Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/HJphlSauXDty3RIY4KYhXhbbN28.roa
File: HJphlSauXDty3RIY4KYhXhbbN28.roa (raw, json)
Hash identifier: pCjrvIe6+APdZEPPhtVWrEixk6yKj/NfxrOmCdC5hLo=
Subject key identifier: 1C:9A:61:95:26:AE:5C:3B:72:DD:12:18:E0:A6:21:5E:16:DB:37:6F
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0185BA2B0CA13C96A66CF811C4A57166370B
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/HJphlSauXDty3RIY4KYhXhbbN28.roa
Signing time: Mon 16 Jan 2023 10:41:01 +0000
ROA not before: Mon 16 Jan 2023 10:41:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.232.0/24 maxlen: 24
213.21.237.0/24 maxlen: 24
213.21.236.0/24 maxlen: 24
213.21.240.0/24 maxlen: 24
213.21.241.0/24 maxlen: 24
213.21.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:2b:0c:a1:3c:96:a6:6c:f8:11:c4:a5:71:66:37:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 16 10:41:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c9a619526ae5c3b72dd1218e0a6215e16db376f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3c:00:f3:45:d8:cf:52:56:bd:e9:c7:a3:8e:
c5:9a:4b:f7:91:28:08:c5:b7:6f:02:26:e9:8a:f5:
f8:87:ee:43:bd:f6:94:46:0e:c3:6c:1e:90:7f:0b:
98:15:ac:7f:e0:47:b5:fa:06:c4:94:8e:5d:19:9f:
45:06:67:fb:ca:ef:c9:04:67:5d:94:22:bc:53:b8:
87:78:6a:ad:da:4a:cb:7c:5f:87:c5:a9:ca:b4:77:
e7:33:f5:f7:14:ca:d3:9c:e3:8f:21:7a:f6:db:35:
72:65:24:bb:49:0c:08:67:27:49:7e:d6:68:e2:9a:
9a:5b:7e:4d:36:81:08:73:25:c7:cd:94:ee:47:20:
b2:be:65:64:bb:37:d9:ce:13:fb:93:16:6c:65:5d:
ec:53:b9:d0:0d:86:50:a7:da:03:de:51:1d:25:2a:
71:fa:38:1f:c5:49:9f:5a:22:56:8d:f5:67:13:3b:
39:92:7c:60:c8:0f:7d:40:f0:97:8f:4e:e0:8b:8a:
c1:0d:50:6f:44:7e:31:7b:8d:9a:59:9d:f8:61:2a:
0e:8d:a2:9f:a8:7e:08:49:22:06:a4:c6:b4:1b:b7:
b8:b9:1f:ee:72:bf:b4:64:60:d0:16:5c:6c:10:10:
e4:f7:b7:12:20:cc:b6:60:3f:6d:87:92:09:7f:d0:
15:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9A:61:95:26:AE:5C:3B:72:DD:12:18:E0:A6:21:5E:16:DB:37:6F
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/HJphlSauXDty3RIY4KYhXhbbN28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.232.0/24
213.21.236.0/23
213.21.240.0/23
213.21.251.0/24
Signature Algorithm: sha256WithRSAEncryption
17:15:f3:79:44:56:1c:72:af:48:83:69:b1:da:75:b3:c7:f5:
0b:52:e5:e6:a1:a0:35:db:a6:af:51:93:a5:ee:f0:db:5b:a5:
9c:e1:15:b1:f6:be:55:57:af:3f:c6:71:f9:63:7d:fc:7e:07:
a2:4b:94:f1:a0:cb:cc:03:16:ad:73:e0:56:e6:99:c3:ae:53:
7e:00:aa:e9:88:d2:c5:6c:39:20:63:19:a0:40:3a:00:42:ac:
62:26:71:eb:3a:35:3c:7a:22:15:cf:d0:98:7a:33:e6:1b:02:
ec:9d:5a:81:65:42:d2:83:09:da:74:4f:d0:00:44:63:3f:5d:
34:da:43:db:37:96:76:e8:a6:39:64:a4:8d:e9:23:0a:91:0e:
32:5a:39:97:fa:e6:de:44:14:ac:c4:57:3e:30:ee:9e:f2:ee:
43:a2:a9:84:69:0a:c6:7c:12:f2:3d:87:b8:97:62:a5:e1:75:
89:ce:cf:44:90:09:f8:fc:fa:c1:ac:d4:4e:4b:83:9e:af:93:
fc:ee:46:8d:66:42:3b:48:b7:f9:ff:fc:db:c6:75:a2:09:26:
d8:6b:5c:47:76:c0:6e:67:75:c2:8e:fe:bc:93:f4:4a:da:bb:
27:e1:63:1a:1a:a0:c9:04:6a:7f:7d:7a:a5:74:c6:09:df:bc:
2e:59:e7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org