Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/rlrg8jl2mcF7SO8nHVauIT0QgtQ.roa
File: rlrg8jl2mcF7SO8nHVauIT0QgtQ.roa (raw, json)
Hash identifier: FNYprxrEIjVXvHcX2HLLaLUjhqusHnm4rs+yiMMB3JI=
Subject key identifier: AE:5A:E0:F2:39:76:99:C1:7B:48:EF:27:1D:56:AE:21:3D:10:82:D4
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018D5F61C646E4DD0F9C252F9A0496F5DEA6
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/rlrg8jl2mcF7SO8nHVauIT0QgtQ.roa
Signing time: Wed 31 Jan 2024 11:57:39 +0000
ROA not before: Wed 31 Jan 2024 11:57:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 212.80.18.0/23 maxlen: 23
212.80.18.0/24 maxlen: 24
212.80.19.0/24 maxlen: 24
212.80.20.0/22 maxlen: 22
212.80.20.0/24 maxlen: 24
212.80.21.0/24 maxlen: 24
212.80.22.0/24 maxlen: 24
212.80.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 11:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:61:c6:46:e4:dd:0f:9c:25:2f:9a:04:96:f5:de:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 31 11:57:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae5ae0f2397699c17b48ef271d56ae213d1082d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:6b:9f:59:34:63:d7:13:02:e8:9b:ec:7a:
95:a5:fe:8e:56:4b:85:39:cc:4b:db:32:66:85:22:
23:d9:d2:12:69:e2:68:fe:a6:b2:b7:8c:fd:1d:2f:
19:c6:0e:eb:ab:1e:69:83:ce:46:9f:9f:0e:70:92:
af:df:21:3c:69:2b:4b:3c:74:28:a2:fb:8d:2c:96:
68:24:88:7a:a2:80:76:6b:c2:79:aa:33:c2:8d:9c:
a2:80:d5:6c:67:25:df:73:db:b4:63:be:d3:01:7b:
0b:00:1e:b5:fe:f2:c6:b0:d2:22:ae:7d:c5:3f:8d:
24:24:aa:66:ac:f1:ab:9c:7a:48:18:9c:b0:e9:25:
e1:81:79:ef:48:c2:ff:38:42:98:84:dd:d4:14:73:
af:83:d8:58:0c:77:fa:2a:1f:52:da:b8:95:9b:2d:
22:2e:22:6a:5f:ff:57:9e:79:e1:8b:6a:00:73:7e:
e8:40:c9:e3:83:a8:16:84:34:c9:55:10:90:c0:0f:
49:2c:b9:fa:4a:f4:ae:ae:27:b6:56:67:1a:d0:bc:
1f:ec:1b:0d:89:4c:ee:b5:d9:b4:7e:9b:87:03:47:
cf:a8:74:7e:74:75:eb:51:af:81:e7:dc:40:0e:54:
1e:d8:d6:f2:5e:b8:3d:71:2d:27:65:ee:d2:28:f8:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5A:E0:F2:39:76:99:C1:7B:48:EF:27:1D:56:AE:21:3D:10:82:D4
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/rlrg8jl2mcF7SO8nHVauIT0QgtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.18.0-212.80.23.255
Signature Algorithm: sha256WithRSAEncryption
82:37:bf:80:68:46:d4:9d:b3:53:0e:7b:0b:71:06:bb:a4:01:
41:f2:10:fe:b1:d0:b9:89:49:0e:3d:06:be:d2:ae:75:f7:91:
91:e7:a2:0c:d2:d7:83:02:fb:1a:76:75:7f:4a:77:1d:0c:cd:
6d:a3:e1:6e:dc:ca:96:db:0c:72:78:58:02:dd:54:40:a2:69:
6d:bd:2b:39:ca:72:96:bf:29:e2:9b:59:6c:90:dc:b3:fa:6e:
a1:0b:dd:e5:e7:32:50:ac:87:02:bb:1a:59:78:6b:e0:cd:8c:
e4:ec:49:53:a8:e3:92:b4:e3:6a:47:a0:98:7c:32:6c:ed:b7:
3d:26:5c:6b:f7:b2:83:30:cf:65:85:60:7a:09:8e:6c:78:49:
bf:b4:b8:a7:62:59:d1:8a:27:20:51:dd:50:8e:99:81:b4:6c:
ee:35:8f:f4:4e:6e:7b:8c:e4:13:bc:3b:1c:3e:bd:d5:13:78:
93:da:bd:21:b5:4b:38:03:12:4e:26:52:15:d4:da:ec:29:5b:
0d:ed:9f:a2:cc:ac:91:e2:84:a2:cd:62:2e:6a:f5:83:db:6e:
99:c5:e7:1a:05:3f:65:e1:46:93:8c:71:42:da:2e:cb:83:f1:
7d:11:2d:39:81:56:6b:b6:ee:b2:ed:98:af:9b:90:e7:6a:67:
3c:42:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 15:26:12 2024 by rpki-client on console-ams.rpki-client.org