Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Zc7DCwcvwd-APFC2FXgiWnBMdko.roa
File: Zc7DCwcvwd-APFC2FXgiWnBMdko.roa (raw, json)
Hash identifier: wcLze+eHfjI9HtH9qTX8wNL8OqwBaWMsmIU+w1CvQso=
Subject key identifier: 65:CE:C3:0B:07:2F:C1:DF:80:3C:50:B6:15:78:22:5A:70:4C:76:4A
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01857039AA8B80EED5ED731DEC997A8B9CCF
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Zc7DCwcvwd-APFC2FXgiWnBMdko.roa
Signing time: Mon 02 Jan 2023 02:05:05 +0000
ROA not before: Mon 02 Jan 2023 02:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 213.21.231.0/24 maxlen: 24
213.21.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:aa:8b:80:ee:d5:ed:73:1d:ec:99:7a:8b:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 2 02:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65cec30b072fc1df803c50b61578225a704c764a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:d0:0e:34:e2:4c:9b:e3:8b:36:ee:4f:37:
42:25:21:c7:24:0b:63:1a:a0:a8:ce:21:8c:e6:01:
aa:5a:f9:95:5e:f2:23:36:a0:6a:56:60:2e:15:24:
3c:62:93:6c:09:8d:e3:06:b4:b1:88:49:95:68:b4:
b5:46:87:33:f8:0a:2a:37:13:d9:61:2f:48:60:27:
ae:90:89:70:2c:75:d7:c5:5a:82:4a:4d:a1:66:82:
fc:2a:2e:0c:ae:a9:aa:ae:70:27:71:2e:89:e8:2d:
31:fd:22:22:62:eb:28:61:c8:68:4d:4b:e7:8f:54:
ff:f5:d8:74:fc:6b:2c:07:6b:cb:8f:08:d4:4d:e9:
55:bc:dd:b2:5c:cf:48:79:66:6b:90:15:00:5b:ce:
df:99:f6:f2:1c:f2:39:ac:63:36:70:93:e0:14:bd:
45:f7:a5:ad:84:b5:88:c3:40:83:b0:a1:df:2a:fe:
e1:fd:06:79:e1:72:dc:e2:61:2e:81:80:1b:95:f0:
85:93:77:cf:bf:88:38:b3:08:3b:1c:c9:db:26:e4:
1c:03:4e:c4:de:db:8f:c1:9f:db:0f:de:c1:d6:c0:
de:61:b0:71:0a:63:58:c3:5d:9f:13:0c:77:69:8c:
d7:a4:0b:95:80:a1:ca:48:68:61:ac:64:b2:19:01:
7d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CE:C3:0B:07:2F:C1:DF:80:3C:50:B6:15:78:22:5A:70:4C:76:4A
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Zc7DCwcvwd-APFC2FXgiWnBMdko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.231.0/24
213.21.244.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:05:86:e9:2b:4b:42:08:c9:be:b3:40:45:77:31:99:91:20:
46:db:57:7f:21:d8:6a:75:ed:36:5f:e0:34:56:2a:3f:2f:f0:
c6:82:cc:9b:9a:a9:0e:50:4a:90:a2:93:db:d0:ea:0f:8f:b3:
72:35:ff:c3:a8:8c:6d:09:5d:df:42:9f:b9:39:21:05:b5:07:
46:55:2c:d2:d2:2c:81:b0:2c:19:95:96:bd:69:1a:03:55:77:
c4:4e:d7:24:73:00:82:8e:e7:1a:9d:f4:92:82:d4:64:9c:08:
28:2f:94:85:3f:8b:a7:fb:b0:0c:06:46:dd:03:a5:fb:2c:5c:
90:10:8c:86:45:00:38:d5:94:aa:41:c7:8c:72:19:49:e3:b8:
05:64:c1:28:ed:aa:f1:a5:32:af:c1:0d:41:c4:e8:91:ef:e7:
0a:ed:4c:b9:3d:13:3c:96:88:16:b1:2e:37:eb:c4:29:eb:b1:
30:51:cf:eb:38:b3:c0:30:f0:af:6f:0d:48:f1:88:bc:2a:58:
76:fa:f9:79:d1:6f:c7:bc:4d:81:cd:4d:1a:57:47:70:2d:3b:
90:37:1d:2a:c4:d4:05:67:b8:67:6b:8d:64:aa:05:d0:2a:96:
15:17:5c:99:b7:35:62:69:6e:cf:4a:be:1d:44:7f:13:91:33:
16:db:ba:d5
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 21 12:59:47 2023 by rpki-client on console-ams.rpki-client.org