Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/n08LKLdoP-3xe83PUw_43kBZ3Mg.roa
File: n08LKLdoP-3xe83PUw_43kBZ3Mg.roa (raw, json)
Hash identifier: yTclgGCGmY0JE/D7RodtAz2MqDYln+BAc+RwCL3ba48=
Subject key identifier: 9F:4F:0B:28:B7:68:3F:ED:F1:7B:CD:CF:53:0F:F8:DE:40:59:DC:C8
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018AB7B96D44A923CE42F228DB1A1CCB8EDF
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/n08LKLdoP-3xe83PUw_43kBZ3Mg.roa
Signing time: Thu 21 Sep 2023 12:31:37 +0000
ROA not before: Thu 21 Sep 2023 12:31:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 213.21.231.0/24 maxlen: 24
213.21.238.0/24 maxlen: 24
213.21.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:b9:6d:44:a9:23:ce:42:f2:28:db:1a:1c:cb:8e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Sep 21 12:31:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f4f0b28b7683fedf17bcdcf530ff8de4059dcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3d:48:a3:31:25:9a:66:56:d6:b8:14:e4:ce:
3d:04:4f:81:4f:c5:e9:24:aa:8f:53:ff:73:95:ed:
41:c2:8b:03:46:c5:b3:11:0d:b9:1f:be:f1:2e:21:
0e:6d:df:85:dc:5d:e8:06:65:15:c1:ac:04:8e:21:
a7:4d:d0:b7:01:30:02:fe:fe:40:e0:34:8e:d2:e2:
09:ec:78:42:a2:35:78:ef:e2:1c:2d:19:9e:17:44:
2b:80:86:ff:ab:35:b5:af:21:f0:7a:69:ad:60:84:
d2:09:fc:d8:51:4f:de:f3:14:44:05:de:c5:f9:a3:
f8:d1:a1:59:47:c5:36:97:4a:27:65:34:e1:5f:40:
69:cd:08:8f:e8:ad:c2:66:cf:25:e8:0a:7c:bc:7c:
b9:a8:04:dd:b5:fa:52:e8:5b:9f:af:d7:0e:21:4c:
c7:79:52:b4:57:29:a7:ff:98:d0:84:67:eb:51:9b:
a9:98:7b:ed:98:6f:33:e5:9e:bf:b5:4a:09:da:df:
05:37:42:4a:26:f8:86:27:84:f3:14:0f:43:24:1e:
87:06:62:80:37:34:5f:f9:8a:f6:66:ac:36:22:7b:
42:22:d7:ea:fc:cd:bc:8e:45:1f:b1:b1:0a:d9:98:
02:1e:4a:68:a5:ec:ce:cd:31:8d:82:6c:3c:c7:13:
d4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4F:0B:28:B7:68:3F:ED:F1:7B:CD:CF:53:0F:F8:DE:40:59:DC:C8
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/n08LKLdoP-3xe83PUw_43kBZ3Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.231.0/24
213.21.238.0/24
213.21.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5b:33:64:30:36:63:f3:a6:b4:7a:4e:4e:1e:80:78:fe:3f:
94:9f:68:38:53:23:01:55:88:90:34:e8:18:82:e3:32:74:6f:
4e:36:4b:6e:c5:3f:1c:61:fd:8e:c2:6a:75:dd:9c:17:0b:e4:
3b:f3:b7:db:f9:bd:27:06:a2:22:14:b7:eb:5b:9c:ab:16:f4:
5e:ae:99:1e:df:de:bd:2f:d5:ad:8e:12:87:6e:9d:5a:d6:f4:
77:d9:6a:f9:da:26:97:95:00:67:38:ac:89:7c:df:eb:98:30:
13:15:b5:a7:28:32:57:47:9e:3c:6d:37:d4:4a:3e:be:e6:f1:
dc:ce:2c:21:b8:76:91:17:5f:86:5a:e7:81:90:e5:7f:f2:8b:
66:ae:09:c3:44:d7:51:c5:dd:9c:f5:28:8e:cf:88:93:02:eb:
a3:e1:ea:5b:9b:cb:56:df:18:fa:f9:53:0e:af:ea:bf:c8:e7:
63:60:cb:c1:b0:16:e2:8f:ac:a0:15:81:96:39:5a:77:a4:51:
50:e9:69:34:8d:72:25:1f:2b:98:03:5c:ae:53:f8:2f:4b:93:
92:fc:83:a0:bd:a9:3a:2b:29:7b:fb:fd:2f:b5:91:0d:08:0e:
5c:3c:64:6a:52:43:5b:95:53:0f:54:20:31:df:70:80:96:a3:
21:05:cc:47
-----BEGIN CERTIFICATE-----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 at Fri Oct 6 11:44:34 2023 by rpki-client on console-ams.rpki-client.org