Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/eMAbD24Z-k8KEb0osVgrE9LeL7g.roa
File: eMAbD24Z-k8KEb0osVgrE9LeL7g.roa (raw, json)
Hash identifier: E8OyEG2fwlXWW1FuupYrAMnzpI+Pf+PeM0FYy1J3g9o=
Subject key identifier: 78:C0:1B:0F:6E:19:FA:4F:0A:11:BD:28:B1:58:2B:13:D2:DE:2F:B8
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018B04A7715F73EB4D457E4D8EE3C3B0368F
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/eMAbD24Z-k8KEb0osVgrE9LeL7g.roa
Signing time: Fri 06 Oct 2023 11:02:44 +0000
ROA not before: Fri 06 Oct 2023 11:02:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 213.21.231.0/24 maxlen: 24
213.21.238.0/24 maxlen: 24
213.21.244.0/24 maxlen: 24
213.21.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:a7:71:5f:73:eb:4d:45:7e:4d:8e:e3:c3:b0:36:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Oct 6 11:02:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78c01b0f6e19fa4f0a11bd28b1582b13d2de2fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:7e:b8:ab:00:c7:5a:47:b4:9b:42:72:fd:
21:ce:be:2f:cb:52:36:e2:a2:e1:9c:64:c1:40:d5:
c0:08:61:c6:67:64:b4:96:9a:79:e8:f4:c2:4f:7b:
63:36:e7:11:0b:5d:13:dc:a7:72:5c:70:dd:7e:d8:
29:ac:d3:42:4d:b7:5d:20:9a:a7:ea:2e:6c:c9:19:
a2:7b:19:4b:21:93:f7:bf:60:2f:cc:b5:7a:3d:3a:
1f:e8:d6:6b:f1:af:f6:61:06:b9:44:5a:72:6e:f0:
99:0e:ba:68:f7:17:a5:8e:e9:0a:2f:d3:00:69:3d:
07:74:66:48:c2:d6:f9:0f:87:f6:b0:f1:97:82:f6:
7e:fd:e8:ca:79:dc:30:9c:4e:b1:be:5a:d2:4c:1b:
55:7c:09:05:21:c6:c9:8e:00:bb:92:89:d7:a9:9e:
3a:b8:76:fc:30:c1:9c:19:7c:0c:d9:ed:9a:d7:ec:
30:0c:61:f9:eb:e2:09:eb:bf:b3:30:92:6c:35:94:
fa:e6:2c:aa:14:60:e2:45:ad:52:63:11:b0:cf:22:
79:66:74:3e:c6:5c:3a:95:ed:6e:4b:db:be:28:6c:
bb:27:da:7e:b4:26:b6:10:0c:cd:d4:bd:3e:65:21:
fb:28:9a:63:c3:f0:9b:f7:19:b5:40:09:f5:51:c8:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C0:1B:0F:6E:19:FA:4F:0A:11:BD:28:B1:58:2B:13:D2:DE:2F:B8
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/eMAbD24Z-k8KEb0osVgrE9LeL7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.231.0/24
213.21.238.0/24
213.21.244.0/24
213.21.248.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3a:7a:42:ae:26:7e:83:d4:21:7f:36:6a:d7:b3:fd:12:6c:
93:b7:f0:77:7e:0f:70:ce:08:a8:28:00:0d:5c:91:c0:85:92:
af:f7:d3:c4:73:c7:71:6d:67:78:d8:c3:a6:24:f2:75:06:c0:
50:c4:63:51:4f:eb:4c:69:b8:4d:f2:1b:a8:f7:ce:84:5a:57:
69:3b:9d:51:36:db:5f:fd:1b:bd:e7:53:80:9b:9a:a4:14:c1:
fd:7b:e3:76:79:dd:cd:fa:c3:c6:b3:1b:26:66:7e:f0:16:71:
11:1e:df:c1:22:91:68:28:75:37:fb:df:bc:76:93:83:25:f1:
5e:5b:d4:c6:4d:3d:b4:5b:4b:80:78:8a:cb:70:1c:dd:84:7a:
48:3c:cc:4d:00:4b:84:2b:0e:3d:eb:1c:4c:e9:c9:b4:cf:09:
d3:da:8a:b7:8c:ca:35:80:8d:35:29:a2:48:71:cd:92:f3:20:
e4:72:73:bc:5c:36:14:a5:3a:3e:c6:00:86:74:1f:b5:e2:b4:
98:81:23:07:ff:ef:b0:cb:b2:8e:d6:3d:e5:bc:9c:d8:fd:db:
76:5c:f9:1f:9e:cf:7d:8c:28:ba:09:21:53:31:f8:49:ed:46:
9a:26:02:5c:54:f0:72:0c:03:b4:1f:7d:e6:41:4a:cb:54:bc:
67:10:16:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org