Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/8S1BIMCTCs2Suq_0PyENFTJ_Ujo.roa
File: 8S1BIMCTCs2Suq_0PyENFTJ_Ujo.roa (raw, json)
Hash identifier: 1yFyVEjVKOvESHdz2GCfPrVuEoj5Jz/66QVv1VIETLY=
Subject key identifier: F1:2D:41:20:C0:93:0A:CD:92:BA:AF:F4:3F:21:0D:15:32:7F:52:3A
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018CC5007672ADD81F158BBA9E33737FAF0F
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/8S1BIMCTCs2Suq_0PyENFTJ_Ujo.roa
Signing time: Mon 01 Jan 2024 12:29:51 +0000
ROA not before: Mon 01 Jan 2024 12:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 212.80.18.0/23 maxlen: 23
212.80.18.0/24 maxlen: 24
212.80.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 06:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:76:72:ad:d8:1f:15:8b:ba:9e:33:73:7f:af:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 12:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f12d4120c0930acd92baaff43f210d15327f523a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:1d:c0:f6:4b:47:e6:00:5c:e9:a2:9c:3d:
f5:fe:2e:4a:e8:6d:8b:58:d4:1d:bd:e9:26:60:4e:
14:b0:45:60:1e:d1:94:47:a7:e6:6b:4d:4e:68:33:
e1:8a:33:b0:d0:4e:da:ac:cc:c6:77:5a:40:66:62:
e9:db:5d:ae:73:7e:6a:fb:b6:96:fe:dc:a0:2b:05:
c1:fe:05:f7:58:e9:e4:8e:39:81:83:49:72:65:d6:
ea:61:25:b2:72:15:ee:fb:6e:7f:bb:fb:62:bd:97:
ee:c7:54:84:fa:95:2d:e9:d2:3f:74:50:f7:c5:92:
75:93:69:6c:35:5d:8b:9f:79:86:81:19:29:4d:a0:
3f:27:be:1b:06:66:40:3a:f4:5f:04:ac:ac:e3:b0:
c1:bb:65:fb:40:c3:55:b7:7d:d4:9d:90:f1:47:1a:
e3:48:00:66:51:99:4e:d6:aa:9f:73:c4:6a:2b:57:
88:c5:70:41:7c:3e:c4:39:0a:96:5a:02:b2:5e:21:
8c:25:1d:1c:f9:c8:7b:50:5a:79:cd:cf:e7:03:a8:
79:43:f4:8d:76:d6:90:7d:92:37:72:c7:e8:14:f8:
90:34:16:91:a3:25:00:3f:38:9c:c5:68:32:03:a3:
a6:1a:07:83:e3:9b:e7:ef:c9:30:e8:1a:c6:f8:48:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:41:20:C0:93:0A:CD:92:BA:AF:F4:3F:21:0D:15:32:7F:52:3A
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/8S1BIMCTCs2Suq_0PyENFTJ_Ujo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.18.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:e9:df:2d:0c:6f:4f:98:c9:37:9b:5b:fe:11:a3:61:d9:03:
d8:55:5d:44:e2:bb:47:ed:ab:0f:35:a7:5e:c1:5c:62:53:44:
ba:1c:2d:56:90:6e:e2:78:8e:7e:4a:da:a1:b2:f5:9d:38:dd:
ee:43:e9:8d:9e:1f:a0:3b:84:3f:42:79:2d:aa:6d:66:78:9f:
c5:76:d7:35:30:ff:5f:75:6d:25:e9:47:67:d3:b8:6d:da:af:
bd:10:ec:ab:46:4c:4b:6f:29:c9:7f:85:af:f2:f3:b0:b2:29:
26:f5:6f:05:36:64:44:cd:97:9e:23:59:e5:65:c7:3e:89:09:
49:b2:a0:d0:83:e9:f8:cc:db:f0:36:94:37:fd:d3:16:16:b3:
a2:a3:72:18:94:cb:ea:e6:54:7b:a5:32:cc:ae:67:d2:af:55:
61:75:2d:28:35:5c:03:71:ad:f3:1e:5d:4c:2e:18:5a:8e:b9:
ca:c8:e1:f8:e5:2c:a2:8d:f6:04:d5:e2:94:c6:ac:e5:3b:11:
e8:b5:3b:8a:34:00:23:df:a9:d1:cf:2d:04:b6:b8:c1:00:8a:
61:e1:80:8b:dd:fb:88:a3:65:a4:d2:7b:91:89:0d:cb:d4:fb:
c3:5b:82:87:39:c7:cf:fc:2f:ce:b8:1a:95:b3:b1:46:00:12:
73:8a:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 09:31:22 2024 by rpki-client on console-fra.rpki-client.org