Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/fU-PFfVzPdj2Cf3hOg_VMByV6xg.roa
File: fU-PFfVzPdj2Cf3hOg_VMByV6xg.roa (raw, json)
Hash identifier: hTHYGk0Ux+c64WLp30rNhW0bxk+F+SIZaGyQBAuucyg=
Subject key identifier: 7D:4F:8F:15:F5:73:3D:D8:F6:09:FD:E1:3A:0F:D5:30:1C:95:EB:18
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01857039AD71C5748946AD4F9E1B5AC7E19B
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/fU-PFfVzPdj2Cf3hOg_VMByV6xg.roa
Signing time: Mon 02 Jan 2023 02:05:06 +0000
ROA not before: Mon 02 Jan 2023 02:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 213.21.230.0/24 maxlen: 24
213.21.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:ad:71:c5:74:89:46:ad:4f:9e:1b:5a:c7:e1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 2 02:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d4f8f15f5733dd8f609fde13a0fd5301c95eb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:6f:70:1a:5b:12:57:b3:6c:14:b0:c2:73:
5a:4e:51:62:0b:ec:3a:85:31:df:e0:ce:ca:20:b6:
55:4c:7e:38:ad:4b:a4:12:07:31:fa:12:f2:78:bf:
bf:17:4d:51:94:dd:82:c4:9d:2f:46:28:87:a5:d8:
cb:4d:27:a0:b8:8d:b0:ab:e3:84:3c:fd:5d:54:46:
8d:12:16:96:4a:de:2e:ce:85:36:9f:a0:0a:f2:ae:
89:07:d9:6f:b7:d4:61:7d:7d:8b:ca:20:53:31:de:
b8:f2:79:da:6e:ff:b4:42:77:d8:93:2f:63:ea:c5:
a0:24:c0:6f:02:c0:30:b9:a8:ff:58:2c:79:4b:23:
51:ed:53:9e:ab:00:8b:3c:d8:15:16:ee:37:43:4a:
64:4b:09:21:0c:1a:d5:01:f2:ec:71:b0:fe:0c:fb:
dc:11:78:a3:2b:f1:d4:7f:5e:2e:f8:56:1f:0d:34:
90:e0:b9:a7:84:2d:53:83:51:b7:57:fa:be:53:fe:
48:14:9a:5e:d7:6d:82:47:dc:be:e9:ef:7c:ef:8a:
24:5d:91:eb:2c:d3:15:aa:8d:e1:66:8e:52:65:0c:
2d:3e:b1:fd:ca:40:21:72:f3:2c:e8:6d:5d:15:c4:
50:3b:51:e6:67:02:8d:a8:8c:cc:3c:22:15:ce:22:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4F:8F:15:F5:73:3D:D8:F6:09:FD:E1:3A:0F:D5:30:1C:95:EB:18
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/fU-PFfVzPdj2Cf3hOg_VMByV6xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.230.0/24
213.21.234.0/24
Signature Algorithm: sha256WithRSAEncryption
04:74:a6:74:73:ab:3d:2f:6c:06:70:07:b5:79:c5:03:f4:ef:
e4:7d:70:ba:9d:3a:a2:e2:5f:71:49:c2:96:5d:17:80:34:04:
0b:4e:3a:c4:16:35:d5:4f:59:b7:67:dd:fa:8f:06:25:ce:f4:
b4:5e:4c:18:f2:e2:6a:f1:70:62:cb:17:5f:47:f6:18:f1:90:
6e:49:25:a2:ab:a7:cc:0a:1c:8f:d4:dc:fe:a7:08:90:6f:b7:
8e:9a:fe:2b:bf:a3:08:a3:de:a4:07:99:cf:6b:e9:57:f7:89:
85:55:7d:b7:db:97:3f:f8:3f:e0:6c:57:93:17:8b:eb:b7:8b:
02:65:d0:bd:db:34:ea:32:7d:9c:ad:12:fb:5c:d2:b5:fa:cf:
3e:24:f1:d7:e0:77:6f:18:99:ed:4a:54:3b:9e:f4:59:58:c7:
ea:a4:eb:66:4c:b3:d6:4c:f2:64:bc:3e:38:62:03:91:72:48:
48:e6:17:b3:27:f6:f9:f1:76:29:67:0a:e0:95:01:3e:64:fc:
cd:22:fe:8c:d4:6b:d3:ba:74:2f:87:a0:aa:f3:4a:00:48:ab:
fe:3c:e9:8c:7a:c0:cd:15:c5:39:dd:14:75:00:74:82:f9:bf:
f9:3b:06:f5:b0:fe:ae:75:01:95:c4:23:e3:75:4a:45:32:23:
12:f3:27:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwOa1xxXSJRq1Pnhtax+GbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjMwMTAyMDIwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDRmOGYxNWY1NzMzZGQ4ZjYwOWZkZTEzYTBmZDUzMDFjOTVlYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFVvcBpbElezbBSwwnNaTlFiC+w6
hTHf4M7KILZVTH44rUukEgcx+hLyeL+/F01RlN2CxJ0vRiiHpdjLTSeguI2wq+OE
PP1dVEaNEhaWSt4uzoU2n6AK8q6JB9lvt9RhfX2LyiBTMd648nnabv+0QnfYky9j
6sWgJMBvAsAwuaj/WCx5SyNR7VOeqwCLPNgVFu43Q0pkSwkhDBrVAfLscbD+DPvc
EXijK/HUf14u+FYfDTSQ4LmnhC1Tg1G3V/q+U/5IFJpe122CR9y+6e9874okXZHr
LNMVqo3hZo5SZQwtPrH9ykAhcvMs6G1dFcRQO1HmZwKNqIzMPCIVziKw8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH1PjxX1cz3Y9gn94ToP1TAclesYMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvZlUtUEZmVnpQZGoyQ2YzaE9nX1ZNQnlWNnhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1RXmAwQA
1RXqMA0GCSqGSIb3DQEBCwUAA4IBAQAEdKZ0c6s9L2wGcAe1ecUD9O/kfXC6nTqi
4l9xScKWXReANAQLTjrEFjXVT1m3Z936jwYlzvS0XkwY8uJq8XBiyxdfR/YY8ZBu
SSWiq6fMChyP1Nz+pwiQb7eOmv4rv6MIo96kB5nPa+lX94mFVX2325c/+D/gbFeT
F4vrt4sCZdC92zTqMn2crRL7XNK1+s8+JPHX4HdvGJntSlQ7nvRZWMfqpOtmTLPW
TPJkvD44YgORckhI5hezJ/b58XYpZwrglQE+ZPzNIv6M1GvTunQvh6Cq80oASKv+
POmMesDNFcU53RR1AHSC+b/5Owb1sP6udQGVxCPjdUpFMiMS8ydi
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:42 2024 by rpki-client on console-fra.rpki-client.org