Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/jTKFjdP6TjvPPtbvMCoAo3GiT_s.roa
File: jTKFjdP6TjvPPtbvMCoAo3GiT_s.roa (raw, json)
Hash identifier: LC6UwRBsNbK+i4+ojpMuSZ8IP+ZywSTy03Ihnu0COCc=
Subject key identifier: 8D:32:85:8D:D3:FA:4E:3B:CF:3E:D6:EF:30:2A:00:A3:71:A2:4F:FB
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01857039A9E0C836B775D55AEE91DA2015D1
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/jTKFjdP6TjvPPtbvMCoAo3GiT_s.roa
Signing time: Mon 02 Jan 2023 02:05:05 +0000
ROA not before: Mon 02 Jan 2023 02:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 213.21.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 14:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a9:e0:c8:36:b7:75:d5:5a:ee:91:da:20:15:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 2 02:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d32858dd3fa4e3bcf3ed6ef302a00a371a24ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:c4:0b:bf:43:ee:b8:14:60:c7:23:a0:5a:
ce:20:16:ed:b7:a0:7e:fd:26:ab:c8:13:5f:b1:48:
d9:3a:11:b8:d4:d7:85:d9:5e:e6:83:e3:2d:95:7e:
0c:fd:d4:16:fa:0c:3e:14:b7:be:be:91:12:70:6f:
f4:ba:49:84:4b:c3:e7:db:cd:0e:0c:7e:d4:ab:60:
93:04:b0:5c:66:08:5f:8c:8c:15:d2:27:ae:48:a9:
73:c9:fe:04:7c:54:45:70:12:64:cc:a9:94:12:2a:
66:53:0c:13:3c:e9:16:57:2a:56:ef:d3:62:4d:c4:
bc:48:48:72:62:aa:8e:22:db:37:31:10:f2:75:c9:
cd:e9:57:ba:6a:8f:89:b7:b4:c8:3b:fb:0d:3c:7f:
b5:85:c3:d6:4a:81:6d:e0:1c:87:7c:a7:56:e1:7d:
55:3c:04:2a:47:01:d1:a6:d2:a7:5e:c1:e7:81:25:
83:65:61:16:32:f2:a8:f2:0d:58:3e:4f:13:db:bf:
7e:6c:61:27:05:ed:f1:67:ed:0f:ee:eb:db:e6:67:
e1:0d:ff:c1:46:4f:08:00:7a:83:b5:5e:b6:80:e2:
fe:21:99:1c:73:07:29:22:a0:28:0a:f6:a5:0e:19:
dd:eb:be:31:f0:27:db:ce:1f:58:94:66:dd:97:b1:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:32:85:8D:D3:FA:4E:3B:CF:3E:D6:EF:30:2A:00:A3:71:A2:4F:FB
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/jTKFjdP6TjvPPtbvMCoAo3GiT_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.252.0/24
Signature Algorithm: sha256WithRSAEncryption
97:61:03:07:40:9e:9d:dc:38:18:3d:22:60:5d:86:46:fe:ba:
7d:b4:a0:d4:cf:48:0e:7d:31:a4:7b:6f:20:57:9e:aa:e4:24:
da:8e:89:54:4c:1c:b4:6f:51:7a:ee:59:4d:1d:fd:16:91:61:
f5:60:19:b7:7d:a5:62:ca:6e:18:76:70:19:3e:fa:2c:cd:98:
65:e6:90:01:01:24:66:ee:5e:9c:a9:7d:fe:89:a8:59:66:3b:
d1:e0:9e:8f:a3:e8:92:1e:57:30:c5:c3:3a:7f:a0:e6:4e:b9:
7e:b2:86:40:cc:9c:eb:cb:06:ae:28:2e:47:5a:89:74:7c:63:
20:0f:e4:9e:88:da:ca:57:e4:11:11:e9:e9:76:22:ac:31:78:
dd:d3:56:c8:12:e1:c1:0a:4a:b0:97:dc:38:91:e9:48:1a:a4:
52:eb:01:9d:38:12:f2:80:6f:e3:4b:37:98:bf:46:ce:c9:0a:
89:29:99:9c:8d:77:58:f5:3e:99:a4:cd:9c:68:e6:5a:05:b0:
eb:47:10:2e:21:4f:ab:7f:1e:c7:06:b1:c1:13:cf:2d:99:92:
88:e8:31:61:46:1b:0d:3d:1f:1d:c2:2c:6c:a6:76:1a:43:b0:
35:6e:1f:ed:9e:51:25:b8:9d:45:42:27:7a:53:9f:1b:52:47:
32:fc:db:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org