Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/l18FMmjmk5F3VHO3LlLAqD98s1Y.roa
File: l18FMmjmk5F3VHO3LlLAqD98s1Y.roa (raw, json)
Hash identifier: t1jSYaBJtmimc5IyoUxzR2Vygsase0ofbvz6f3TADyg=
Subject key identifier: 97:5F:05:32:68:E6:93:91:77:54:73:B7:2E:52:C0:A8:3F:7C:B3:56
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018CC4934DDA3DAE43C884EBD78826851FED
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/l18FMmjmk5F3VHO3LlLAqD98s1Y.roa
Signing time: Mon 01 Jan 2024 10:30:37 +0000
ROA not before: Mon 01 Jan 2024 10:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 213.21.237.0/24 maxlen: 24
213.21.236.0/24 maxlen: 24
213.21.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 12:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4d:da:3d:ae:43:c8:84:eb:d7:88:26:85:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 10:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=975f053268e69391775473b72e52c0a83f7cb356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:32:b8:f0:ef:89:88:db:28:b3:3f:36:6a:
fc:3f:c4:ea:71:dd:74:21:06:a0:0a:85:59:d2:07:
c2:ee:ee:56:69:b3:f8:fa:53:71:a9:b0:c5:31:b8:
17:77:26:2f:b9:ef:34:65:a9:eb:d3:04:d4:82:f4:
04:2a:04:94:a6:25:5e:ca:98:d2:58:a3:3b:df:5e:
08:b7:a6:d7:b6:9b:3f:4e:ff:1f:e1:7b:b9:05:4b:
84:9a:af:2b:d0:da:63:c1:73:54:0c:66:d6:81:5d:
37:12:47:66:f9:a0:14:84:0f:55:40:15:c1:31:99:
2f:b0:32:5d:a9:25:51:a3:11:42:15:42:01:cf:1f:
86:3c:58:34:b3:a7:6f:90:50:82:43:b0:bd:c8:ba:
1c:b3:57:c3:29:d5:57:97:46:b8:bb:92:96:29:3c:
f6:c6:1f:6f:26:e5:bc:d6:01:f2:8e:17:0e:71:13:
3b:49:c9:1c:01:80:69:89:16:5c:d7:d6:35:d5:a0:
6c:4a:9c:f3:c3:b1:0b:e4:f3:c3:69:5a:ed:67:e4:
eb:5a:71:4d:e6:c6:fc:f1:f8:3c:ec:78:26:7a:e2:
88:ac:6e:02:6e:af:16:4d:c1:41:3d:c7:90:92:4a:
3c:75:50:1c:3e:3f:98:d8:c3:e2:76:75:ed:cb:7e:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5F:05:32:68:E6:93:91:77:54:73:B7:2E:52:C0:A8:3F:7C:B3:56
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/l18FMmjmk5F3VHO3LlLAqD98s1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.236.0/23
213.21.245.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7d:9b:8c:cb:27:94:a1:dd:9d:11:d3:b2:c7:2a:e8:40:d0:
be:e6:44:92:84:a5:89:18:c9:99:17:4b:eb:9a:9f:25:8b:8b:
c0:98:7c:07:28:fb:ef:6b:50:73:b5:c1:1c:e8:f8:ba:14:33:
2e:90:26:5e:4d:03:2b:b7:69:b1:00:ed:e3:3d:32:ee:e7:ad:
3f:ce:78:49:8c:08:df:51:db:bd:60:4f:64:6b:51:8d:20:fc:
64:4c:dc:a3:56:81:a1:b1:8d:89:4d:da:31:94:a5:ac:1c:74:
7a:f2:88:a4:7b:ff:89:cc:24:94:69:ff:84:16:21:f9:93:49:
08:2d:de:7e:88:ba:06:f5:2f:21:ed:db:07:39:fb:52:14:72:
be:95:a7:a3:e4:4f:2f:36:cd:f1:c5:2e:00:2b:64:8c:db:b3:
87:d3:2b:b3:37:91:2b:49:d9:90:f5:5d:d7:d2:0a:90:3c:db:
c9:b8:f8:88:1d:b1:7e:0e:fc:83:7f:cb:93:93:f5:ba:ef:b3:
cd:94:e6:21:bb:3c:3e:32:b5:ac:04:08:40:9e:38:88:33:12:
cf:12:97:fd:14:5a:11:d9:5e:b8:ab:84:a4:d6:cb:05:90:a1:
77:d9:f0:ea:89:6d:8f:8f:1a:a1:6e:81:28:5c:2f:88:f6:02:
98:24:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org