Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Phju382wnqgNEDXjCy3y39ui5-I.roa
File: Phju382wnqgNEDXjCy3y39ui5-I.roa (raw, json)
Hash identifier: //FEhwuW40GaBXLureWyuX6lNpkn+nKoYSFhCs172oM=
Subject key identifier: 3E:18:EE:DF:CD:B0:9E:A8:0D:10:35:E3:0B:2D:F2:DF:DB:A2:E7:E2
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0186C19E784DFFBDF5D2EDDF2ECA6DC99B99
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Phju382wnqgNEDXjCy3y39ui5-I.roa
Signing time: Wed 08 Mar 2023 14:27:13 +0000
ROA not before: Wed 08 Mar 2023 14:27:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32181
IP address blocks: 213.21.235.0/24 maxlen: 24
213.21.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:9e:78:4d:ff:bd:f5:d2:ed:df:2e:ca:6d:c9:9b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Mar 8 14:27:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e18eedfcdb09ea80d1035e30b2df2dfdba2e7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:d2:29:03:1e:f4:ae:c9:05:94:ac:55:a4:
e4:08:40:cf:74:d7:74:8a:48:ff:a7:ce:1a:57:27:
8e:ca:9a:09:24:18:5e:5e:0e:33:eb:52:cb:ba:e3:
7d:33:ae:70:b4:bd:1d:dd:4c:96:6e:ab:db:2c:4e:
e2:7e:ec:a9:be:56:f7:c3:1c:ef:35:2b:47:01:3e:
d9:e0:89:b2:0b:ac:f5:99:7a:63:44:2d:fe:51:5a:
4d:b0:fe:3c:9f:6a:2e:89:01:8d:4e:31:a6:38:86:
4f:18:d9:33:79:9c:1a:fb:3c:6f:ac:ba:a7:cc:f5:
79:20:df:49:a9:aa:bb:0f:be:eb:7f:85:e7:9b:20:
23:32:1b:ae:57:ee:bf:fe:fd:00:65:ad:ce:b8:52:
b2:58:5f:47:e3:72:32:7b:de:fb:58:04:17:84:96:
30:94:ea:d4:67:38:24:03:1b:1f:25:aa:de:b4:d9:
0b:02:16:8b:96:f7:2a:54:ed:72:ef:96:bd:e1:a6:
9d:72:4a:82:61:63:91:8f:6d:47:f5:1e:f4:22:31:
5a:55:69:e8:6e:8b:3d:e6:7b:61:55:b4:7d:c5:01:
81:63:b7:01:8e:e9:97:7e:1f:5e:84:8a:b7:d7:76:
ba:51:00:3d:f0:44:89:03:cd:12:cb:05:a0:85:0d:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:18:EE:DF:CD:B0:9E:A8:0D:10:35:E3:0B:2D:F2:DF:DB:A2:E7:E2
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Phju382wnqgNEDXjCy3y39ui5-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.235.0/24
213.21.241.0/24
Signature Algorithm: sha256WithRSAEncryption
19:de:a1:d9:9c:40:71:e6:2f:94:ba:61:9e:4f:46:b4:56:46:
37:cd:53:90:0a:ea:b1:c5:bc:fb:57:29:22:9a:de:d9:7a:ec:
17:58:17:fb:fa:19:21:38:7b:6d:76:68:cd:e6:cb:e2:68:c9:
98:d5:a8:b6:7e:6d:53:4b:84:b0:86:90:49:76:a5:ab:3e:45:
d5:07:49:5d:ef:58:ca:5a:fe:2c:38:88:37:8f:16:36:dd:54:
69:e3:1c:95:22:4d:51:75:70:47:99:eb:42:72:2c:52:01:b8:
5e:de:1c:83:c7:ae:e0:2b:ad:1d:af:55:16:10:ef:76:ae:ac:
0c:e8:33:fc:b4:74:46:89:4b:93:95:36:eb:11:b5:89:58:2e:
53:34:7e:59:8c:b8:74:a2:38:0e:ae:40:a0:1f:8f:9f:39:ea:
4e:c1:75:88:77:72:a5:cb:78:fd:a5:37:e0:6b:f9:83:fd:37:
bd:06:44:13:93:46:54:8b:d7:28:cd:e2:9a:da:d5:78:38:24:
c8:a9:f7:42:35:c2:df:1f:37:22:46:5d:2c:d2:4f:cb:69:97:
0b:ff:d5:18:56:ab:c4:39:b6:1d:81:e1:ce:a6:5b:7e:1d:d0:
b2:83:46:81:c3:78:22:7b:a8:13:33:d8:88:17:0e:84:89:14:
88:8d:41:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:40 2024 by rpki-client on console-ams.rpki-client.org