Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/zYO5HjSCWZ_EtL3-vPtKh48ruAo.roa
File: zYO5HjSCWZ_EtL3-vPtKh48ruAo.roa (raw, json)
Hash identifier: 9aecmcepCR6VpiDLgj/DT3Ft8HXzWOmTivV64HpEeTQ=
Subject key identifier: CD:83:B9:1E:34:82:59:9F:C4:B4:BD:FE:BC:FB:4A:87:8F:2B:B8:0A
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018CC4934CA59985469D92FB170FDF92702E
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/zYO5HjSCWZ_EtL3-vPtKh48ruAo.roa
Signing time: Mon 01 Jan 2024 10:30:36 +0000
ROA not before: Mon 01 Jan 2024 10:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 213.21.231.0/24 maxlen: 24
213.21.238.0/24 maxlen: 24
213.21.244.0/24 maxlen: 24
213.21.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 11:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4c:a5:99:85:46:9d:92:fb:17:0f:df:92:70:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 10:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd83b91e3482599fc4b4bdfebcfb4a878f2bb80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:16:12:58:a5:b0:fc:00:48:a0:93:af:74:41:
b5:4c:29:b6:cf:75:6f:c3:a6:b5:fa:19:d6:08:75:
3c:cf:a2:4d:9a:1c:d6:fd:a4:1a:be:76:07:a4:c2:
bc:5f:b2:8b:c2:21:db:18:09:7d:6b:6b:95:84:4d:
89:b5:f7:4a:25:67:88:00:1a:6f:11:09:d9:3e:4d:
a6:e7:28:09:47:d6:b1:17:93:f8:30:35:a1:e6:95:
54:0a:70:26:f4:29:df:55:45:77:49:9b:a5:e4:09:
e6:88:62:2d:13:d8:26:98:f7:d6:93:66:a3:c2:1a:
ad:16:f3:22:59:e4:4b:03:09:4f:d7:75:84:eb:8b:
0f:4d:34:ab:85:9f:dc:e1:59:f1:a0:99:bc:1b:62:
57:30:9b:f6:bf:3c:ac:f4:f3:60:02:c4:3a:81:33:
78:76:20:f5:0f:85:0d:14:ab:71:92:e7:9a:8c:d6:
61:34:cf:db:94:b9:6e:8f:02:62:cf:d5:c6:45:87:
4d:31:7a:d1:9f:02:8a:dd:cf:c6:7c:63:f6:41:cd:
75:f1:19:eb:fd:c0:2d:1c:76:96:93:b3:32:3b:84:
13:da:5b:ba:01:3a:4f:ea:31:42:eb:bf:86:bd:3f:
8b:2f:0f:03:0c:bd:7e:79:29:d5:ec:d2:a8:62:7f:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:83:B9:1E:34:82:59:9F:C4:B4:BD:FE:BC:FB:4A:87:8F:2B:B8:0A
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/zYO5HjSCWZ_EtL3-vPtKh48ruAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.231.0/24
213.21.238.0/24
213.21.244.0/24
213.21.248.0/24
Signature Algorithm: sha256WithRSAEncryption
34:cb:bc:69:db:7b:20:d0:07:30:47:57:eb:2c:92:ca:4e:b8:
ad:5a:e1:0a:8c:5b:eb:58:2b:7c:10:d1:90:f4:53:49:62:f0:
f5:e8:78:40:5c:fd:c9:5a:f2:2f:15:b0:05:d6:b8:0e:2f:de:
8f:e0:e0:b0:eb:ed:22:20:e0:44:79:c3:cc:ee:13:36:f1:e5:
ea:b5:76:1b:21:e6:b5:90:9d:b6:e6:53:8a:25:a0:2f:20:c9:
0e:b5:ae:66:91:97:aa:12:ab:4b:ef:59:e7:d2:e9:1c:18:f3:
0a:b1:d7:22:89:4f:9e:c5:61:4d:cf:4b:77:6b:86:95:c1:0f:
5a:d9:df:7c:f4:72:fb:ee:70:7a:21:e6:04:4f:85:62:1e:38:
f2:43:88:f5:59:b5:9f:de:62:70:6d:a3:dc:cf:53:29:db:91:
4e:39:00:d7:6d:a8:cb:c1:38:26:b5:de:84:30:47:97:0d:78:
f8:fe:c1:3f:a2:a9:5e:0b:f5:24:06:51:ec:44:72:45:8c:ed:
d2:99:a2:33:b7:f8:0a:75:da:8f:84:70:54:3e:c5:8f:64:d2:
de:24:5f:95:fe:bb:a2:39:b8:c9:64:45:8b:eb:c4:d8:fd:62:
1c:a7:4d:e3:fa:64:05:96:ce:94:0c:c2:9b:bf:c7:d8:38:94:
6b:3e:ce:33
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzEk0ylmYVGnZL7Fw/fknAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjQwMTAxMTAzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDgzYjkxZTM0ODI1OTlmYzRiNGJkZmViY2ZiNGE4NzhmMmJiODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghYSWKWw/ABIoJOvdEG1TCm2z3Vv
w6a1+hnWCHU8z6JNmhzW/aQavnYHpMK8X7KLwiHbGAl9a2uVhE2JtfdKJWeIABpv
EQnZPk2m5ygJR9axF5P4MDWh5pVUCnAm9CnfVUV3SZul5AnmiGItE9gmmPfWk2aj
whqtFvMiWeRLAwlP13WE64sPTTSrhZ/c4VnxoJm8G2JXMJv2vzys9PNgAsQ6gTN4
diD1D4UNFKtxkueajNZhNM/blLlujwJiz9XGRYdNMXrRnwKK3c/GfGP2Qc118Rnr
/cAtHHaWk7MyO4QT2lu6ATpP6jFC67+GvT+LLw8DDL1+eSnV7NKoYn81BQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFM2DuR40glmfxLS9/rz7SoePK7gKMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvellPNUhqU0NXWl9FdEwzLXZQdEtoNDhydUFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQA1RXnAwQA
1RXuAwQA1RX0AwQA1RX4MA0GCSqGSIb3DQEBCwUAA4IBAQA0y7xp23sg0AcwR1fr
LJLKTritWuEKjFvrWCt8ENGQ9FNJYvD16HhAXP3JWvIvFbAF1rgOL96P4OCw6+0i
IOBEecPM7hM28eXqtXYbIea1kJ225lOKJaAvIMkOta5mkZeqEqtL71nn0ukcGPMK
sdciiU+exWFNz0t3a4aVwQ9a2d989HL77nB6IeYET4ViHjjyQ4j1WbWf3mJwbaPc
z1Mp25FOOQDXbajLwTgmtd6EMEeXDXj4/sE/oqleC/UkBlHsRHJFjO3SmaIzt/gK
ddqPhHBUPsWPZNLeJF+V/ruiObjJZEWL68TY/WIcp03j+mQFls6UDMKbv8fYOJRr
Ps4z
-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:07 2024 by rpki-client on console-fra.rpki-client.org