Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/gvhO7_jOpFoCvFaJu5BA1rw7HgU.roa
File: gvhO7_jOpFoCvFaJu5BA1rw7HgU.roa (raw, json)
Hash identifier: 6TWLayZVdZe7AolmRNHfl5C9FSLArE/70U34SIuKIRM=
Subject key identifier: 82:F8:4E:EF:F8:CE:A4:5A:02:BC:56:89:BB:90:40:D6:BC:3B:1E:05
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018D9D28525569DB1A6865A5557E552F0C5D
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/gvhO7_jOpFoCvFaJu5BA1rw7HgU.roa
Signing time: Mon 12 Feb 2024 11:51:21 +0000
ROA not before: Mon 12 Feb 2024 11:51:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36113
IP address blocks: 212.16.92.0/24 maxlen: 24
212.16.94.0/24 maxlen: 24
212.80.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 09:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:28:52:55:69:db:1a:68:65:a5:55:7e:55:2f:0c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 12 11:51:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82f84eeff8cea45a02bc5689bb9040d6bc3b1e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:02:2e:37:f0:30:d6:d6:ac:3a:da:b3:48:eb:
d3:21:50:80:79:25:60:c5:d2:52:19:91:0d:2e:70:
d6:db:4b:f4:4f:15:1c:04:32:52:4a:2e:66:01:85:
b3:8a:5e:dd:92:70:25:10:d0:b2:5d:c9:d7:b2:10:
05:e3:70:29:4c:3e:7a:b1:de:9f:f5:c4:dd:39:c1:
15:53:e1:3e:13:c0:c7:04:18:21:12:b7:5a:b8:e3:
fb:a4:e6:b6:12:cf:3e:ce:e7:10:75:21:fb:f5:a4:
21:71:1f:23:28:91:4b:f3:70:1a:95:70:91:81:43:
1e:9f:1c:c1:a4:a4:ee:df:69:ad:0f:54:3e:17:34:
e9:03:6a:81:9a:70:3d:3e:21:f6:f4:cd:25:6e:fb:
09:3c:72:be:88:49:2e:07:60:73:74:ca:70:65:29:
47:f7:ae:a0:94:65:71:e5:81:b6:8d:80:b0:91:bb:
3b:ed:53:c5:6e:e5:61:b2:13:d1:53:8b:0e:c2:73:
6f:be:56:41:a3:16:b2:91:32:5e:16:e5:82:03:27:
0b:ac:5c:f3:35:27:bf:5e:07:da:50:d3:06:d8:de:
4b:cb:89:fc:f0:14:87:01:68:7c:77:a1:b0:52:7e:
89:65:95:18:a1:26:df:3a:0a:a0:5a:03:72:61:92:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F8:4E:EF:F8:CE:A4:5A:02:BC:56:89:BB:90:40:D6:BC:3B:1E:05
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/gvhO7_jOpFoCvFaJu5BA1rw7HgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.92.0/24
212.16.94.0/24
212.80.0.0/24
Signature Algorithm: sha256WithRSAEncryption
80:98:f9:93:a5:a7:32:f2:ea:b7:d0:25:76:3e:81:1c:12:46:
0a:1b:a6:e0:ba:a3:4d:8e:6f:2d:84:c7:d9:a0:c0:89:be:bb:
94:18:0b:19:84:48:5c:9e:0a:3f:e3:e4:29:21:5f:07:73:a6:
b8:95:ef:04:0a:52:02:e5:0e:e3:67:96:85:a0:b1:bc:75:a5:
29:a4:bf:0b:fb:d6:f8:3a:ec:b4:02:6b:4b:57:10:05:8a:36:
db:c3:e0:97:37:e5:3b:db:63:a2:65:5e:a0:ee:9d:be:e9:df:
5e:5c:88:85:74:68:54:8a:2f:77:2d:68:e0:77:cb:59:76:0e:
75:39:c4:60:78:11:5a:e4:a7:51:6c:db:82:11:50:a9:b2:e4:
55:22:72:00:0e:68:55:6c:35:8f:da:cb:e9:73:d7:e7:7e:eb:
70:c1:e3:89:64:fa:b4:3a:50:26:33:1f:fb:6a:02:23:cb:57:
47:56:67:19:69:ed:cd:07:bd:0d:6c:6e:6a:1e:c6:ec:71:35:
12:f9:f5:ec:5a:91:de:94:81:10:c8:57:b7:7a:9f:d7:48:ae:
da:d2:03:8d:6b:a9:56:e8:d4:1b:c0:e4:5e:8f:ef:e1:df:a1:
d4:9c:31:c1:6d:db:58:a0:a8:9e:36:29:d0:7d:1d:0b:00:be:
fc:a2:6f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org