Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/iCr5zkbjGx18yZMUXdt28JHgniU.roa
File: iCr5zkbjGx18yZMUXdt28JHgniU.roa (raw, json)
Hash identifier: n/gH0mp4mU4DI05RIazorJF0nGJuPTH5celbY/E6KrY=
Subject key identifier: 88:2A:F9:CE:46:E3:1B:1D:7C:C9:93:14:5D:DB:76:F0:91:E0:9E:25
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0186548F738E50586467E98989802F665EE2
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/iCr5zkbjGx18yZMUXdt28JHgniU.roa
Signing time: Wed 15 Feb 2023 10:12:12 +0000
ROA not before: Wed 15 Feb 2023 10:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.236.0/24 maxlen: 24
213.21.240.0/24 maxlen: 24
213.21.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:8f:73:8e:50:58:64:67:e9:89:89:80:2f:66:5e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Feb 15 10:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=882af9ce46e31b1d7cc993145ddb76f091e09e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:75:62:86:81:7e:97:2b:bd:b1:e6:e6:58:
07:e6:7d:c5:6c:e2:1a:44:4e:a7:d2:52:dd:91:3d:
86:40:53:1f:62:1a:b6:50:eb:72:ae:f5:89:41:b1:
47:d9:01:7c:50:97:38:a3:da:29:f2:10:bc:6c:fa:
92:cf:2a:e0:45:5f:48:c8:8b:7a:97:58:d0:19:f0:
f6:e7:1a:fe:bf:53:9a:76:41:b9:05:f0:7d:6e:c5:
be:f1:5d:34:60:2a:ae:8f:be:1d:a9:a7:dd:59:75:
69:c7:8e:cc:03:0a:5c:9a:77:0b:36:25:4a:8c:ff:
5f:35:6a:48:36:20:48:75:ea:dd:b0:6d:f1:0c:54:
d5:83:41:39:2a:9c:19:78:6b:c1:78:ed:75:a3:d8:
0d:9a:50:04:5e:0c:ce:82:9c:7a:3e:f1:87:a6:bf:
6b:32:6e:f3:5a:b1:f8:00:d2:07:e7:33:bc:af:51:
0b:9e:86:f5:93:00:78:4d:96:3a:18:b2:8e:bf:5e:
3f:43:37:7e:32:1b:97:a9:fb:a6:5b:78:6d:63:b7:
48:b2:e5:8f:08:2a:e6:79:9f:d0:a1:7e:93:e6:99:
7b:95:42:d4:e1:c2:ab:40:34:7b:b0:e4:0d:4d:e3:
57:7f:0b:89:4a:fd:01:fc:25:9e:75:fb:30:da:c1:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2A:F9:CE:46:E3:1B:1D:7C:C9:93:14:5D:DB:76:F0:91:E0:9E:25
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/iCr5zkbjGx18yZMUXdt28JHgniU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.236.0/24
213.21.240.0/23
Signature Algorithm: sha256WithRSAEncryption
84:81:c8:83:92:2b:1e:d2:f6:87:1b:7a:39:d3:36:1b:9a:13:
54:38:09:09:09:39:a6:3e:c1:8e:84:09:81:50:56:4d:f9:db:
6d:63:dc:94:9a:ba:50:4b:09:cb:8d:59:32:08:74:8b:e3:7a:
ca:07:d2:17:4e:f2:4a:e0:75:cd:60:5c:90:7a:03:d8:08:05:
78:9a:a7:87:ec:07:b8:db:94:48:74:13:2b:43:f9:35:14:85:
30:a2:d7:5e:62:aa:7f:2e:8b:9c:1c:ca:e1:14:0c:1b:d9:86:
23:d8:66:47:60:c4:c7:7c:68:a8:42:a7:f8:45:50:a9:63:49:
ff:b8:23:a3:6e:f8:52:57:64:dc:25:69:d1:6c:57:02:72:11:
8c:ee:bf:ed:49:69:85:07:e9:e1:3c:85:42:3e:b8:7a:b2:86:
ab:e9:93:db:9e:8d:05:38:dc:dd:ce:ce:1d:ae:92:22:fe:4e:
b9:c8:eb:95:ff:d3:89:6b:2a:52:fd:e1:c3:45:a5:35:88:c5:
08:a8:fb:2c:fa:96:51:d8:8d:19:c0:bc:3e:a3:67:b6:c6:98:
2a:35:ff:e9:3a:f9:8e:fd:30:4f:f7:59:da:d5:53:72:d6:b7:
65:0d:7a:e0:0e:51:aa:62:b8:80:8b:2a:6d:1d:dc:67:a8:99:
b6:95:c3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:20 2023 by rpki-client on console-fra.rpki-client.org