Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/nbCbzJ4UQMNFjeED7IFRyRYZPYE.roa
File: nbCbzJ4UQMNFjeED7IFRyRYZPYE.roa (raw, json)
Hash identifier: oPpDU9IubAvZckUeIBZolH+DlvzIEpI1YCtiaxYrkbs=
Subject key identifier: 9D:B0:9B:CC:9E:14:40:C3:45:8D:E1:03:EC:81:51:C9:16:19:3D:81
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01857039AC0C75DAB7998FD60010CCEC09C6
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/nbCbzJ4UQMNFjeED7IFRyRYZPYE.roa
Signing time: Mon 02 Jan 2023 02:05:05 +0000
ROA not before: Mon 02 Jan 2023 02:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32181
IP address blocks: 213.21.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 14:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:ac:0c:75:da:b7:99:8f:d6:00:10:cc:ec:09:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 2 02:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db09bcc9e1440c3458de103ec8151c916193d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:77:8a:f6:74:67:72:03:81:a0:dd:34:2a:42:
87:9d:ae:bd:49:f9:4e:c9:07:3d:13:ee:80:f0:cc:
db:0f:7a:b6:98:4d:bd:24:a5:96:26:ec:0d:e9:dd:
3b:69:c4:1e:e1:9d:0d:5e:d0:05:8d:6f:a7:97:5b:
57:80:3c:2b:80:b0:95:ce:f7:81:cc:73:d3:19:5a:
f1:c6:9e:ea:d7:b2:b1:0d:31:57:f1:1b:29:65:e5:
0c:6b:dc:1d:1a:20:14:eb:5c:9a:cc:08:57:cb:0f:
0e:de:e1:b6:70:6d:c5:c2:47:64:84:30:eb:f6:55:
cd:78:cb:7f:d4:29:0f:5a:4b:97:c2:cd:c6:79:8f:
6c:ea:8d:f1:d2:d9:8f:f2:98:10:f2:70:e6:14:a4:
91:e2:19:9e:b1:df:26:ac:ea:e9:fb:10:6f:8d:88:
9a:34:13:1f:d4:51:3c:66:e7:82:0c:e2:06:ce:ff:
56:58:0c:0e:a4:2f:47:d5:58:44:f8:92:a3:d2:83:
ae:63:fc:95:df:bc:ab:b2:f0:71:98:10:02:44:54:
a4:51:24:fa:d0:2e:1b:b8:17:86:6e:54:7a:47:2a:
70:1f:ab:b6:28:1e:fd:ce:63:a8:19:33:ad:7a:63:
af:0c:5f:1a:6e:91:86:df:fc:b3:0e:da:96:0e:52:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B0:9B:CC:9E:14:40:C3:45:8D:E1:03:EC:81:51:C9:16:19:3D:81
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/nbCbzJ4UQMNFjeED7IFRyRYZPYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.235.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e8:4b:96:12:b1:7d:d3:86:a4:62:18:60:97:d2:10:bc:e8:
69:71:60:66:07:bd:be:97:d9:bf:81:6f:00:aa:8e:b6:65:91:
d7:ce:49:90:ba:85:c4:c0:79:98:ae:30:ad:a4:3d:98:cb:ca:
8c:d3:f1:22:84:81:6a:11:de:70:5a:8a:2a:56:e0:c2:49:79:
df:bd:a7:83:6c:a8:63:b8:59:bc:fc:4f:d5:b7:bc:c1:8c:db:
7f:17:a0:05:4e:06:0b:3e:21:4a:e6:3c:fb:33:07:53:5d:bc:
89:81:1a:12:ac:a5:24:12:26:39:1f:54:da:3e:92:05:f8:ed:
af:2d:9c:7a:6f:fc:99:c3:c1:d4:98:06:59:10:b8:c3:6a:a0:
78:c8:29:e4:03:16:5f:82:d2:b0:c7:ad:92:be:eb:f9:e1:ad:
65:7b:79:e9:e2:12:56:e8:c9:1a:5f:45:b0:aa:f3:14:2c:cf:
23:fa:61:48:1b:0f:d4:b3:57:06:69:73:b7:c3:ab:d9:13:a4:
3f:d7:29:40:0c:22:ed:5f:6b:23:2d:72:ed:39:81:9c:54:2b:
f0:0b:a7:74:30:29:6a:78:2c:7d:87:8d:6d:61:ed:66:f7:5a:
e2:f2:0a:a0:cc:22:71:25:6b:22:ef:58:b4:25:ea:4b:ef:3b:
73:48:9d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org