Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/YVMkcfGVUcGXvODbpPy8_fwsFtI.roa
File: YVMkcfGVUcGXvODbpPy8_fwsFtI.roa (raw, json)
Hash identifier: oL0OWKDaHsjoSmIv/DQYvOyB3qRr9vmuSfsX+EhNjRE=
Subject key identifier: 61:53:24:71:F1:95:51:C1:97:BC:E0:DB:A4:FC:BC:FD:FC:2C:16:D2
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018AB7B96DCFC1339D2B67FCD1B0493FA6CE
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/YVMkcfGVUcGXvODbpPy8_fwsFtI.roa
Signing time: Thu 21 Sep 2023 12:31:37 +0000
ROA not before: Thu 21 Sep 2023 12:31:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36351
IP address blocks: 213.21.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 11:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:b9:6d:cf:c1:33:9d:2b:67:fc:d1:b0:49:3f:a6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Sep 21 12:31:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61532471f19551c197bce0dba4fcbcfdfc2c16d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b2:72:e8:40:f2:93:d5:19:ba:0b:38:19:8c:
f7:a0:c8:f6:13:5d:6c:7e:cf:f1:4a:38:f0:fc:40:
bb:fd:35:69:8b:39:3a:18:74:10:3a:aa:e0:10:87:
47:28:6a:06:d2:12:49:c1:da:77:13:c5:ea:88:36:
0d:c6:d9:09:b0:54:1c:f9:04:2c:1a:b9:7a:c8:ef:
1d:e4:34:79:c1:f8:43:3d:9d:94:b3:13:ca:4c:f6:
f6:33:57:6c:93:f6:b2:d9:f1:84:68:ed:bb:39:cb:
d0:f9:1f:d8:a2:34:90:df:fb:0d:ad:b2:86:71:8e:
d3:e9:48:da:5c:ce:ea:19:48:91:bb:14:41:45:da:
65:fe:c6:c2:94:9e:96:22:34:c6:0a:2b:39:94:91:
1e:28:96:e9:c6:8c:13:44:9f:14:99:da:a5:f5:fe:
30:d4:f9:09:ff:d4:6b:41:39:c1:1d:d6:c3:55:c3:
cd:23:81:f8:3f:9b:bf:0c:a0:4d:41:a0:f0:6d:d7:
e7:f5:c6:86:56:9f:26:ed:2c:86:86:ee:17:58:4b:
12:26:6a:74:ba:93:e2:dc:a9:38:15:59:b2:1b:b2:
bd:f2:a5:10:a1:cd:d6:67:bf:3c:55:81:96:d1:c7:
ae:23:70:db:c1:7f:7c:80:25:e1:62:8f:da:fe:cb:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:24:71:F1:95:51:C1:97:BC:E0:DB:A4:FC:BC:FD:FC:2C:16:D2
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/YVMkcfGVUcGXvODbpPy8_fwsFtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.248.0/24
Signature Algorithm: sha256WithRSAEncryption
38:86:f7:85:7b:9b:01:f5:66:7e:3d:b1:ed:2b:4b:a1:df:f8:
e3:76:26:bf:d1:62:40:70:4d:c6:18:70:51:9d:48:53:ae:7b:
13:92:d7:86:c0:fd:7e:18:3d:e0:25:66:11:09:f6:f2:c7:01:
b8:25:a0:60:e2:58:a0:84:86:02:b2:3c:6a:68:93:ab:40:55:
68:f9:04:ea:65:ab:c7:c3:e9:6f:97:d5:85:e3:7a:66:19:ff:
46:eb:18:62:85:31:37:ac:c0:1b:0d:33:40:44:49:dd:d4:20:
c0:f5:28:8f:7d:98:df:ef:ec:2d:af:41:ad:f7:6e:b2:44:2b:
79:44:9d:f3:d7:e6:60:a3:92:d5:01:12:ad:89:f4:c8:f5:59:
73:02:89:75:d6:87:6c:2d:d2:a9:94:54:b2:29:d8:15:9a:21:
1f:36:3b:32:3d:6d:ef:36:d3:03:c6:63:5b:6b:44:a2:12:7b:
8f:08:dd:38:a9:37:6e:71:d1:7c:ad:f7:66:f5:58:d5:93:c3:
e9:99:b7:30:74:e5:6a:cd:27:0f:9a:45:59:c6:bc:09:87:b6:
9a:d6:a4:36:46:ce:70:13:e0:b9:5a:35:e3:ac:9e:ee:10:ce:
a1:59:65:fc:f9:ec:7c:0d:1a:b1:32:f5:90:08:2e:f6:ad:49:
96:30:a8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org