Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ohIJpDwl0xJiZE0w-Ns-065oXwY.roa
File: ohIJpDwl0xJiZE0w-Ns-065oXwY.roa (raw, json)
Hash identifier: pNGPnkEjliEmjCEE5zWwKEhphVXGfNAnvXCg4MSpz7c=
Subject key identifier: A2:12:09:A4:3C:25:D3:12:62:64:4D:30:F8:DB:3E:D3:AE:68:5F:06
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DDA1DE358390BD1EA02A3E2C57D4943AA
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ohIJpDwl0xJiZE0w-Ns-065oXwY.roa
Signing time: Sat 24 Feb 2024 07:56:48 +0000
ROA not before: Sat 24 Feb 2024 07:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 212.80.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 24 Feb 2024 14:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:da:1d:e3:58:39:0b:d1:ea:02:a3:e2:c5:7d:49:43:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 24 07:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a21209a43c25d31262644d30f8db3ed3ae685f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:fe:fc:8b:10:a8:9e:a5:8e:b3:37:74:6c:
08:9d:ac:86:64:8b:cc:fb:a8:87:b2:6d:64:30:a5:
97:10:0c:b0:47:8d:a4:05:28:93:27:66:d8:55:12:
d3:59:01:e0:25:22:3e:18:54:94:13:d1:55:d9:af:
61:25:6e:22:2e:f5:74:cf:53:e5:6b:dd:fa:f5:dc:
19:62:17:08:39:e3:d9:86:ac:18:71:37:4a:6b:15:
5a:b0:af:c9:3b:90:ca:2c:c4:94:dc:4d:19:19:37:
9a:aa:c6:0e:fb:ec:6e:b8:b6:d0:06:ac:96:0f:c3:
60:89:cb:a2:15:d9:75:94:97:7a:27:98:73:3e:14:
7c:e2:f7:be:d7:b5:06:c8:d1:bd:fe:59:3c:b2:34:
44:63:01:aa:d6:8a:4d:89:42:ce:64:53:a9:8e:63:
ab:f1:fe:34:d5:7d:0b:fa:9f:1a:65:b8:92:a9:0d:
47:b5:ad:77:56:da:9a:9e:9f:65:9f:be:70:d4:99:
cc:91:55:20:0c:1b:6c:6d:ed:ed:3c:ce:12:20:82:
f9:2f:66:5c:6a:4f:38:61:ff:ba:5f:d9:5c:2c:2a:
e2:8a:c7:99:ca:c8:75:bd:56:1c:a9:14:47:91:5c:
e0:e7:c3:8f:1b:7b:23:e4:20:5c:9f:51:09:15:71:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:12:09:A4:3C:25:D3:12:62:64:4D:30:F8:DB:3E:D3:AE:68:5F:06
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ohIJpDwl0xJiZE0w-Ns-065oXwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.8.0/22
Signature Algorithm: sha256WithRSAEncryption
54:a3:cb:44:af:37:38:65:f1:00:84:01:2b:68:f9:e3:9a:ca:
22:09:be:7f:97:9c:6b:a4:ab:e6:91:81:5c:30:2a:da:5e:f8:
e2:7d:5d:d1:1b:c2:b4:74:42:7b:08:ba:3f:9a:e2:f2:6b:cb:
c9:7c:82:d1:0a:5d:8d:11:8c:f7:61:6d:54:a7:d7:49:69:7f:
8e:aa:1f:ae:e9:4d:82:ad:10:7b:51:73:1f:06:35:4f:dd:1b:
5e:8a:3f:2a:bd:e5:63:5b:0e:52:ee:04:07:53:11:dd:70:5c:
36:ea:24:ee:c0:5b:f6:eb:69:25:da:1c:e6:cf:71:7c:4b:1e:
9c:7f:0a:cd:de:5e:35:4d:e9:8f:84:24:2c:65:c3:2d:bb:8a:
72:96:e2:fd:d4:69:28:2e:a1:5d:65:6a:29:a8:81:e4:79:f7:
cc:7c:d4:2b:36:f6:b6:87:e2:5c:8c:3e:8d:07:bc:da:c6:79:
e9:59:0f:c7:c3:23:ab:87:ed:18:6c:d7:16:87:2d:16:3c:63:
40:b6:26:89:8f:3c:62:63:ff:99:8c:48:cd:83:9a:f9:93:4d:
45:13:7a:17:27:30:5e:03:f7:56:79:75:28:9e:35:12:ec:85:
32:75:99:4a:a5:45:5e:a1:26:aa:e9:2f:30:31:40:66:aa:3b:
84:2d:99:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:07 2024 by rpki-client on console-ams.rpki-client.org