Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/joI2g15maA5zKSyf2GU7F0Ockt4.roa
File: joI2g15maA5zKSyf2GU7F0Ockt4.roa (raw, json)
Hash identifier: z9zhRTATk27S+1a/Oj/mNWfTa7Ab7FESNi1QlP2TXtU=
Subject key identifier: 8E:82:36:83:5E:66:68:0E:73:29:2C:9F:D8:65:3B:17:43:9C:92:DE
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0190E3E306413DA90A0A62F12894533B413F
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/joI2g15maA5zKSyf2GU7F0Ockt4.roa
Signing time: Wed 24 Jul 2024 08:37:04 +0000
ROA not before: Wed 24 Jul 2024 08:37:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 213.21.232.0/24 maxlen: 24
213.21.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 07:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e3:e3:06:41:3d:a9:0a:0a:62:f1:28:94:53:3b:41:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jul 24 08:37:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e8236835e66680e73292c9fd8653b17439c92de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:7e:2b:99:0b:0f:22:0d:44:4c:7b:2c:02:
78:80:bd:f3:a8:a9:79:3d:52:39:d3:d4:b4:29:91:
8b:66:98:fc:a9:9f:1c:1a:4f:d2:4e:40:a2:fa:5b:
b7:5f:1d:0d:8f:4c:4a:17:a6:22:16:1a:03:e3:ba:
96:33:a3:46:39:a2:c4:5c:3f:39:eb:ed:b7:17:5e:
a9:de:38:1e:dc:33:26:3d:43:a3:46:cc:83:16:86:
11:7e:51:49:1c:c9:9d:71:9f:2e:a0:35:2c:61:9b:
ab:65:d5:43:d2:37:e6:32:de:82:4f:eb:1e:c9:c2:
94:25:6a:02:a7:35:3f:05:18:49:a2:b1:9c:64:df:
5a:0c:22:b9:40:48:e8:d3:2a:9f:55:0b:f5:7d:c7:
8c:3e:69:79:4f:5b:14:f3:c2:ef:52:56:54:26:bf:
d0:02:3e:71:43:c9:57:3e:93:ed:3a:bd:bd:6c:2e:
fe:e3:d2:9e:ab:23:15:44:0c:79:79:00:5c:33:b3:
0a:9c:f4:83:f9:81:12:08:69:7e:2b:2a:6a:f1:3c:
3a:be:ec:e6:1b:c8:cb:1e:57:eb:78:ae:cc:09:dd:
cc:11:d3:b9:b7:5f:51:8f:91:26:dd:76:88:e6:6c:
6a:af:fe:31:ea:40:52:08:c6:6b:97:1a:d2:bd:f4:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:82:36:83:5E:66:68:0E:73:29:2C:9F:D8:65:3B:17:43:9C:92:DE
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/joI2g15maA5zKSyf2GU7F0Ockt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.232.0/24
213.21.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:3e:ba:da:b6:3a:e0:c0:f3:b9:e6:a9:e1:61:1d:6a:c6:39:
bb:69:e0:08:66:87:4f:90:84:f4:93:f0:fe:be:4c:66:bd:e1:
73:1e:a5:51:8a:d6:7f:39:0c:9c:dc:29:36:60:c6:78:33:1f:
5f:09:8e:89:70:3e:9f:62:c1:dc:31:2d:71:61:ca:81:59:3d:
4d:58:1a:ca:73:93:7f:b9:4f:53:e7:50:10:02:bd:93:eb:f6:
64:cb:8e:02:99:52:4b:12:68:d9:71:b9:72:47:b8:a0:11:74:
41:11:fa:5d:62:b8:29:f7:f4:58:b5:e5:72:42:09:a7:b4:cb:
13:0e:6d:f3:8c:58:73:0d:68:a8:8d:92:e3:da:d0:38:67:26:
50:a4:46:39:1f:d7:e7:6c:35:d1:fa:b5:2e:13:52:47:5b:04:
2f:a4:f6:80:17:8b:69:e2:6f:10:46:62:0e:91:fc:3b:33:d8:
be:9f:03:3a:c2:86:37:6d:e3:3b:6e:08:b7:e3:eb:97:7d:86:
0b:11:6c:4e:9f:d1:27:3f:2d:e4:37:5e:3f:5d:e5:51:ee:21:
8c:eb:f2:2f:46:c7:1a:be:61:0e:f5:a3:39:81:31:a1:fe:88:
44:de:42:11:c5:d2:ac:0f:b1:fb:08:a0:ab:11:af:38:e4:02:
39:e3:c5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 10:04:39 2024 by rpki-client on console-ams.rpki-client.org