Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/VtN2A2wOjT4LyQ9ZUCfntaPMfTM.roa
File: VtN2A2wOjT4LyQ9ZUCfntaPMfTM.roa (raw, json)
Hash identifier: yvNOe3SJkPz0wHv6eVdpyYJtDek02e+J5xnW/CDRpug=
Subject key identifier: 56:D3:76:03:6C:0E:8D:3E:0B:C9:0F:59:50:27:E7:B5:A3:CC:7D:33
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01921AF35A403D28D5AA85C4FBB21014EC0A
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/VtN2A2wOjT4LyQ9ZUCfntaPMfTM.roa
Signing time: Sun 22 Sep 2024 18:16:48 +0000
ROA not before: Sun 22 Sep 2024 18:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 213.21.232.0/24 maxlen: 24
213.21.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 11:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1a:f3:5a:40:3d:28:d5:aa:85:c4:fb:b2:10:14:ec:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Sep 22 18:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56d376036c0e8d3e0bc90f595027e7b5a3cc7d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:21:3b:04:3d:bf:57:bd:b3:94:13:fc:44:
ab:5e:9c:bf:89:de:70:f4:5c:32:cb:4b:16:9e:fd:
d5:9f:18:59:91:5d:b9:d3:7c:4c:78:a9:45:8a:ad:
72:5d:f4:5c:fd:ee:c2:04:3f:1e:a9:68:72:e5:c8:
43:cf:0f:4c:e0:ca:5b:47:c3:19:40:20:98:b3:96:
fe:6e:6b:a1:e5:63:01:93:24:95:60:f8:f4:1e:92:
6f:63:85:ab:86:e2:66:7d:14:f8:84:5b:4b:d4:af:
88:ef:77:1f:93:3d:82:8c:d7:72:60:b1:4b:51:9a:
69:05:c3:f1:79:27:df:19:8e:73:25:bf:f1:33:07:
6b:4b:f3:0c:56:a4:42:4d:1a:75:ad:79:e4:b7:28:
a4:47:cf:fa:42:ce:97:88:ff:c1:a9:c7:64:89:f7:
6d:59:70:2f:68:b8:2d:4f:0b:3a:bd:a2:5f:aa:3b:
17:74:59:1c:ca:3d:e5:5e:f3:a4:47:73:c7:b1:3a:
ee:4a:f2:95:4e:79:c4:74:e2:e7:29:6b:8b:18:a0:
95:c3:cc:e2:aa:af:66:e5:54:1d:3e:d3:4d:3f:71:
16:ee:25:6f:5a:d8:c4:6d:a4:c3:2e:b8:fb:b7:e0:
83:37:b0:5a:0d:d2:b5:63:ed:f7:b3:66:74:fa:67:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D3:76:03:6C:0E:8D:3E:0B:C9:0F:59:50:27:E7:B5:A3:CC:7D:33
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/VtN2A2wOjT4LyQ9ZUCfntaPMfTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.232.0/24
213.21.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:dc:a1:e5:2b:4a:d1:4c:34:77:59:b5:a9:49:0a:46:a7:03:
3e:76:4b:47:10:aa:cd:f9:1e:f4:55:10:c5:99:8c:a1:7f:69:
8e:a5:0b:03:cb:eb:32:72:72:24:fc:ff:b0:9b:9f:1b:db:05:
09:35:0a:7c:e5:63:4d:a5:c0:4a:82:0f:60:de:f3:64:f5:4f:
c5:c3:3a:54:53:99:0b:fb:38:55:92:65:50:67:cd:fb:d2:0d:
4e:56:c0:bf:bd:99:86:28:2b:cc:53:05:00:2f:95:f2:30:ee:
9f:ea:a1:cc:cf:25:a8:54:05:ce:1f:71:04:9c:6b:4f:09:bb:
b1:94:1e:49:6e:3e:89:cf:21:a8:fd:98:f0:c8:5e:6e:a2:5d:
01:08:92:ad:c1:0f:6c:11:b4:9e:0b:5a:4e:8b:2b:f1:d6:cc:
d7:2f:ab:be:a7:e2:a8:19:18:7b:0e:af:04:ad:f8:c5:2e:36:
48:08:34:8c:81:be:f1:0f:1c:f9:df:8c:1e:27:f5:e6:d5:99:
3e:a3:52:59:2d:72:4a:fe:f9:03:22:26:e1:4f:b8:45:20:5e:
3a:73:7a:46:f4:ea:54:71:7b:68:e1:2c:43:a0:3a:62:95:6b:
15:ae:05:d2:fc:2b:d4:7a:b0:4e:d4:ae:29:23:58:ac:da:9f:
1c:e0:12:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 14:01:46 2024 by rpki-client on console-ams.rpki-client.org