Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OgftgL4sUoL2xbBKQTEnEjdsIkA.roa
File: OgftgL4sUoL2xbBKQTEnEjdsIkA.roa (raw, json)
Hash identifier: zMmcGqGlDwC9tdzLp4kB1rulEH9s8G4qzTrNOgD8VAI=
Subject key identifier: 3A:07:ED:80:BE:2C:52:82:F6:C5:B0:4A:41:31:27:12:37:6C:22:40
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DAC187B426B514F442152BCFE80F2E876
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OgftgL4sUoL2xbBKQTEnEjdsIkA.roa
Signing time: Thu 15 Feb 2024 09:28:21 +0000
ROA not before: Thu 15 Feb 2024 09:28:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 212.80.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 15:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:18:7b:42:6b:51:4f:44:21:52:bc:fe:80:f2:e8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 15 09:28:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a07ed80be2c5282f6c5b04a41312712376c2240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:44:98:84:26:a7:43:42:07:5b:de:f6:15:
3c:00:24:12:bc:6f:60:20:0a:b9:45:fb:88:3f:b5:
bc:2b:b0:2d:98:80:8c:f8:c5:20:56:89:a7:73:b1:
8f:f8:44:9a:e8:77:b2:66:5c:fa:a8:2a:5c:86:49:
db:79:b8:04:2d:35:1c:b9:ec:72:e5:c8:00:52:e9:
9b:bc:e3:5f:71:76:09:92:57:65:5c:df:f9:42:c5:
c5:ce:10:7f:17:15:aa:44:0d:7d:4a:09:f1:8d:21:
d5:1f:03:88:18:3a:b6:c1:6f:6a:ad:34:b7:c9:aa:
93:94:35:e2:48:fc:58:ff:87:73:10:0e:4e:84:b7:
7f:42:7f:9c:ec:bd:d9:4d:27:cb:ec:94:c8:00:22:
05:88:10:fe:7b:5c:ea:d8:83:9b:97:69:6e:66:47:
7d:c7:39:a4:5b:b0:f1:98:4c:42:e2:4c:df:c8:53:
51:87:36:07:b0:83:93:49:7e:b1:c6:67:6f:06:f6:
66:12:69:50:77:09:10:70:51:90:97:37:36:7f:56:
0f:e6:3b:05:c0:0e:4c:33:83:44:3b:f3:4a:09:e7:
ee:fc:a1:83:e4:ec:18:e4:bb:ff:8d:b7:45:b2:c1:
97:fa:d6:c2:38:c6:b6:64:cc:08:fb:c7:dd:b5:ce:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:07:ED:80:BE:2C:52:82:F6:C5:B0:4A:41:31:27:12:37:6C:22:40
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OgftgL4sUoL2xbBKQTEnEjdsIkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.7.0/24
Signature Algorithm: sha256WithRSAEncryption
49:94:37:5c:4a:be:b4:fa:69:b4:27:99:2a:a7:d9:aa:14:03:
aa:a7:7b:f9:83:56:99:06:85:f8:a0:0a:e5:ab:e9:c1:30:d7:
80:96:f9:0b:62:f7:d0:6e:88:8f:cd:25:5c:c5:81:e7:69:c3:
a6:2a:12:bd:82:80:51:81:42:60:81:46:72:b9:5f:44:34:38:
94:c7:7f:c1:b9:52:67:b0:ae:16:53:fc:cb:7a:a3:3e:af:f6:
71:f3:70:f1:eb:b5:b1:a0:1d:2f:29:5a:85:7a:9d:e9:ac:b0:
3a:3b:47:4d:a4:c3:a8:55:5b:94:ea:3c:04:eb:5f:c7:3e:c4:
fa:a3:a8:b2:8d:f9:aa:ee:bf:5b:b7:08:fb:48:6a:a8:60:df:
5f:cf:3b:d3:42:2d:d4:1a:82:d7:03:44:08:75:fa:67:4d:ab:
6a:5c:07:e5:61:3c:70:2b:d9:1d:5b:94:4c:19:6f:36:c5:f1:
c8:3c:27:09:2e:52:25:9c:53:bd:d0:40:b5:d7:aa:51:b5:ce:
d1:3b:53:b7:ae:b9:10:af:5e:b9:8e:87:85:5f:ac:9e:68:27:
c5:87:00:b6:ec:be:dd:9a:d6:cf:b1:79:d8:32:dd:af:92:af:
f6:b2:41:d0:91:4f:94:3e:d7:f5:45:37:a6:7c:a9:79:5b:56:
4c:12:d7:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2sGHtCa1FPRCFSvP6A8uh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQwMjE1MDkyODIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTA3ZWQ4MGJlMmM1MjgyZjZjNWIwNGE0MTMxMjcxMjM3NmMyMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoxEmIQmp0NCB1ve9hU8ACQSvG9g
IAq5RfuIP7W8K7AtmICM+MUgVomnc7GP+ESa6HeyZlz6qCpchknbebgELTUcuexy
5cgAUumbvONfcXYJkldlXN/5QsXFzhB/FxWqRA19SgnxjSHVHwOIGDq2wW9qrTS3
yaqTlDXiSPxY/4dzEA5OhLd/Qn+c7L3ZTSfL7JTIACIFiBD+e1zq2IObl2luZkd9
xzmkW7DxmExC4kzfyFNRhzYHsIOTSX6xxmdvBvZmEmlQdwkQcFGQlzc2f1YP5jsF
wA5MM4NEO/NKCefu/KGD5OwY5Lv/jbdFssGX+tbCOMa2ZMwI+8fdtc7SJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDoH7YC+LFKC9sWwSkExJxI3bCJAMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvT2dmdGdMNHNVb0wyeGJCS1FURW5FamRzSWtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FAHMA0G
CSqGSIb3DQEBCwUAA4IBAQBJlDdcSr60+mm0J5kqp9mqFAOqp3v5g1aZBoX4oArl
q+nBMNeAlvkLYvfQboiPzSVcxYHnacOmKhK9goBRgUJggUZyuV9ENDiUx3/BuVJn
sK4WU/zLeqM+r/Zx83Dx67WxoB0vKVqFep3prLA6O0dNpMOoVVuU6jwE61/HPsT6
o6iyjfmq7r9btwj7SGqoYN9fzzvTQi3UGoLXA0QIdfpnTatqXAflYTxwK9kdW5RM
GW82xfHIPCcJLlIlnFO90EC116pRtc7RO1O3rrkQr165joeFX6yeaCfFhwC27L7d
mtbPsXnYMt2vkq/2skHQkU+UPtf1RTemfKl5W1ZMEtcZ
-----END CERTIFICATE-----
Generated at Sun Mar 17 16:10:44 2024 by rpki-client on console-fra.rpki-client.org