Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/qnl97HzLJXM3dvnylXtEGQfLAYY.roa
File: qnl97HzLJXM3dvnylXtEGQfLAYY.roa (raw, json)
Hash identifier: k7TqDadE5+/Wbs5ERItZYAEnhIHSwJXTbnBHX9QdnOo=
Subject key identifier: AA:79:7D:EC:7C:CB:25:73:37:76:F9:F2:95:7B:44:19:07:CB:01:86
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0194125D1B1468436737B9D40D9944CBB71D
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/qnl97HzLJXM3dvnylXtEGQfLAYY.roa
Signing time: Sun 29 Dec 2024 12:21:19 +0000
ROA not before: Sun 29 Dec 2024 12:21:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215479
IP address blocks: 213.21.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:5d:1b:14:68:43:67:37:b9:d4:0d:99:44:cb:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 29 12:21:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa797dec7ccb25733776f9f2957b441907cb0186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:61:13:77:57:b6:8a:f1:d1:fc:a8:a1:02:69:
59:31:15:32:1d:46:c2:21:c2:f3:ff:fc:c4:7e:a6:
0f:1d:7f:74:d3:dc:4e:41:7b:c9:0e:f3:1c:4c:88:
d6:ec:2f:19:59:66:83:f4:e5:7d:ac:00:b4:03:6c:
6f:97:94:fe:7f:02:ca:e7:b9:cb:1a:dc:0d:bc:8b:
ab:9c:0c:f3:9a:9e:29:b2:fa:1e:c3:e7:9f:49:28:
33:94:ba:a5:51:ae:bc:6a:ad:5f:e0:4f:e2:f9:f5:
8e:0c:a4:8a:bf:e2:21:2e:8d:c2:a2:a7:1d:34:37:
57:22:5a:d6:70:23:74:1e:32:72:4b:4c:b4:cf:1e:
63:8e:1f:4f:9d:f9:2c:2e:4f:02:60:ae:b2:dd:71:
79:f0:10:55:e0:23:26:41:2b:4e:3c:25:dc:99:82:
a7:6e:47:fe:bd:ff:35:99:78:c8:2f:0b:5c:3b:b7:
4e:a3:ee:d2:37:15:ea:4a:bc:39:2d:94:87:0a:3e:
3e:f3:af:40:85:1d:71:61:50:37:0e:c9:36:9c:f9:
a8:cc:d2:4d:9c:b1:09:9c:df:f2:a5:a7:32:29:f6:
b6:ac:31:0e:40:ca:db:4e:7d:7c:57:14:3c:c3:8d:
30:df:65:5c:89:b2:40:30:83:91:f3:65:79:79:b2:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:79:7D:EC:7C:CB:25:73:37:76:F9:F2:95:7B:44:19:07:CB:01:86
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/qnl97HzLJXM3dvnylXtEGQfLAYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:08:ff:c6:0e:67:b3:a5:39:b5:4a:18:28:49:d0:cb:09:33:
d2:00:b0:6a:3a:8a:36:ab:ac:f4:ca:1e:19:04:9d:4c:f2:54:
7a:2c:49:27:39:44:87:73:72:e7:c8:98:7b:d9:24:be:95:6e:
42:d1:b1:b7:0e:4f:c8:88:3c:b3:6b:3c:e2:4c:56:08:39:f9:
7d:ba:90:7c:1d:77:eb:61:98:36:4d:56:d0:4a:16:87:06:d8:
bb:2d:66:92:2b:e3:55:81:4a:80:a8:09:95:d4:a4:2e:e5:7b:
e0:8d:21:44:e0:77:ea:26:0f:86:a2:61:61:dd:8a:9e:1d:2d:
f7:80:98:58:6b:ba:a3:73:93:cf:0a:4c:0f:68:15:33:1a:d8:
f5:25:59:35:d6:cf:ac:5e:04:0e:b0:76:c1:dc:25:6a:d5:ab:
7a:a4:b6:4d:8d:57:c7:f5:7b:ab:5d:78:c8:bb:49:79:e9:1f:
a7:3b:05:b7:f7:3e:a9:92:f8:56:d6:21:a2:14:43:8f:b6:b3:
4f:c8:8d:d7:85:28:8f:92:8e:25:e5:0a:2b:a6:e0:1b:0c:2f:
16:2a:b9:ad:25:5f:6e:67:53:1e:f2:33:2f:da:26:b9:55:6f:
a0:1b:44:45:ae:8c:64:30:c1:b1:05:43:c4:14:a5:e8:e1:f2:
57:db:85:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:46 2025 by rpki-client