Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/_6H9SdTmgg-jWvvmCE05lIPJ4GM.roa
File: _6H9SdTmgg-jWvvmCE05lIPJ4GM.roa (raw, json)
Hash identifier: SxWX4lKfhzkmlKbult4vjWKKsZar9a6EF3/TIg7/kSU=
Subject key identifier: FF:A1:FD:49:D4:E6:82:0F:A3:5A:FB:E6:08:4D:39:94:83:C9:E0:63
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0190DB6C7E5FFE7318227FC9A55658BFD9E8
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/_6H9SdTmgg-jWvvmCE05lIPJ4GM.roa
Signing time: Mon 22 Jul 2024 17:10:38 +0000
ROA not before: Mon 22 Jul 2024 17:10:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 213.21.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Sep 2024 18:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:db:6c:7e:5f:fe:73:18:22:7f:c9:a5:56:58:bf:d9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jul 22 17:10:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffa1fd49d4e6820fa35afbe6084d399483c9e063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:dd:4d:b4:dc:d6:54:2b:43:b9:16:30:fd:
be:f2:86:03:5f:75:51:ad:92:32:66:00:9f:d9:d8:
a1:d8:ca:16:12:61:46:09:5f:7c:7d:02:2c:b0:71:
1d:47:d7:6f:87:09:9c:06:9a:23:a7:ec:bf:c1:d1:
1a:70:2f:a4:fa:06:86:79:19:10:a7:92:ad:17:32:
de:f4:5c:13:bc:8e:cb:b1:11:7f:a9:17:80:ac:6d:
0a:7c:7b:51:f9:c6:6a:7f:ce:35:04:97:e2:25:3f:
2c:1d:48:b1:f6:d4:56:26:64:f1:74:86:17:c1:78:
b0:46:c5:1d:21:24:6c:15:9c:aa:43:ca:ee:b0:82:
c2:18:4e:6a:2b:4a:32:df:14:3d:5d:6e:80:06:7f:
32:dd:8f:d1:ea:3b:7c:0d:bd:79:9e:c0:8f:c2:cf:
71:a9:56:a1:92:d4:16:67:58:ed:7a:4e:ab:2a:b7:
95:fd:7f:6d:44:e6:23:d1:15:ee:d7:49:82:64:ab:
20:5e:73:fc:45:a0:61:49:80:82:2c:69:23:63:f5:
0a:c3:d2:3e:03:4e:78:d9:76:f9:27:9e:4a:76:3a:
85:df:b7:2b:77:b8:7a:4d:eb:71:15:e7:e5:0d:0a:
f9:00:1a:4c:68:09:b8:a5:ad:4c:94:37:94:e6:78:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A1:FD:49:D4:E6:82:0F:A3:5A:FB:E6:08:4D:39:94:83:C9:E0:63
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/_6H9SdTmgg-jWvvmCE05lIPJ4GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:28:ec:ac:fd:0e:2e:32:ac:d2:40:78:cc:e6:c6:65:8d:b0:
cb:cc:ed:46:eb:ce:7a:4e:0e:25:e2:fb:1d:f1:26:e4:18:4b:
d1:84:e2:93:1c:b2:35:df:f1:e3:50:17:56:7c:05:4e:4b:b0:
ab:4f:21:be:87:3c:5f:52:ab:79:a9:0c:5a:e7:df:de:4f:14:
03:1d:5c:c5:e9:cf:bd:4f:74:76:a2:eb:14:40:c2:ef:5a:5f:
a8:9e:a7:fa:e6:41:6e:f8:ed:67:84:16:ac:81:86:a1:ac:16:
93:8c:37:16:20:9f:74:06:43:bf:c4:f1:15:1e:a9:ba:c0:09:
0a:8d:c9:bc:0c:3a:2a:fe:5e:92:d2:68:03:70:6c:6c:bb:fe:
ac:29:96:93:fd:c3:c0:ca:22:77:1d:23:4c:da:79:88:09:be:
de:05:0e:eb:b5:ec:fb:36:63:48:9d:53:bd:b1:32:11:fe:6c:
1a:a5:3d:dc:55:e7:69:cd:be:3b:d1:8e:de:e5:7d:db:03:73:
7e:1f:04:23:7f:26:f7:bd:e5:15:48:43:c4:8a:1a:6e:6b:5d:
8e:8a:49:df:1f:7d:f3:87:38:f6:09:f4:c4:ee:cd:49:00:6f:
fb:99:ff:3d:e3:8b:74:1e:7f:bb:60:5f:43:db:ca:3c:68:69:
86:6b:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:35 2024 by rpki-client on console-ams.rpki-client.org