Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/_bBioviCVeW0jdOTcWGz_ZkkXFM.roa
File: _bBioviCVeW0jdOTcWGz_ZkkXFM.roa (raw, json)
Hash identifier: lmTAKdGGp8Y+aSmfdEjMq6b33wPJV+9rkeDnxLZg7aU=
Subject key identifier: FD:B0:62:A2:F8:82:55:E5:B4:8D:D3:93:71:61:B3:FD:99:24:5C:53
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018570399220D4B07FBC722BCBE180EF86E5
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/_bBioviCVeW0jdOTcWGz_ZkkXFM.roa
Signing time: Mon 02 Jan 2023 02:04:59 +0000
ROA not before: Mon 02 Jan 2023 02:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201871
IP address blocks: 212.80.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:92:20:d4:b0:7f:bc:72:2b:cb:e1:80:ef:86:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 2 02:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdb062a2f88255e5b48dd3937161b3fd99245c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c6:7e:45:fb:97:64:32:84:93:b4:0b:88:87:
01:e6:28:8f:60:11:60:61:bf:3c:d0:7d:c0:b5:00:
2b:df:8d:92:ed:ba:92:d4:25:c6:d2:69:1d:ce:c1:
3d:47:77:92:82:79:3c:d2:5f:fd:94:7b:35:fb:8c:
47:26:67:45:f1:8d:3e:c0:0d:fe:52:6a:02:31:09:
bc:b8:37:ef:f2:c3:02:80:48:b0:a4:4d:34:c4:0f:
44:64:b8:ba:f6:6f:3f:1f:0b:c5:b1:73:a0:9e:ec:
5c:1f:05:38:13:64:08:2b:20:9b:0f:03:51:94:0f:
46:19:18:78:0f:0a:49:72:82:3d:62:66:3b:7f:73:
8a:5c:5b:15:72:91:5b:ab:af:09:17:ef:72:94:1d:
e1:6c:75:ae:bd:93:81:41:7d:55:45:0d:b4:2c:65:
e0:9d:a5:08:f1:cd:1f:88:97:c1:cd:ea:e7:c6:3c:
b3:89:e8:ef:85:42:08:cb:d7:ae:8a:1a:ce:a0:cd:
e3:26:1e:61:80:28:ca:48:08:77:72:eb:8e:93:86:
ec:a2:f2:aa:53:a3:25:4d:3f:2f:77:66:0f:d1:1b:
b2:ea:e9:68:db:66:9f:d5:48:08:d0:56:11:cd:1b:
c1:9a:17:82:aa:0b:77:63:c2:cd:88:3b:6e:de:46:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B0:62:A2:F8:82:55:E5:B4:8D:D3:93:71:61:B3:FD:99:24:5C:53
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/_bBioviCVeW0jdOTcWGz_ZkkXFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:87:7d:67:28:c5:03:e3:03:99:6a:e4:04:74:96:8c:ba:aa:
6c:23:83:02:ba:9d:2d:66:b7:94:1b:e0:03:20:7f:63:49:33:
f6:17:ec:4c:4f:12:48:a6:91:0f:b8:e3:24:0a:5b:fa:27:7b:
ed:40:40:a0:a4:de:04:26:ed:29:d6:df:dc:4f:8f:f2:43:d8:
c0:90:49:6d:83:cc:f8:ee:1a:7c:88:95:4e:90:65:9b:86:4e:
e0:cd:9d:f2:3c:28:07:ef:f8:59:14:66:2c:df:ee:6d:3c:7f:
b4:1b:d0:af:05:4a:fc:95:5b:43:8e:5c:50:1d:0e:66:07:0a:
a0:a0:c1:71:1b:21:70:39:c5:7b:9e:08:9e:a3:d4:11:bf:0e:
15:0d:c2:dc:18:f1:ac:e1:26:94:29:fb:f0:15:2f:6a:44:15:
d8:2f:a3:b4:b9:e1:a3:9d:ba:d6:74:65:97:10:14:b5:d6:09:
96:e8:22:0e:62:d8:47:ae:e2:0c:5e:06:ef:7a:51:68:d2:b5:
61:0d:d8:2a:b4:dd:6b:14:56:c2:71:de:7c:ea:31:79:b5:b8:
fb:6f:4a:da:b4:11:69:94:07:4c:2a:3c:5f:e9:31:e6:01:70:
c5:5e:15:85:35:0a:f8:c9:4d:74:2e:73:77:48:df:05:48:e4:
53:ac:7f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:48 2024 by rpki-client on console-ams.rpki-client.org