Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/NVMyrxnTeoTz8FnpnHjqTKwT_FQ.roa
File: NVMyrxnTeoTz8FnpnHjqTKwT_FQ.roa (raw, json)
Hash identifier: KLKKXC1tIrHiX8NNT+SBmUKbAoqLy+N4RhAbQKII4mE=
Subject key identifier: 35:53:32:AF:19:D3:7A:84:F3:F0:59:E9:9C:78:EA:4C:AC:13:FC:54
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018CABB8B57F3FF7C955CFEDAC93E41EF1D4
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/NVMyrxnTeoTz8FnpnHjqTKwT_FQ.roa
Signing time: Wed 27 Dec 2023 14:40:58 +0000
ROA not before: Wed 27 Dec 2023 14:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44947
IP address blocks: 212.80.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:b8:b5:7f:3f:f7:c9:55:cf:ed:ac:93:e4:1e:f1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 27 14:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=355332af19d37a84f3f059e99c78ea4cac13fc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:53:28:c5:00:a8:8f:db:5a:ff:a2:57:d2:
53:d4:08:ec:5c:e1:31:de:42:68:51:41:b0:7f:15:
36:ad:f8:f0:64:2b:fb:1d:e8:2d:86:71:ce:22:cd:
ee:38:b9:6c:93:08:16:fb:a0:54:2a:f2:8d:88:b1:
ac:07:99:ea:4b:85:39:c4:71:9b:9c:8d:18:b3:13:
61:72:da:2d:63:6d:88:53:80:7f:f2:5d:04:85:c1:
ed:d4:5a:02:64:64:ae:8e:e9:79:fe:da:13:0d:fd:
75:39:9f:f6:e2:c2:48:b0:0b:d1:bf:a6:0b:a1:7f:
65:72:1a:e1:67:9d:4f:54:b6:64:fd:00:f0:f9:1e:
47:cb:95:c1:cd:01:7a:99:cc:a3:97:d0:b3:08:1d:
c0:fa:8f:6a:ff:9e:63:48:6a:d4:9d:d9:cc:82:0b:
49:3e:8c:fc:8f:16:80:82:00:32:af:fa:c6:f6:e4:
ad:12:81:62:20:c3:d8:95:c1:18:a8:b6:bf:1d:51:
7f:48:b2:7c:aa:3b:2a:9d:fc:32:9b:ee:38:b7:03:
f0:01:ac:d6:cf:4b:19:2b:9c:63:b6:a0:7e:29:de:
28:33:7f:79:d4:3f:e2:a7:43:72:cb:1a:cd:fd:e4:
35:ee:c9:f9:19:4d:36:3c:77:ee:7b:88:87:d7:03:
7d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:53:32:AF:19:D3:7A:84:F3:F0:59:E9:9C:78:EA:4C:AC:13:FC:54
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/NVMyrxnTeoTz8FnpnHjqTKwT_FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.24.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6e:9d:e1:28:7a:90:a6:41:10:ee:91:76:01:3a:f0:be:12:
5b:7e:c1:30:34:3d:43:90:e4:ef:84:c2:b4:5e:59:1a:45:58:
de:ff:56:78:29:09:fe:a7:dc:98:d5:ac:ba:f4:2a:f9:37:f4:
cc:e3:ad:3e:14:0a:c2:c0:69:b3:08:87:80:e5:d4:72:b9:47:
11:c8:52:19:e0:09:e8:ca:90:2e:40:68:73:67:1a:a9:e7:bf:
8f:3e:8d:b0:61:f5:3b:8a:54:e5:ea:32:7e:92:89:c8:bb:c6:
66:06:0d:5e:50:db:93:36:c2:d6:e9:b8:65:c8:e2:f2:81:b4:
48:cf:6e:d5:41:fb:6a:01:ca:36:00:45:12:f4:0b:8f:93:28:
ee:2b:07:71:29:35:d1:a3:28:e3:5e:40:30:f7:76:ad:30:bb:
aa:e5:08:4b:d6:f8:ba:c6:94:d6:f2:fd:6e:a5:8c:cb:02:bd:
3d:ed:84:f2:dc:ee:e2:38:0d:98:e2:1e:61:67:bc:e4:45:9b:
43:21:22:93:ca:66:1f:34:6d:1c:3f:47:e1:02:54:9d:4b:fc:
5c:a5:d2:bf:2b:9d:11:4b:a9:14:a0:eb:8d:f8:68:2c:cf:48:
14:f4:76:e3:b2:02:8a:1d:5a:67:30:da:db:f1:93:29:c5:bf:
b3:43:72:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyruLV/P/fJVc/trJPkHvHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjMxMjI3MTQ0MDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTUzMzJhZjE5ZDM3YTg0ZjNmMDU5ZTk5Yzc4ZWE0Y2FjMTNmYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDpTKMUAqI/bWv+iV9JT1AjsXOEx
3kJoUUGwfxU2rfjwZCv7HegthnHOIs3uOLlskwgW+6BUKvKNiLGsB5nqS4U5xHGb
nI0YsxNhctotY22IU4B/8l0EhcHt1FoCZGSujul5/toTDf11OZ/24sJIsAvRv6YL
oX9lchrhZ51PVLZk/QDw+R5Hy5XBzQF6mcyjl9CzCB3A+o9q/55jSGrUndnMggtJ
Poz8jxaAggAyr/rG9uStEoFiIMPYlcEYqLa/HVF/SLJ8qjsqnfwym+44twPwAazW
z0sZK5xjtqB+Kd4oM3951D/ip0NyyxrN/eQ17sn5GU02PHfue4iH1wN9/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDVTMq8Z03qE8/BZ6Zx46kysE/xUMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvTlZNeXJ4blRlb1R6OEZucG5IanFUS3dUX0ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FAYMA0G
CSqGSIb3DQEBCwUAA4IBAQAhbp3hKHqQpkEQ7pF2ATrwvhJbfsEwND1DkOTvhMK0
XlkaRVje/1Z4KQn+p9yY1ay69Cr5N/TM460+FArCwGmzCIeA5dRyuUcRyFIZ4Ano
ypAuQGhzZxqp57+PPo2wYfU7ilTl6jJ+konIu8ZmBg1eUNuTNsLW6bhlyOLygbRI
z27VQftqAco2AEUS9AuPkyjuKwdxKTXRoyjjXkAw93atMLuq5QhL1vi6xpTW8v1u
pYzLAr097YTy3O7iOA2Y4h5hZ7zkRZtDISKTymYfNG0cP0fhAlSdS/xcpdK/K50R
S6kUoOuN+Ggsz0gU9HbjsgKKHVpnMNrb8ZMpxb+zQ3Jp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org