXd6lGt/88wg=
Subject key identifier: 1B:F1:90:2E:B2:68:6D:20:D3:75:C4:12:45:70:C9:3F:63:52:40:BE
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0190EDEA2A1107F748D4832A64872E70751B
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/G_GQLrJobSDTdcQSRXDJP2NSQL4.roa
Signing time: Fri 26 Jul 2024 07:21:04 +0000
ROA not before: Fri 26 Jul 2024 07:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 213.21.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 10:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ed:ea:2a:11:07:f7:48:d4:83:2a:64:87:2e:70:75:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jul 26 07:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bf1902eb2686d20d375c4124570c93f635240be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:01:f1:83:5c:bb:6c:c5:b6:88:b5:79:f5:
58:d1:f2:cb:a4:27:39:88:cd:7a:dc:a5:75:54:5c:
da:de:09:b3:d6:f2:29:74:7b:ff:93:3a:d5:83:fa:
0a:27:62:14:98:30:4d:5c:fc:60:0f:c5:de:04:b3:
77:18:e6:b1:14:8a:dc:08:71:8a:56:e9:2b:56:76:
65:17:4a:b0:17:2c:64:be:4a:50:e8:d8:1d:c0:08:
02:31:3d:37:9b:18:a3:ab:72:0c:3d:b7:4e:00:24:
8b:52:dc:00:3d:94:5f:ee:8e:b3:1d:73:cd:d7:46:
7a:14:00:ba:0d:eb:b5:62:31:d1:d5:9b:49:ef:95:
7a:b9:6c:43:aa:28:bf:01:8f:62:5d:90:d9:1b:43:
05:d2:18:2a:55:b3:d2:7b:23:6d:b4:cb:1c:9e:6b:
39:3c:ea:c7:a7:58:3c:e3:46:96:ad:c7:ab:6a:2c:
0d:71:c3:d2:25:65:bd:c4:ae:c0:6a:16:6a:f9:b2:
64:18:16:fb:e2:fd:b6:1d:80:65:54:92:16:71:5d:
90:a8:18:28:6f:5f:58:d4:45:56:e7:c3:60:65:db:
69:73:d5:a9:a3:5f:d8:ac:19:6c:83:5b:ef:8a:52:
18:6e:5a:1d:3f:83:ca:53:9b:4d:77:d0:66:52:9e:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F1:90:2E:B2:68:6D:20:D3:75:C4:12:45:70:C9:3F:63:52:40:BE
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/G_GQLrJobSDTdcQSRXDJP2NSQL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.232.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3d:4d:34:bd:6f:8c:43:79:36:c9:06:f2:e3:3b:5b:c7:3d:
a6:ce:5f:51:8c:d7:ee:91:f8:26:42:52:a6:68:9f:b6:99:2e:
13:88:2b:92:8d:60:a5:11:69:bb:07:c9:31:dd:c7:30:75:2a:
c0:85:69:00:2c:23:ce:d8:ba:3b:48:04:68:a0:8e:4d:28:2b:
26:50:21:30:0c:66:1e:a4:c3:91:a0:92:f6:8a:f5:9f:8d:86:
f6:fd:ef:83:4a:38:96:7c:df:6d:fc:c8:97:93:25:48:18:a2:
1f:86:2e:c1:00:6b:cd:d4:b0:6a:69:8d:0a:aa:75:0d:b9:c7:
d5:b9:af:8a:0b:cf:30:12:02:48:c2:ed:49:19:63:74:1d:e1:
60:2b:23:e7:f2:07:7c:32:1b:21:0e:07:12:58:00:30:35:4d:
39:dd:bf:19:28:3f:bc:69:cf:2b:3f:48:ea:74:84:e9:49:d3:
38:ba:d1:18:55:9e:69:ba:4f:64:8f:70:c8:9d:95:7f:4d:1d:
3b:41:0d:7b:a3:6c:f0:70:1b:fc:e3:74:ac:7e:a1:ba:ee:c6:
4f:55:fb:3e:14:db:0d:8c:a3:f3:21:ac:ba:c1:93:36:e2:40:
97:c5:fd:a0:1a:a1:07:67:29:33:c0:8f:e2:57:29:bf:3a:7f:
3a:e3:6c:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDt6ioRB/dI1IMqZIcucHUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjQwNzI2MDcyMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmYxOTAyZWIyNjg2ZDIwZDM3NWM0MTI0NTcwYzkzZjYzNTI0MGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00gB8YNcu2zFtoi1efVY0fLLpCc5
iM163KV1VFza3gmz1vIpdHv/kzrVg/oKJ2IUmDBNXPxgD8XeBLN3GOaxFIrcCHGK
VukrVnZlF0qwFyxkvkpQ6NgdwAgCMT03mxijq3IMPbdOACSLUtwAPZRf7o6zHXPN
10Z6FAC6Deu1YjHR1ZtJ75V6uWxDqii/AY9iXZDZG0MF0hgqVbPSeyNttMscnms5
POrHp1g840aWrceraiwNccPSJWW9xK7AahZq+bJkGBb74v22HYBlVJIWcV2QqBgo
b19Y1EVW58NgZdtpc9Wpo1/YrBlsg1vvilIYblodP4PKU5tNd9BmUp5e+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBvxkC6yaG0g03XEEkVwyT9jUkC+MB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvR19HUUxySm9iU0RUZGNRU1JYREpQMk5TUUw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RXoMA0G
CSqGSIb3DQEBCwUAA4IBAQBZPU00vW+MQ3k2yQby4ztbxz2mzl9RjNfukfgmQlKm
aJ+2mS4TiCuSjWClEWm7B8kx3ccwdSrAhWkALCPO2Lo7SARooI5NKCsmUCEwDGYe
pMORoJL2ivWfjYb2/e+DSjiWfN9t/MiXkyVIGKIfhi7BAGvN1LBqaY0KqnUNucfV
ua+KC88wEgJIwu1JGWN0HeFgKyPn8gd8MhshDgcSWAAwNU053b8ZKD+8ac8rP0jq
dITpSdM4utEYVZ5puk9kj3DInZV/TR07QQ17o2zwcBv843SsfqG67sZPVfs+FNsN
jKPzIay6wZM24kCXxf2gGqEHZykzwI/iVym/On8642zI
-----END CERTIFICATE-----
Generated at Tue Sep 3 12:42:42 2024 by rpki-client on console-ams.rpki-client.org