Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/MFFBpCm7f7F_8lXfVzDd3YA7yw0.roa
File: MFFBpCm7f7F_8lXfVzDd3YA7yw0.roa (raw, json)
Hash identifier: Q/3onbFdwN+Mebb/SfMlFyvOw+VKz4firAz30Ur1PzA=
Subject key identifier: 30:51:41:A4:29:BB:7F:B1:7F:F2:55:DF:57:30:DD:DD:80:3B:CB:0D
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019049C06CA784D3108C03CA6F1799A2AC28
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/MFFBpCm7f7F_8lXfVzDd3YA7yw0.roa
Signing time: Mon 24 Jun 2024 10:17:45 +0000
ROA not before: Mon 24 Jun 2024 10:17:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 212.80.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 14:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:c0:6c:a7:84:d3:10:8c:03:ca:6f:17:99:a2:ac:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jun 24 10:17:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=305141a429bb7fb17ff255df5730dddd803bcb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:b3:2e:ba:33:b6:0f:a9:8f:23:d2:48:d2:
d1:46:21:3b:da:82:68:be:cd:ac:f4:9e:db:6e:43:
99:19:7f:b6:68:d8:29:6c:5a:ac:23:63:0b:5d:f8:
df:78:f6:73:df:8e:26:61:45:61:0c:dc:c9:d3:9c:
a1:71:0a:f7:bd:6e:31:69:00:da:a1:8d:cf:8a:61:
a5:c9:e6:a8:6c:e8:5b:ba:e7:d2:a5:aa:97:f8:c3:
61:af:74:9c:20:21:a7:51:7b:84:e1:9e:74:97:22:
c5:a5:fc:ff:46:db:65:30:df:8d:5c:ef:74:70:f8:
2c:d8:75:ff:d3:99:1c:4b:f3:2b:76:9a:3e:23:6c:
df:77:b2:6c:fb:de:5b:99:45:3e:40:94:2b:30:96:
7e:60:cb:a9:9c:df:76:4d:87:36:1d:c2:6f:b2:35:
dc:75:a1:c0:4a:a9:8c:9d:e9:17:42:be:af:a5:1c:
9d:d2:e5:3f:77:e0:55:22:af:3e:67:51:cd:f5:a6:
72:c0:63:28:0a:40:8e:6b:82:14:e6:02:62:b0:13:
11:ca:02:90:27:86:7f:c8:cb:dc:99:b2:fd:56:e7:
e9:6a:d6:7c:e6:5e:62:10:3a:28:69:25:71:8f:2f:
91:69:db:e4:96:1b:a8:dd:6b:fb:05:5a:c4:21:16:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:51:41:A4:29:BB:7F:B1:7F:F2:55:DF:57:30:DD:DD:80:3B:CB:0D
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/MFFBpCm7f7F_8lXfVzDd3YA7yw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5e:4e:93:3a:de:db:37:e4:b6:8c:fb:90:0c:c7:3a:4f:a9:
4e:11:ec:63:e5:d1:28:a8:75:21:3b:a2:4a:22:17:3d:21:87:
29:9f:40:97:49:f7:06:fb:d2:a4:5c:ba:6e:ba:39:f2:17:ff:
77:93:83:9c:ee:2d:53:07:e4:f5:55:00:8a:00:d5:0b:d0:1b:
00:f5:b8:54:51:83:22:f6:c0:7e:09:aa:7c:bb:fa:be:c1:8c:
3d:66:05:2f:9b:e4:5d:80:77:b5:2c:bc:4b:76:06:c9:1a:51:
79:75:cf:d4:2f:a3:97:a8:77:e6:bb:86:53:c9:b8:e7:ee:6c:
e7:73:38:67:22:df:72:3b:55:1c:c9:a1:5f:31:60:62:18:73:
f2:5b:e3:7c:82:8c:82:7e:cb:ee:18:10:16:83:9c:b4:f0:59:
4c:9a:8c:5f:76:62:64:79:f2:db:4d:2e:8e:c2:69:0c:04:96:
74:52:97:d9:8a:31:12:6f:cc:8e:43:e0:63:44:ab:6e:0e:22:
d1:44:66:1c:82:5a:82:4b:32:ff:b7:01:46:06:e9:9f:72:61:
b3:3f:ad:78:b6:c1:75:ee:4c:11:ec:98:f1:a0:17:19:2b:9b:
90:c4:19:b9:03:7b:03:58:c2:2d:cd:a2:fb:65:eb:b2:d8:3e:
8e:70:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 18:29:25 2024 by rpki-client on console-ams.rpki-client.org