Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/GeLDXJakSSCwE2sya2sN3pX7Pso.roa
File: GeLDXJakSSCwE2sya2sN3pX7Pso.roa (raw, json)
Hash identifier: maUP+qQe3VzbeNF32xrQNdCZRITtiyBxQPTtTTbjME8=
Subject key identifier: 19:E2:C3:5C:96:A4:49:20:B0:13:6B:32:6B:6B:0D:DE:95:FB:3E:CA
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DAC187BF001B224D610E37A1483EF32FC
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/GeLDXJakSSCwE2sya2sN3pX7Pso.roa
Signing time: Thu 15 Feb 2024 09:28:22 +0000
ROA not before: Thu 15 Feb 2024 09:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 212.16.80.0/24 maxlen: 24
212.80.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 12:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:18:7b:f0:01:b2:24:d6:10:e3:7a:14:83:ef:32:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 15 09:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19e2c35c96a44920b0136b326b6b0dde95fb3eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:af:de:44:fa:d1:ec:60:e5:f3:a8:98:df:
8d:16:19:5f:41:3d:d2:f3:fd:ca:59:99:b6:d3:77:
d9:c6:e6:8f:48:f2:76:10:01:08:b5:7d:66:7a:30:
85:08:fb:a1:63:0c:93:63:02:7e:27:bd:e2:77:b8:
f0:fe:8b:67:e6:4f:42:f4:1d:95:d3:cb:53:8d:fc:
6a:2e:28:d7:fd:69:31:5c:8e:61:8a:d1:71:55:53:
c6:f9:69:61:ad:8f:2b:0c:9c:d4:b8:89:04:fe:93:
89:91:e8:99:09:51:68:64:e7:95:5f:ed:ba:9c:c0:
18:36:4b:9d:19:ce:ee:9e:15:33:bb:ed:5a:7e:bc:
71:43:91:75:45:8e:e6:4d:29:c0:98:d5:61:91:3c:
7d:95:11:4b:b7:1b:29:d8:9f:55:9f:e7:93:80:25:
bd:20:85:63:c5:68:be:f0:e4:04:8f:54:34:bb:aa:
cd:74:89:e7:4a:63:8a:d9:a4:83:81:1a:e7:6e:bd:
66:4c:ba:ed:50:40:a0:84:eb:91:99:b4:e8:e9:60:
95:b6:03:eb:6a:0a:9b:1a:f6:97:5f:c9:e1:5e:3f:
b7:77:2d:6c:8c:dd:4d:25:69:73:c7:ad:17:91:c1:
23:18:ab:9d:50:a6:56:88:69:be:63:08:28:64:99:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E2:C3:5C:96:A4:49:20:B0:13:6B:32:6B:6B:0D:DE:95:FB:3E:CA
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/GeLDXJakSSCwE2sya2sN3pX7Pso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.80.0/24
212.80.6.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ec:85:63:74:1e:d2:ec:9e:d2:26:ce:aa:47:80:d8:b2:e4:
d8:07:a3:47:fb:f3:32:97:92:e6:e8:ad:b8:23:67:29:a4:98:
c6:57:0d:51:fb:41:2e:16:95:18:e1:14:07:64:f5:25:6e:4f:
94:bc:8f:9a:19:51:bc:e1:d7:c1:db:d2:4e:bd:98:41:23:96:
4b:8c:94:00:77:b6:9f:75:bb:bb:ee:8e:11:5d:f3:31:84:14:
59:f4:5a:67:6d:a2:aa:40:83:3a:73:05:38:65:82:77:48:53:
0e:9b:53:07:45:dc:e8:d4:a0:71:9b:47:aa:6a:07:00:fb:7e:
bf:09:0c:cd:f9:50:fd:de:14:90:97:a8:5c:46:87:ac:52:5d:
35:58:fb:22:6c:2c:4f:51:56:3f:5e:42:4f:cc:41:e0:48:e6:
27:44:62:c1:2b:c7:26:0f:bf:68:65:dc:6f:80:2d:8f:d0:da:
18:fb:b7:c8:2a:20:93:75:1d:f1:73:fd:ac:f5:ff:cd:3d:19:
ef:cd:a9:97:3c:e8:8f:77:8b:8c:3c:e8:47:2a:05:e9:59:7d:
f5:2f:ee:84:7b:0f:df:a9:f9:e8:63:18:cf:34:64:5e:83:a7:
c5:62:9f:36:1c:db:17:43:94:a9:a5:f8:5a:b4:ea:f0:04:46:
be:86:1c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org