Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/w4dG8GSKs6KmTTQyhDsY6gH0m3s.roa
File: w4dG8GSKs6KmTTQyhDsY6gH0m3s.roa (raw, json)
Hash identifier: 8Og6HgBR/2F/NNd6JyLIlDVvQosXNde6nSdcNGUfsYY=
Subject key identifier: C3:87:46:F0:64:8A:B3:A2:A6:4D:34:32:84:3B:18:EA:01:F4:9B:7B
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01871D025C57E6B29CA25C08B8F0F4087C22
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/w4dG8GSKs6KmTTQyhDsY6gH0m3s.roa
Signing time: Sun 26 Mar 2023 08:21:46 +0000
ROA not before: Sun 26 Mar 2023 08:21:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36231
IP address blocks: 213.21.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1d:02:5c:57:e6:b2:9c:a2:5c:08:b8:f0:f4:08:7c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Mar 26 08:21:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c38746f0648ab3a2a64d3432843b18ea01f49b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:25:44:93:dc:23:8d:da:fb:6f:8d:d1:4a:
9c:9b:94:0f:a8:b0:42:ab:a3:e0:b0:ac:4e:6d:74:
55:2d:33:db:df:18:77:d8:eb:db:ad:ec:2d:55:c8:
79:3f:08:d5:a5:42:cf:98:30:1e:02:9d:ae:4e:74:
5a:52:8a:70:92:8e:5c:02:e7:95:b4:0e:5e:15:0e:
97:94:30:55:b6:8f:62:58:91:3b:82:e9:de:29:39:
84:5c:b0:f0:b9:ff:19:85:26:89:d5:88:43:64:73:
91:5a:df:fb:29:4e:44:6d:44:24:db:9f:37:7f:77:
88:21:76:95:60:5a:25:5c:73:e1:b6:f2:13:6d:5a:
70:f6:be:0c:f2:f7:d2:5c:5e:37:8f:dd:ca:b9:32:
90:88:23:f6:7a:48:9a:d6:b2:f7:d7:81:33:e9:d8:
11:9b:a7:55:bb:ae:11:63:4a:1f:df:c1:b3:74:cb:
14:02:a3:51:9f:f7:58:96:f7:38:9b:3e:aa:9b:a6:
f9:9b:b2:b7:f3:dc:92:38:85:17:5e:7a:41:e4:6c:
80:d9:58:f1:ac:e9:68:b5:4d:b1:20:90:92:10:75:
9d:4f:0a:39:87:05:97:62:fa:3a:aa:8e:69:b2:1a:
dd:df:b7:12:10:cd:02:87:24:2c:fb:00:98:af:7e:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:87:46:F0:64:8A:B3:A2:A6:4D:34:32:84:3B:18:EA:01:F4:9B:7B
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/w4dG8GSKs6KmTTQyhDsY6gH0m3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:46:76:d0:55:13:9b:d2:41:07:5e:97:38:19:55:cf:45:54:
13:38:83:a2:7a:13:ce:ce:10:c3:a0:f7:5a:48:5d:6e:2e:28:
b6:8c:dc:31:17:25:a7:e2:7a:03:32:b7:96:28:6e:53:75:90:
24:66:04:3e:b6:f2:10:42:66:9c:e0:93:8e:fc:c5:35:db:0c:
61:7c:81:fd:d1:e5:07:1e:1f:e7:d3:8d:0f:77:d2:90:7a:a6:
f5:02:75:be:07:95:99:17:2f:0e:23:4f:43:3b:5c:f7:0c:65:
75:25:46:63:50:a5:a4:36:12:eb:26:95:cf:e4:87:b8:c7:89:
0d:db:66:da:17:ac:49:7d:0b:b3:8a:c0:14:b2:6f:91:50:d6:
14:5f:6e:67:f6:29:5c:24:54:7c:db:e3:5d:04:e5:d5:95:3a:
8f:79:3b:5d:b1:41:3c:63:b8:62:3a:0a:cc:80:dc:44:9e:bf:
22:e8:53:92:e0:64:5c:33:36:b6:39:33:52:1a:2f:0c:d3:b0:
aa:7f:d7:3c:5b:a0:f3:75:10:01:61:1f:ca:9f:6e:31:3f:50:
ae:8c:3b:20:9c:ba:f8:46:d0:76:2d:91:3e:44:b1:16:e2:1d:
35:b6:b2:19:21:d0:45:40:0a:ed:f3:73:d6:eb:e0:46:66:53:
71:1f:2c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:20 2023 by rpki-client on console-fra.rpki-client.org