Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/dVtbY4tlg-268IEIkNSxmpDctSY.roa
File: dVtbY4tlg-268IEIkNSxmpDctSY.roa (raw, json)
Hash identifier: rAerXftKP/z8iJmyO4kkMBZrnGwrzyK87tE6QuYcFS8=
Subject key identifier: 75:5B:5B:63:8B:65:83:ED:BA:F0:81:08:90:D4:B1:9A:90:DC:B5:26
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018D5E5B03F1749895CAF90323D19A795077
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/dVtbY4tlg-268IEIkNSxmpDctSY.roa
Signing time: Wed 31 Jan 2024 07:10:39 +0000
ROA not before: Wed 31 Jan 2024 07:10:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 212.80.18.0/23 maxlen: 23
212.80.18.0/24 maxlen: 24
212.80.19.0/24 maxlen: 24
212.80.20.0/22 maxlen: 22
212.80.20.0/24 maxlen: 24
212.80.21.0/24 maxlen: 24
212.80.22.0/24 maxlen: 24
212.80.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 11:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:5b:03:f1:74:98:95:ca:f9:03:23:d1:9a:79:50:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 31 07:10:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=755b5b638b6583edbaf0810890d4b19a90dcb526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:c1:93:fe:34:84:df:a1:af:42:65:34:15:
06:d3:8e:62:74:d9:c0:67:36:ae:7c:47:2c:38:09:
e8:e8:a9:42:b0:6b:a8:5c:76:f3:14:8d:de:7f:0b:
a9:13:7d:03:df:df:49:b2:5c:6e:8b:35:df:ad:b4:
3c:28:8e:ff:d3:52:83:52:30:4c:40:ff:94:7c:df:
51:86:fe:17:a1:dd:37:3a:05:cc:28:b7:bb:2d:97:
fe:1e:bf:0d:ee:7a:0b:26:0a:6d:d7:19:e1:70:05:
01:f5:a5:63:d1:dd:af:21:ba:ef:7c:f0:30:23:21:
05:7a:1f:08:4f:e9:92:8e:2e:b9:ab:8a:b2:aa:4b:
6b:ed:bc:f0:74:2f:bb:65:a6:08:b9:6a:01:34:d9:
4d:d1:0e:41:7f:54:f9:be:ab:f0:2c:d2:7b:ea:89:
48:71:5f:99:1c:64:a2:e3:94:95:45:08:ed:9d:25:
d9:b1:36:2d:bb:ed:09:9b:14:5b:7c:1a:66:c0:d5:
a2:31:2e:cf:0d:05:b8:29:4b:6c:28:9a:40:dd:69:
e2:ef:4d:22:60:39:74:7e:80:77:63:6d:0f:50:b6:
2c:85:8a:91:d6:06:9f:98:7f:e5:57:35:b5:7e:e6:
9e:de:cc:30:17:c3:c2:7d:57:92:8f:b0:64:c1:2d:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5B:5B:63:8B:65:83:ED:BA:F0:81:08:90:D4:B1:9A:90:DC:B5:26
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/dVtbY4tlg-268IEIkNSxmpDctSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.18.0-212.80.23.255
Signature Algorithm: sha256WithRSAEncryption
30:20:d1:01:00:bd:7c:ef:fc:d5:ee:46:df:f1:96:94:70:2b:
8b:eb:72:bd:2e:ac:61:07:fd:2c:8a:76:70:bd:23:0a:42:90:
9c:d2:dd:46:a8:89:3c:05:50:01:cf:f7:7f:6d:0e:46:71:f4:
3b:c7:c3:37:c7:81:2a:1f:aa:05:6c:5b:8d:d5:5c:8b:8d:28:
51:b5:17:cf:0b:fd:d1:8a:e1:66:58:fa:32:19:dd:82:92:36:
96:98:07:df:e2:ad:9d:54:40:b1:8d:89:0a:b7:11:e2:67:4f:
b1:c3:8c:c8:a6:04:76:8d:d6:95:64:06:2b:02:32:9b:d1:31:
ff:6e:a6:96:13:a5:cb:f7:cf:89:24:b5:ee:34:bc:66:1b:75:
54:df:5c:43:1e:c6:75:ad:21:7a:b1:fa:72:db:e2:3d:1f:7d:
83:98:c4:29:47:81:d3:c4:d9:0c:9d:9b:af:00:59:6a:20:f2:
88:1d:79:e0:47:03:ba:14:72:09:cc:63:66:7c:ad:48:55:99:
d0:72:98:83:6c:6f:d9:36:7e:7c:a7:22:11:1e:44:d5:05:74:
99:1a:6b:ec:90:5f:e6:11:7a:4d:49:8e:88:e3:f4:45:30:ca:
9c:a6:df:95:54:47:6d:cf:93:1a:28:12:ff:7d:cf:19:22:c6:
d4:b0:c8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:55:33 2024 by rpki-client on console-ams.rpki-client.org