Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/UBG8yi_qqf22UIWkeP4q68Usm6s.roa
File: UBG8yi_qqf22UIWkeP4q68Usm6s.roa (raw, json)
Hash identifier: afj2yNJ5m1lOwt4K8/Xi1byQMmGyd3yI7HBiWdMv7d8=
Subject key identifier: 50:11:BC:CA:2F:EA:A9:FD:B6:50:85:A4:78:FE:2A:EB:C5:2C:9B:AB
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018CC50076230818378343E6E5BDDAABE274
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/UBG8yi_qqf22UIWkeP4q68Usm6s.roa
Signing time: Mon 01 Jan 2024 12:29:50 +0000
ROA not before: Mon 01 Jan 2024 12:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 212.80.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 12:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:76:23:08:18:37:83:43:e6:e5:bd:da:ab:e2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 12:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5011bcca2feaa9fdb65085a478fe2aebc52c9bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:e2:c0:ab:16:55:c5:08:39:05:f9:d8:bc:
c4:52:57:f5:78:7d:f0:d3:f1:22:83:11:0f:63:aa:
e7:d4:0f:61:d1:c5:30:17:37:db:47:7c:da:a0:22:
49:64:11:e6:29:35:8e:b6:c1:fe:09:82:5b:45:46:
87:0b:e4:f5:6b:d6:91:b3:06:f3:b1:a0:d5:20:ad:
e2:60:d1:6d:22:c2:c8:52:f3:8d:b8:22:10:80:c9:
4a:d3:51:fc:16:40:f9:dc:a7:5c:18:b5:24:c1:e2:
f2:0f:9c:fa:0f:f6:95:28:a4:34:f7:5f:e6:60:cb:
07:36:6e:db:9c:46:a6:22:fd:57:90:ea:6c:1b:cd:
4c:49:38:04:9b:2f:e7:fb:19:e6:35:1d:c4:7b:56:
48:34:13:1f:2e:4f:51:18:9f:bb:ac:3b:3a:32:ee:
91:5f:16:a7:7c:05:6d:0a:93:7e:08:c5:74:66:fa:
01:18:97:64:56:4b:e3:93:72:c4:31:7b:24:28:01:
fa:44:4c:6a:14:6f:f1:34:aa:eb:bb:43:88:0c:1b:
3c:48:62:1d:7e:9c:ba:03:ee:22:d3:5c:3b:44:c1:
9b:05:6a:7f:a5:03:8c:9a:62:99:16:bb:de:38:0b:
34:a6:c6:d0:47:49:5d:e5:25:f5:a4:e8:79:7f:f1:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:11:BC:CA:2F:EA:A9:FD:B6:50:85:A4:78:FE:2A:EB:C5:2C:9B:AB
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/UBG8yi_qqf22UIWkeP4q68Usm6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.24.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ad:fc:f7:80:c3:7c:53:e6:7f:01:06:2e:8c:b3:f3:ab:05:
fe:8f:7c:20:ab:4a:09:26:16:e3:dd:d8:a8:9b:f4:27:21:66:
d7:06:58:92:89:b4:a6:66:4e:06:45:7e:c6:33:a0:47:ad:fd:
7d:05:6b:d9:43:1a:b9:5c:f0:69:ec:57:dd:b7:8c:d5:1c:f0:
5b:10:06:5d:4b:dd:fb:f6:1d:1b:f5:e5:ea:cc:b5:d6:70:0e:
33:0a:6c:23:9d:28:a6:f5:a9:71:2a:43:72:89:dc:4f:12:c3:
3f:63:80:fe:23:08:63:0e:88:6c:23:84:9d:3c:24:b5:fc:1c:
9a:30:3e:94:3e:34:ef:1a:ca:1f:be:f8:89:2a:09:af:6a:0e:
d8:45:1b:c6:dc:aa:f0:18:45:15:c3:71:98:63:14:3f:9d:62:
37:da:89:fb:e6:05:df:cf:30:64:0b:0a:d2:e8:20:a1:4b:3c:
56:b3:01:fe:d0:2c:2c:34:7e:b7:c7:53:38:28:74:a6:fe:eb:
08:3c:34:44:fb:6e:c5:9e:b2:f6:c6:94:af:b9:9a:03:f1:2e:
40:91:e3:2b:7b:39:7e:d9:45:c2:6d:1d:96:02:c1:3d:dc:84:
6b:a8:d8:5c:d4:27:04:d6:e8:74:25:b9:09:6d:f0:78:a0:d0:
c6:fb:85:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 16:52:06 2024 by rpki-client on console-ams.rpki-client.org