Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/QCXeienInRXkiU29TjLOr1LnK9s.roa
File: QCXeienInRXkiU29TjLOr1LnK9s.roa (raw, json)
Hash identifier: C01gXoe9FSI9XcNO9M2sXS2aSrQ17PSEHcdyyMaOZdw=
Subject key identifier: 40:25:DE:89:E9:C8:9D:15:E4:89:4D:BD:4E:32:CE:AF:52:E7:2B:DB
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018B4C74F8183A913E7C421BBE8DFF810FAF
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/QCXeienInRXkiU29TjLOr1LnK9s.roa
Signing time: Fri 20 Oct 2023 09:40:15 +0000
ROA not before: Fri 20 Oct 2023 09:40:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.237.0/24 maxlen: 24
213.21.236.0/24 maxlen: 24
213.21.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:74:f8:18:3a:91:3e:7c:42:1b:be:8d:ff:81:0f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Oct 20 09:40:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4025de89e9c89d15e4894dbd4e32ceaf52e72bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:98:23:32:3b:42:47:0d:10:6e:d9:99:f7:
a6:91:c4:72:78:03:d4:12:5c:8e:1d:b0:66:0f:cb:
2c:3c:2c:a8:81:50:97:40:60:a6:6c:0f:d3:e6:1e:
e5:05:95:2f:2b:c9:23:29:70:81:1e:24:10:be:b9:
1b:40:bc:aa:bd:0b:64:a1:56:1c:b6:49:b9:41:78:
bd:c9:ec:b5:f5:ea:71:61:68:bb:3d:4c:b1:0a:73:
c5:26:79:ba:e0:82:62:91:15:41:69:4d:de:9f:97:
3c:73:53:19:72:48:e4:7e:32:d5:75:08:1b:29:1f:
47:ec:24:b4:c7:a9:df:4a:b9:ff:9c:45:b5:21:ee:
9b:dd:c6:32:25:34:e4:69:69:a1:98:02:24:39:a3:
03:ec:53:04:05:d1:2d:c7:d5:d2:91:8c:cf:1a:05:
03:41:16:c5:bd:08:34:ba:bb:76:d0:02:b8:2a:98:
c0:db:d8:7c:3d:d5:a4:2d:dc:9a:07:fd:32:80:ca:
17:a4:b0:ff:78:c0:4d:ba:53:0e:b2:eb:f3:74:62:
67:a6:e8:db:93:bd:e5:08:e7:55:e7:76:43:94:e3:
4e:95:c8:65:d3:f1:a2:f0:e1:af:95:0b:65:8c:73:
a3:b8:ec:78:f2:37:76:be:00:66:cb:9a:de:d5:2e:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:25:DE:89:E9:C8:9D:15:E4:89:4D:BD:4E:32:CE:AF:52:E7:2B:DB
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/QCXeienInRXkiU29TjLOr1LnK9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.236.0/23
213.21.245.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0b:83:ec:e2:16:c5:37:78:91:55:96:e2:c5:6c:83:0e:a6:
87:ab:9c:61:a0:58:51:78:55:a8:00:b9:c8:d5:61:46:91:fd:
85:5d:5c:dc:11:d0:84:56:8b:ee:93:ea:4f:00:3c:e0:e7:42:
f8:47:71:09:3b:c1:6f:79:f9:e5:15:e6:8a:d8:bb:75:e2:39:
9c:35:11:9d:df:8d:9f:e2:1f:39:23:b5:d3:07:a1:15:1e:c3:
77:41:39:88:3e:2f:fa:cf:2d:1b:50:5c:e0:29:5c:8d:f5:03:
19:a5:d7:52:46:7d:ed:07:b2:98:17:fd:56:87:7c:a6:02:29:
a8:ed:8e:2b:f2:7c:ea:21:9a:2b:ee:10:1e:5b:fd:cc:b2:f0:
fc:a9:1c:9d:c0:4d:6b:35:4e:f4:8f:8d:2c:39:05:58:60:03:
ac:c9:ef:de:9a:d2:93:50:c4:bd:5f:52:52:b7:ad:a6:cc:4f:
38:df:66:37:40:f0:10:5e:73:72:63:4c:c3:13:55:26:e7:9b:
f6:1f:0e:92:52:52:99:ed:4d:44:3a:95:60:19:ea:f7:89:d7:
16:d4:72:79:5e:7b:c8:bc:35:cb:7f:60:58:6c:4b:67:f1:c9:
a6:5b:74:9b:08:7f:64:c2:ed:85:b1:6e:29:c6:f3:9a:a1:09:
d5:bd:b0:d2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtMdPgYOpE+fEIbvo3/gQ+vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjMxMDIwMDk0MDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDI1ZGU4OWU5Yzg5ZDE1ZTQ4OTRkYmQ0ZTMyY2VhZjUyZTcyYmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuaYIzI7QkcNEG7ZmfemkcRyeAPU
ElyOHbBmD8ssPCyogVCXQGCmbA/T5h7lBZUvK8kjKXCBHiQQvrkbQLyqvQtkoVYc
tkm5QXi9yey19epxYWi7PUyxCnPFJnm64IJikRVBaU3en5c8c1MZckjkfjLVdQgb
KR9H7CS0x6nfSrn/nEW1Ie6b3cYyJTTkaWmhmAIkOaMD7FMEBdEtx9XSkYzPGgUD
QRbFvQg0urt20AK4KpjA29h8PdWkLdyaB/0ygMoXpLD/eMBNulMOsuvzdGJnpujb
k73lCOdV53ZDlONOlchl0/Gi8OGvlQtljHOjuOx48jd2vgBmy5re1S7zjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEAl3onpyJ0V5IlNvU4yzq9S5yvbMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvUUNYZWllbkluUlhraVUyOVRqTE9yMUxuSzlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1RXsAwQA
1RX1MA0GCSqGSIb3DQEBCwUAA4IBAQCRC4Ps4hbFN3iRVZbixWyDDqaHq5xhoFhR
eFWoALnI1WFGkf2FXVzcEdCEVovuk+pPADzg50L4R3EJO8FvefnlFeaK2Lt14jmc
NRGd342f4h85I7XTB6EVHsN3QTmIPi/6zy0bUFzgKVyN9QMZpddSRn3tB7KYF/1W
h3ymAimo7Y4r8nzqIZor7hAeW/3MsvD8qRydwE1rNU70j40sOQVYYAOsye/emtKT
UMS9X1JSt62mzE8432Y3QPAQXnNyY0zDE1Um55v2Hw6SUlKZ7U1EOpVgGer3idcW
1HJ5XnvIvDXLf2BYbEtn8cmmW3SbCH9kwu2FsW4pxvOaoQnVvbDS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org