Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/u7dqYLQXw-7Lh7xl19HZaFP5ggc.roa
File: u7dqYLQXw-7Lh7xl19HZaFP5ggc.roa (raw, json)
Hash identifier: tCAHN295YZRelkv7dOzN/yQuSAvvuKlRRhkR9l/PPcI=
Subject key identifier: BB:B7:6A:60:B4:17:C3:EE:CB:87:BC:65:D7:D1:D9:68:53:F9:82:07
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0193BA900B3B2BCCA8FE1C16547A07E09F1B
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/u7dqYLQXw-7Lh7xl19HZaFP5ggc.roa
Signing time: Thu 12 Dec 2024 11:10:22 +0000
ROA not before: Thu 12 Dec 2024 11:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213877
IP address blocks: 213.21.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:90:0b:3b:2b:cc:a8:fe:1c:16:54:7a:07:e0:9f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Dec 12 11:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbb76a60b417c3eecb87bc65d7d1d96853f98207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:85:66:dd:a2:52:42:ed:21:c3:26:41:44:
e6:80:b3:c1:ad:03:a9:39:20:cc:58:ca:68:3c:82:
51:41:02:2d:ee:92:ae:31:7a:b6:2d:84:41:89:52:
9e:44:9b:02:b7:8b:7e:e6:6b:47:b0:89:e4:90:2e:
8b:e3:44:53:96:79:e5:be:6d:6c:64:1c:e0:4c:ae:
3b:56:f1:1c:1e:5d:d7:0a:ae:32:f8:84:23:8a:d2:
60:71:d3:36:82:21:b9:88:de:09:38:ac:eb:89:0b:
47:e1:b0:b1:d0:0d:1e:35:9e:56:bc:a0:98:3b:02:
09:3a:b1:ef:69:f5:69:18:81:38:f1:69:6a:f3:5b:
a5:26:2f:0f:db:29:05:6f:fd:06:86:5b:6d:a5:a0:
51:61:1a:78:25:ec:2c:31:16:16:f0:5c:6c:bd:4a:
6e:59:df:82:dc:b1:b3:7e:e3:df:c5:02:0c:5e:72:
26:64:7c:db:c1:51:62:04:32:56:7f:89:c5:fa:98:
54:1b:04:04:a4:81:1f:cf:ba:80:18:29:81:29:92:
07:86:4c:16:a7:b6:75:79:60:67:25:61:3d:a2:4c:
9f:37:4a:60:89:15:83:06:c8:84:7c:82:28:ef:7a:
d9:22:ea:22:80:50:7c:1d:b0:5f:2d:72:01:e5:08:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B7:6A:60:B4:17:C3:EE:CB:87:BC:65:D7:D1:D9:68:53:F9:82:07
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/u7dqYLQXw-7Lh7xl19HZaFP5ggc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.241.0/24
Signature Algorithm: sha256WithRSAEncryption
40:82:21:22:ee:02:1e:03:9c:19:3a:7d:fa:cc:0b:ac:07:9e:
bd:1b:73:b8:c3:95:ac:76:ad:c7:9d:ea:eb:1a:13:6c:4c:fd:
cb:cb:f7:35:0d:1a:ed:92:b9:1f:5b:31:18:2a:cd:88:89:07:
97:54:ef:c3:f6:21:0a:7f:9c:72:f0:04:1f:71:4e:fb:0e:4c:
e5:4e:3c:1a:b1:1e:53:6f:fa:d9:8e:30:2e:83:26:34:53:1a:
c0:32:59:9c:14:b8:83:e8:98:52:cb:ef:85:47:84:8a:4e:84:
1d:c2:ae:57:d5:5b:f0:cc:db:55:4a:03:af:6a:99:f2:3d:85:
0e:c7:42:7d:4f:1e:39:34:41:b1:5d:96:8c:07:28:15:e9:c3:
81:d4:3d:0c:bf:19:70:8d:b7:ad:3d:49:40:27:1c:67:87:8c:
dd:23:b7:f4:48:a6:6c:97:5a:3d:5a:a9:8f:bc:85:9e:31:41:
c0:56:0a:ae:5b:31:c1:ba:cc:6f:34:41:f3:49:46:2e:d4:24:
8a:21:05:4f:b5:93:f6:96:00:17:15:47:26:0c:cb:b4:e0:50:
d4:77:7c:84:99:2b:2d:8a:47:99:b1:4e:9f:82:67:ea:fd:42:
f3:db:0d:54:70:7b:ba:76:41:e4:3d:1c:b7:c5:33:b8:ce:43:
13:2e:45:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:36 2025 by rpki-client