Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/mKxVHj7wJlXDJh8xAEIbnM-kauQ.roa
File: mKxVHj7wJlXDJh8xAEIbnM-kauQ.roa (raw, json)
Hash identifier: FaOjCWO1WR5AfnGpH+KRanjZ++z0SEq42hJWp3doo0w=
Subject key identifier: 98:AC:55:1E:3E:F0:26:55:C3:26:1F:31:00:42:1B:9C:CF:A4:6A:E4
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0191237DAE851DF1EFF884586C7E0619A614
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/mKxVHj7wJlXDJh8xAEIbnM-kauQ.roa
Signing time: Mon 05 Aug 2024 17:02:04 +0000
ROA not before: Mon 05 Aug 2024 17:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397373
IP address blocks: 212.80.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Oct 2024 10:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:7d:ae:85:1d:f1:ef:f8:84:58:6c:7e:06:19:a6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Aug 5 17:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98ac551e3ef02655c3261f3100421b9ccfa46ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:5c:3c:31:fb:5e:cd:ab:84:52:89:2e:ef:
47:c2:23:15:fd:9f:80:b1:9c:83:bd:5f:3e:96:23:
04:1a:95:c9:ab:5a:9c:27:6a:79:29:d7:02:d5:9e:
96:f8:ae:f7:14:d9:1b:ee:ce:cc:bb:27:09:17:f4:
4e:c0:7d:2d:94:6a:44:ae:8c:92:cb:04:99:dd:2c:
1d:bd:9e:c1:25:f0:6b:41:31:9d:72:45:e2:42:79:
0e:fa:d7:2a:bd:da:d1:ee:aa:94:90:c9:51:46:a6:
95:cf:f6:39:2a:26:08:09:04:d9:ff:7b:33:c7:ca:
6f:0f:d8:eb:13:d1:bd:ea:d8:b7:4f:16:a9:1b:68:
53:f6:5f:fe:72:f8:80:03:24:f8:ad:23:ec:f0:8d:
c8:4c:cf:96:07:53:69:51:85:22:e9:c4:8f:f4:63:
2a:a8:b7:26:f2:b7:18:7c:ec:b3:53:19:47:f7:c5:
00:ac:37:52:24:9a:a1:b5:70:75:b7:13:ee:5d:bd:
c7:9c:48:07:f3:54:5b:48:c2:52:0b:d8:00:69:37:
4e:5a:d3:3b:5d:fe:66:43:ed:dd:fc:7e:36:a8:ac:
be:59:ed:61:09:da:96:88:53:f9:0f:f3:a7:9e:bd:
3b:8c:61:8d:6e:e4:fa:4b:6f:b2:0a:14:0c:1d:1c:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:55:1E:3E:F0:26:55:C3:26:1F:31:00:42:1B:9C:CF:A4:6A:E4
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/mKxVHj7wJlXDJh8xAEIbnM-kauQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.29.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b8:da:eb:4b:cc:8d:54:c7:42:74:21:80:ad:d1:14:d9:87:
ba:b0:13:50:75:7d:41:9e:5c:78:49:5f:09:08:a5:d5:98:d1:
9f:9b:79:1d:71:85:40:ae:25:fc:73:b3:c4:67:fc:92:63:be:
24:37:e5:23:e1:5b:55:fb:a5:a4:cf:61:68:4f:4e:76:af:1d:
e7:e9:c8:2c:73:f0:89:df:ab:e6:f0:e6:c2:1b:62:ee:a0:b5:
17:26:3d:fe:04:98:30:68:9e:e4:71:5d:32:3f:0f:ff:ab:fb:
3d:bc:37:be:0e:c9:47:22:c3:f2:34:12:61:f3:fb:38:a7:fd:
6e:c7:19:67:84:18:a2:65:9c:7e:e7:76:86:79:40:0f:a9:11:
fb:7e:16:ca:1f:fe:ea:d3:bc:ed:f2:e4:44:dc:79:c2:20:f6:
01:a4:86:86:55:14:63:07:b8:71:3e:5a:aa:60:6b:0a:8d:f2:
ff:c6:48:00:17:da:57:2d:43:67:26:0f:02:a7:84:28:a0:5a:
bc:1c:cd:f1:94:c0:4a:c1:ce:25:7a:80:d4:3b:63:05:6b:5c:
6a:e2:de:71:9e:1c:79:20:d3:10:cb:f1:45:4b:f8:2c:f2:e6:
50:a4:3f:7a:b4:8e:2f:61:91:28:cb:b7:cd:66:e7:66:eb:c7:
a9:38:2c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 12:43:51 2024 by rpki-client on console-ams.rpki-client.org