Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/tn3u7m13WzTYFi3uu0J-muokdFE.roa
File: tn3u7m13WzTYFi3uu0J-muokdFE.roa (raw, json)
Hash identifier: CmaP3VnCl58zSTsH8pjPA3+uK7VhHOioflwc4Ifd2Bs=
Subject key identifier: B6:7D:EE:EE:6D:77:5B:34:D8:16:2D:EE:BB:42:7E:9A:EA:24:74:51
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0193872A110F28F0420F97ED1421F3BDCDF1
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/tn3u7m13WzTYFi3uu0J-muokdFE.roa
Signing time: Mon 02 Dec 2024 11:38:21 +0000
ROA not before: Mon 02 Dec 2024 11:38:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199785
IP address blocks: 213.21.236.0/24 maxlen: 24
213.21.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 11:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:2a:11:0f:28:f0:42:0f:97:ed:14:21:f3:bd:cd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 2 11:38:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b67deeee6d775b34d8162deebb427e9aea247451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:31:82:54:42:2a:41:c3:2b:77:87:4e:3e:
48:cf:b7:8d:cc:b7:81:9e:3a:7b:d4:43:e4:4c:85:
a2:de:f4:85:f1:3b:25:88:ee:74:02:75:9b:96:f4:
b0:0a:b9:6d:d1:d4:18:9e:2a:f9:7a:a9:5c:77:40:
ad:b0:a4:f6:60:ec:cf:cf:b5:b3:d1:25:23:e1:bd:
4a:b1:42:65:99:98:1f:78:3a:70:d4:8d:19:a9:4e:
a0:d8:93:2d:80:69:60:3f:7d:1f:31:4b:59:c8:60:
ed:b8:b7:1e:c8:86:bf:2d:5b:01:17:43:ad:4a:f1:
e4:76:d7:f5:93:a0:04:69:30:f1:4f:8f:f9:95:30:
9b:dd:cf:4e:84:ee:1f:71:69:88:60:a2:7c:a9:41:
3e:a6:19:f6:3f:67:eb:de:d4:96:6a:77:fb:0e:b0:
2d:3a:98:eb:b5:47:d4:cf:c9:f2:49:66:a6:3b:47:
a2:e3:5a:da:53:33:68:90:d0:27:91:ab:fe:af:83:
49:31:4c:c9:48:23:52:3f:da:48:0d:42:63:ab:72:
d9:da:34:0c:82:14:b3:6b:26:7a:c3:b3:19:f3:9a:
76:90:90:f8:dc:14:05:0f:49:9e:16:ca:71:c7:b5:
d1:a9:e4:05:3d:7c:d4:c7:c7:22:3c:79:90:61:82:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7D:EE:EE:6D:77:5B:34:D8:16:2D:EE:BB:42:7E:9A:EA:24:74:51
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/tn3u7m13WzTYFi3uu0J-muokdFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.236.0/24
213.21.253.0/24
Signature Algorithm: sha256WithRSAEncryption
13:23:0e:d7:77:4b:61:0b:70:2d:c5:f6:72:85:2f:7d:94:08:
49:55:67:55:81:2c:6f:cf:fe:0d:63:c2:cd:86:04:d1:3d:e0:
22:86:2a:8d:ec:57:3f:67:20:8f:9f:16:5d:e0:7b:99:0e:8a:
84:9d:f2:a1:c6:a4:09:69:7e:bc:fc:34:2c:f0:a6:33:cf:e9:
2f:8a:dd:f2:3b:c2:9f:55:ed:3e:46:67:62:0a:60:65:41:10:
c2:14:d9:27:6c:81:89:96:e4:bd:63:f2:d4:63:14:86:a1:87:
0e:22:3c:a5:c4:79:d2:0d:05:58:31:e4:fa:d3:8e:0c:fd:8d:
04:2a:18:91:73:c5:54:87:bb:f9:69:a9:0d:8c:be:ee:78:b7:
bf:d5:92:7c:0a:0f:69:42:0a:d7:de:5b:c9:14:be:db:08:b9:
55:3a:28:e6:9c:32:c6:66:bf:68:2a:c3:3d:26:3d:87:43:53:
a3:7f:e8:5b:18:06:18:40:76:a7:54:9f:31:8a:c0:ac:d8:7b:
d5:f9:c2:c1:13:95:8d:08:b7:47:ef:eb:b1:9c:f8:a0:c7:3d:
41:c4:27:89:21:52:44:10:ae:20:2c:08:36:f1:1f:f6:5e:27:
e3:e4:8b:a6:39:23:1f:d6:54:f6:75:c7:a6:e4:7d:eb:10:8a:
aa:28:ab:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZOHKhEPKPBCD5ftFCHzvc3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjQxMjAyMTEzODIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjdkZWVlZTZkNzc1YjM0ZDgxNjJkZWViYjQyN2U5YWVhMjQ3NDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAMxglRCKkHDK3eHTj5Iz7eNzLeB
njp71EPkTIWi3vSF8TsliO50AnWblvSwCrlt0dQYnir5eqlcd0CtsKT2YOzPz7Wz
0SUj4b1KsUJlmZgfeDpw1I0ZqU6g2JMtgGlgP30fMUtZyGDtuLceyIa/LVsBF0Ot
SvHkdtf1k6AEaTDxT4/5lTCb3c9OhO4fcWmIYKJ8qUE+phn2P2fr3tSWanf7DrAt
OpjrtUfUz8nySWamO0ei41raUzNokNAnkav+r4NJMUzJSCNSP9pIDUJjq3LZ2jQM
ghSzayZ6w7MZ85p2kJD43BQFD0meFspxx7XRqeQFPXzUx8ciPHmQYYKYcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLZ97u5td1s02BYt7rtCfprqJHRRMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvdG4zdTdtMTNXelRZRmkzdXUwSi1tdW9rZEZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1RXsAwQA
1RX9MA0GCSqGSIb3DQEBCwUAA4IBAQATIw7Xd0thC3AtxfZyhS99lAhJVWdVgSxv
z/4NY8LNhgTRPeAihiqN7Fc/ZyCPnxZd4HuZDoqEnfKhxqQJaX68/DQs8KYzz+kv
it3yO8KfVe0+RmdiCmBlQRDCFNknbIGJluS9Y/LUYxSGoYcOIjylxHnSDQVYMeT6
044M/Y0EKhiRc8VUh7v5aakNjL7ueLe/1ZJ8Cg9pQgrX3lvJFL7bCLlVOijmnDLG
Zr9oKsM9Jj2HQ1Ojf+hbGAYYQHanVJ8xisCs2HvV+cLBE5WNCLdH7+uxnPigxz1B
xCeJIVJEEK4gLAg28R/2Xifj5IumOSMf1lT2dcem5H3rEIqqKKuE
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:49 2025 by rpki-client