Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/AbUs_jfyqFcRn6pza8lFuQ3s4yc.roa
File: AbUs_jfyqFcRn6pza8lFuQ3s4yc.roa (raw, json)
Hash identifier: +QngV75mQ5Ojq7glFJ2zZrlntODJ1hvJIFIlqs+5uGM=
Subject key identifier: 01:B5:2C:FE:37:F2:A8:57:11:9F:AA:73:6B:C9:45:B9:0D:EC:E3:27
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0185703990FD7BDE6CB86A2447820B39CACF
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/AbUs_jfyqFcRn6pza8lFuQ3s4yc.roa
Signing time: Mon 02 Jan 2023 02:04:58 +0000
ROA not before: Mon 02 Jan 2023 02:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51280
IP address blocks: 212.80.27.0/24 maxlen: 24
212.80.26.0/23 maxlen: 24
212.80.26.0/24 maxlen: 24
212.80.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:90:fd:7b:de:6c:b8:6a:24:47:82:0b:39:ca:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 2 02:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01b52cfe37f2a857119faa736bc945b90dece327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:67:8e:b0:af:f7:49:19:2b:e8:1b:70:04:
b7:d3:22:b1:1e:39:44:bc:d7:1a:c8:85:ca:c2:89:
78:ab:81:2a:30:14:fa:79:67:b3:52:04:70:37:26:
0c:a0:25:7c:0a:65:7c:36:16:6b:65:13:52:de:2a:
a9:bd:22:7b:48:21:b0:d1:09:88:b8:1d:77:bb:64:
41:fb:c2:37:e7:00:6b:ba:6a:3d:ef:43:56:20:0b:
89:3e:f9:9e:09:b4:e7:03:e2:3b:73:77:d9:03:b9:
11:5a:4d:4e:b3:26:96:0a:8d:8a:81:a0:a2:25:99:
1c:77:ba:e3:21:4a:42:3e:97:51:88:ca:28:4d:9c:
b2:81:12:13:a2:89:fa:79:21:ca:65:65:50:66:99:
29:45:49:6a:89:88:24:de:bb:50:e5:6d:0b:c8:ea:
bf:03:43:dd:1d:fe:9e:85:1c:72:04:45:51:7e:d9:
45:f1:9d:d7:b9:a0:60:eb:69:da:0a:ce:0e:5d:ca:
1b:70:af:8f:5b:41:ba:56:b8:50:c8:9f:be:3e:e8:
5f:84:c0:ac:57:bb:ac:d5:73:94:b5:1f:80:dc:0d:
57:7f:53:e8:e4:0c:c1:81:12:15:98:c0:3e:1d:92:
f4:eb:51:34:55:a6:d4:cf:c7:82:b1:34:3f:7b:bb:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B5:2C:FE:37:F2:A8:57:11:9F:AA:73:6B:C9:45:B9:0D:EC:E3:27
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/AbUs_jfyqFcRn6pza8lFuQ3s4yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.25.0-212.80.27.255
Signature Algorithm: sha256WithRSAEncryption
08:5f:40:67:4f:61:79:12:e5:4b:92:84:18:0d:d7:78:59:b9:
f9:61:24:85:18:e0:e5:e9:6b:47:06:3a:4e:1c:ea:d1:df:12:
f9:73:b3:b3:3c:c2:75:1f:97:a0:31:3c:3a:a7:e3:b9:ef:d7:
81:19:a0:24:b1:c0:43:cc:d0:b0:8e:45:9f:30:3d:d8:93:f6:
1c:83:06:0e:d9:2a:29:9f:20:14:97:06:eb:8f:60:2a:8d:fa:
de:22:85:d4:b8:e7:0a:41:34:15:cb:fa:4a:79:cc:b3:d8:1c:
25:24:26:c1:51:90:2c:32:cf:dd:79:c7:27:ed:c6:ec:10:31:
b1:0f:01:01:b8:45:28:82:6c:af:e1:d4:df:24:9f:1e:f9:a5:
29:bb:c8:52:f0:ed:f9:70:f9:a8:b4:22:ed:e9:e2:96:5c:59:
4a:f3:02:6c:ef:26:48:31:a5:91:70:6a:d0:1b:9e:09:92:dc:
c3:ec:49:6b:3e:32:f0:24:a5:06:bb:4b:7f:9e:81:bc:ff:41:
2c:cc:e2:d2:71:ee:6f:3c:42:70:65:e4:21:9f:5f:05:72:ef:
ef:ab:c1:91:12:0f:c7:d0:aa:7b:95:f0:64:51:d5:8b:04:04:
f9:02:4b:d8:0b:7d:f0:6f:96:58:f3:ee:5d:43:a6:f2:c6:bf:
5c:0b:3a:48
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVwOZD9e95suGokR4ILOcrPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjMwMTAyMDIwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWI1MmNmZTM3ZjJhODU3MTE5ZmFhNzM2YmM5NDViOTBkZWNlMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GBnjrCv90kZK+gbcAS30yKxHjlE
vNcayIXKwol4q4EqMBT6eWezUgRwNyYMoCV8CmV8NhZrZRNS3iqpvSJ7SCGw0QmI
uB13u2RB+8I35wBrumo970NWIAuJPvmeCbTnA+I7c3fZA7kRWk1OsyaWCo2KgaCi
JZkcd7rjIUpCPpdRiMooTZyygRIToon6eSHKZWVQZpkpRUlqiYgk3rtQ5W0LyOq/
A0PdHf6ehRxyBEVRftlF8Z3XuaBg62naCs4OXcobcK+PW0G6VrhQyJ++PuhfhMCs
V7us1XOUtR+A3A1Xf1Po5AzBgRIVmMA+HZL061E0VabUz8eCsTQ/e7tRAwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAG1LP438qhXEZ+qc2vJRbkN7OMnMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvQWJVc19qZnlxRmNSbjZwemE4bEZ1UTNzNHljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADUUBkD
BALUUBgwDQYJKoZIhvcNAQELBQADggEBAAhfQGdPYXkS5UuShBgN13hZuflhJIUY
4OXpa0cGOk4c6tHfEvlzs7M8wnUfl6AxPDqn47nv14EZoCSxwEPM0LCORZ8wPdiT
9hyDBg7ZKimfIBSXBuuPYCqN+t4ihdS45wpBNBXL+kp5zLPYHCUkJsFRkCwyz915
xyftxuwQMbEPAQG4RSiCbK/h1N8knx75pSm7yFLw7flw+ai0Iu3p4pZcWUrzAmzv
JkgxpZFwatAbngmS3MPsSWs+MvAkpQa7S3+egbz/QSzM4tJx7m88QnBl5CGfXwVy
7++rwZESD8fQqnuV8GRR1YsEBPkCS9gLffBvlljz7l1DpvLGv1wLOkg=
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:57 2024 by rpki-client on console-fra.rpki-client.org