Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/f9aJCfO1-HEePVAmDReSOTXqji4.roa
File: f9aJCfO1-HEePVAmDReSOTXqji4.roa (raw, json)
Hash identifier: nm3Ddlh5Q7DXPezI+OsXZBfuErtLrlzOocvoGIVyeSo=
Subject key identifier: 7F:D6:89:09:F3:B5:F8:71:1E:3D:50:26:0D:17:92:39:35:EA:8E:2E
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018BAFDA78A021385059748249622E2DE597
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/f9aJCfO1-HEePVAmDReSOTXqji4.roa
Signing time: Wed 08 Nov 2023 16:53:32 +0000
ROA not before: Wed 08 Nov 2023 16:53:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64458
IP address blocks: 212.80.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 14 Dec 2023 07:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:da:78:a0:21:38:50:59:74:82:49:62:2e:2d:e5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Nov 8 16:53:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fd68909f3b5f8711e3d50260d17923935ea8e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:7e:61:0d:c5:31:ee:6d:54:04:4d:c8:e0:
49:7a:fd:3e:5b:1a:a7:27:23:20:2a:08:fc:27:37:
a5:9e:25:dd:8d:6e:e8:b6:d0:f4:d0:e5:3a:6f:e4:
a2:00:b7:5c:94:18:82:42:5e:6b:92:13:1d:83:a1:
f2:16:9d:eb:5e:db:d8:f0:55:5f:48:79:ab:75:c5:
7c:0d:17:50:44:b5:76:50:86:23:39:b8:46:65:3a:
40:b5:78:ff:03:50:8f:52:d1:12:24:86:07:ad:1f:
54:50:06:d1:7c:b6:4c:cb:c3:dd:ed:ce:f2:73:65:
52:7b:ed:b6:e3:49:59:d4:a9:67:07:52:9d:6e:e3:
fb:5c:20:70:f8:2f:8b:b6:72:cf:65:fe:43:0f:9a:
b3:69:45:53:7a:93:e4:95:79:e9:93:25:e0:47:fb:
c9:06:3f:45:4d:75:f4:a0:0e:cc:e7:f2:24:9a:df:
73:9b:59:73:cf:89:eb:ce:a8:ef:64:02:3c:51:73:
15:9e:cb:0e:67:f9:19:58:51:87:71:ec:4c:ec:e6:
32:d2:f8:89:6d:d3:88:2b:23:af:c6:4f:66:89:07:
be:05:a4:f6:09:85:b2:1e:56:4c:6e:10:80:fd:58:
d5:5d:ad:a5:ff:bd:52:23:ce:0a:83:c2:78:76:74:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D6:89:09:F3:B5:F8:71:1E:3D:50:26:0D:17:92:39:35:EA:8E:2E
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/f9aJCfO1-HEePVAmDReSOTXqji4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.8.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:00:97:b9:f8:30:a5:33:3a:2c:5f:9e:8d:62:3b:86:e5:fa:
c4:75:a4:2f:e2:a0:8f:c1:39:b6:f3:8e:75:c3:f7:84:90:50:
c3:ff:ef:fd:3f:84:82:64:b8:bd:ef:1f:11:bf:91:df:45:0d:
b5:7e:d5:87:37:c0:5f:7f:d4:7b:d8:53:77:16:31:3d:fa:7b:
5d:38:2d:ca:aa:62:dc:8e:b7:dd:4d:2a:02:50:9d:66:50:68:
62:e2:6f:72:62:77:44:65:66:42:8d:09:fd:d7:68:81:10:62:
70:63:cc:67:53:a2:01:37:1f:0b:3d:0e:fa:2a:99:3c:a6:72:
b2:19:99:ba:f2:4e:ae:17:15:38:4d:4e:ae:02:9c:83:92:3a:
a7:5b:56:d6:75:2b:93:79:7b:3f:e8:76:3b:13:08:db:3d:f5:
04:7a:75:7a:f1:de:ef:b9:05:b3:1a:e0:7b:a7:fb:01:fd:e3:
19:24:44:0e:a2:62:46:25:00:a4:49:5f:d2:47:e3:d5:78:98:
b0:05:6e:2f:c2:77:b3:60:42:6c:c6:3d:56:a4:8a:f5:f9:0d:
eb:de:ae:32:8f:8f:24:d2:0f:a2:95:ad:b1:27:44:df:c5:df:
25:88:88:7c:13:93:98:62:da:2d:9e:19:8f:40:73:ff:ba:06:
3d:0d:ae:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org