Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1nwimzhJE6fELhqVrNEg78oQA08.roa
File: 1nwimzhJE6fELhqVrNEg78oQA08.roa (raw, json)
Hash identifier: T/dgy1RaJ7cqFV8b2fAtxZfFNeFSh/gwmA0yAZPJlMY=
Subject key identifier: D6:7C:22:9B:38:49:13:A7:C4:2E:1A:95:AC:D1:20:EF:CA:10:03:4F
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018D7D9F1B225A679FD2AADD2612188AC8F8
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1nwimzhJE6fELhqVrNEg78oQA08.roa
Signing time: Tue 06 Feb 2024 08:53:15 +0000
ROA not before: Tue 06 Feb 2024 08:53:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 212.16.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 09:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:9f:1b:22:5a:67:9f:d2:aa:dd:26:12:18:8a:c8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 6 08:53:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d67c229b384913a7c42e1a95acd120efca10034f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:b2:36:90:15:22:3e:4c:47:79:d5:89:d4:
cc:e7:2b:fd:19:f4:b9:d9:5d:3e:e6:dd:8e:a8:b0:
40:58:87:a2:c1:8f:a2:c0:be:77:b5:a8:78:f2:a8:
30:74:39:e5:53:77:a7:a4:65:75:7a:c0:ea:59:b2:
ca:76:da:ea:7e:6a:d1:89:fc:f5:51:2a:46:2c:dc:
97:e3:ed:93:7a:05:b3:5f:31:25:07:f2:13:57:85:
51:ba:ff:c1:39:77:cc:7a:70:eb:f5:5c:d9:c0:fd:
77:a4:68:60:fb:4e:07:57:a0:1e:aa:97:0d:63:39:
f6:4b:0f:a7:3e:df:3f:57:04:aa:4e:e1:75:24:e8:
c9:7e:36:7b:b0:0b:ba:60:b7:56:b5:e2:fa:7e:4a:
18:23:9a:b2:36:08:d2:cf:85:9e:05:19:e6:0a:2d:
22:b4:0a:cb:9b:8a:ac:53:d2:18:a9:fe:db:bf:23:
a1:5e:f9:b1:e8:ba:24:12:20:3f:de:18:95:ad:cd:
e3:5f:89:1e:51:de:84:96:49:cf:84:41:76:74:7c:
80:15:4a:a9:dc:65:f5:76:3d:41:f1:5d:76:e6:91:
b2:00:f8:72:69:31:07:45:71:1b:7a:72:6e:f0:6d:
56:d2:b1:94:18:e3:08:ea:06:41:7c:68:40:e1:08:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7C:22:9B:38:49:13:A7:C4:2E:1A:95:AC:D1:20:EF:CA:10:03:4F
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1nwimzhJE6fELhqVrNEg78oQA08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.80.0/24
Signature Algorithm: sha256WithRSAEncryption
78:03:28:42:0d:ef:42:d4:a5:42:83:1b:84:29:11:d3:dc:ac:
9c:e7:e4:31:bd:14:f4:1a:cf:a1:05:94:f3:b4:34:d9:33:b7:
f6:28:f2:92:37:8a:7c:57:ba:0a:f4:ac:c2:93:3b:b5:2c:93:
4c:93:4c:c3:cc:01:0e:53:cc:4d:c5:07:ec:b6:72:6a:23:9d:
c5:7a:fc:4f:9a:6b:9a:cc:04:45:c7:6c:45:f8:56:dd:80:4d:
81:66:3e:57:1b:00:6b:b6:80:25:04:ea:64:f9:e0:01:ed:40:
ae:9b:00:cb:1a:4e:26:bd:0d:06:85:a7:51:f4:94:c9:c2:12:
c8:a3:bb:52:f0:f9:84:f3:a0:cc:3e:79:42:b4:4a:6c:6e:05:
74:e5:a7:e3:f2:e1:83:1f:16:ec:28:54:05:76:fe:89:bb:97:
f1:74:88:81:1e:88:ae:81:c8:0e:96:87:0f:10:ae:49:55:e3:
60:dc:a5:1e:57:11:d7:57:38:27:bd:0f:48:eb:04:35:0c:a3:
1e:7f:37:ce:e3:af:9c:53:17:ea:da:69:15:d3:09:bc:53:44:
b2:3a:36:29:cc:7d:14:3a:f3:8a:3a:a3:22:de:f6:24:90:71:
7d:5f:fc:46:8a:e8:c3:cb:a7:5e:35:d9:a9:d6:b7:59:d5:89:
54:73:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org