Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/RuBK-Ri5QaNOCi-LxswbqlYMtW8.roa
File: RuBK-Ri5QaNOCi-LxswbqlYMtW8.roa (raw, json)
Hash identifier: lPR8AOJ8mT6fH2UHPYRMHP5hAPqlCTHIaca+9hWl7J8=
Subject key identifier: 46:E0:4A:F9:18:B9:41:A3:4E:0A:2F:8B:C6:CC:1B:AA:56:0C:B5:6F
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01910DB9C74A2128647A060221FA81DD833D
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/RuBK-Ri5QaNOCi-LxswbqlYMtW8.roa
Signing time: Thu 01 Aug 2024 11:36:04 +0000
ROA not before: Thu 01 Aug 2024 11:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64458
IP address blocks: 212.80.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 17:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:b9:c7:4a:21:28:64:7a:06:02:21:fa:81:dd:83:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Aug 1 11:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46e04af918b941a34e0a2f8bc6cc1baa560cb56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:79:bd:2c:c6:c2:20:46:bb:10:61:10:6e:e5:
d0:7c:dd:58:b7:a3:16:68:da:83:fa:74:59:a0:da:
b0:2d:12:7f:0f:aa:5f:de:70:fb:3d:f2:44:52:39:
c5:ec:61:51:77:3b:16:64:bc:fd:ee:73:7d:2f:1a:
4c:ae:4c:44:6b:a2:4f:90:90:bd:04:fd:8d:d4:ac:
e1:0e:31:dc:06:e1:29:89:c6:19:5e:8b:8c:a6:b8:
fb:32:ae:2b:3e:20:31:59:e2:f2:c1:b0:fe:9f:4e:
2e:4f:a0:c3:5b:39:3a:22:5b:0f:10:2b:75:93:9c:
b5:6f:13:91:26:c8:7a:44:46:01:db:18:1c:01:f4:
07:36:8f:27:32:b4:46:6e:5f:f6:dc:f7:b7:c5:b2:
e8:01:fb:d0:e9:b8:e3:d9:ae:f5:a8:74:13:35:91:
72:e0:da:e1:fb:b6:15:fb:6f:5b:fe:4f:6e:6f:ae:
e6:2a:6f:2f:7d:f6:c0:8e:21:97:8b:27:51:03:5d:
81:2c:6f:11:46:86:84:db:5e:ba:4e:c8:a1:43:c3:
db:13:0c:c6:fd:56:2f:06:53:cb:97:73:27:34:ef:
6a:59:6b:40:7d:a3:1c:0d:90:d6:51:af:31:29:78:
4f:e3:e6:1a:39:9a:23:54:dc:1d:15:00:44:45:21:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E0:4A:F9:18:B9:41:A3:4E:0A:2F:8B:C6:CC:1B:AA:56:0C:B5:6F
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/RuBK-Ri5QaNOCi-LxswbqlYMtW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.29.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4d:5d:9c:e4:2b:28:20:ed:25:d4:02:44:56:13:c6:94:5a:
68:22:b0:d2:82:13:96:72:e5:7c:44:43:e1:f1:25:69:ee:a8:
ad:74:5f:05:55:e0:7a:9a:66:43:cf:94:43:21:c6:2a:24:a5:
33:3c:89:52:4b:b8:6b:7f:46:8a:03:d9:5e:19:af:ac:50:25:
ff:c6:2a:02:d8:9b:92:e5:f6:c7:1c:5d:98:2e:04:20:f1:e1:
45:4a:f1:8e:91:b0:3d:61:50:b2:c6:ba:f2:37:9d:95:6e:f2:
3d:27:b1:cf:3a:bd:82:3b:c0:c6:c6:95:2f:4b:71:a6:9f:96:
a7:95:59:fe:b0:7b:9f:88:c0:89:5b:8c:9d:32:2f:1c:41:5b:
aa:84:b4:34:0a:c3:a4:a8:ad:35:5e:e3:e0:0d:a2:de:03:40:
51:3c:27:d7:c6:c1:7a:6d:84:a2:7f:bf:25:bb:d9:87:29:3a:
ef:37:32:2e:50:e3:aa:8a:d3:07:c0:48:3c:8b:c7:c9:80:90:
62:b8:06:5b:6b:60:13:ae:72:39:f8:b7:96:68:f6:0b:d2:8c:
80:18:46:f2:83:f0:0d:93:c6:cd:21:ba:64:29:23:4c:93:02:
f7:77:47:f1:b8:7b:0a:a3:c7:14:02:0a:e9:ad:fc:c8:61:45:
a0:c4:b8:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZENucdKIShkegYCIfqB3YM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQwODAxMTEzNjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmUwNGFmOTE4Yjk0MWEzNGUwYTJmOGJjNmNjMWJhYTU2MGNiNTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnm9LMbCIEa7EGEQbuXQfN1Yt6MW
aNqD+nRZoNqwLRJ/D6pf3nD7PfJEUjnF7GFRdzsWZLz97nN9LxpMrkxEa6JPkJC9
BP2N1KzhDjHcBuEpicYZXouMprj7Mq4rPiAxWeLywbD+n04uT6DDWzk6IlsPECt1
k5y1bxORJsh6REYB2xgcAfQHNo8nMrRGbl/23Pe3xbLoAfvQ6bjj2a71qHQTNZFy
4Nrh+7YV+29b/k9ub67mKm8vffbAjiGXiydRA12BLG8RRoaE2166TsihQ8PbEwzG
/VYvBlPLl3MnNO9qWWtAfaMcDZDWUa8xKXhP4+YaOZojVNwdFQBERSE+xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEbgSvkYuUGjTgovi8bMG6pWDLVvMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvUnVCSy1SaTVRYU5PQ2ktTHhzd2JxbFlNdFc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FAdMA0G
CSqGSIb3DQEBCwUAA4IBAQBKTV2c5CsoIO0l1AJEVhPGlFpoIrDSghOWcuV8REPh
8SVp7qitdF8FVeB6mmZDz5RDIcYqJKUzPIlSS7hrf0aKA9leGa+sUCX/xioC2JuS
5fbHHF2YLgQg8eFFSvGOkbA9YVCyxrryN52VbvI9J7HPOr2CO8DGxpUvS3Gmn5an
lVn+sHufiMCJW4ydMi8cQVuqhLQ0CsOkqK01XuPgDaLeA0BRPCfXxsF6bYSif78l
u9mHKTrvNzIuUOOqitMHwEg8i8fJgJBiuAZba2ATrnI5+LeWaPYL0oyAGEbyg/AN
k8bNIbpkKSNMkwL3d0fxuHsKo8cUAgrprfzIYUWgxLhA
-----END CERTIFICATE-----
Generated at Mon Aug 5 18:50:06 2024 by rpki-client on console-fra.rpki-client.org