Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/uUUEcvwUIvp3Jncpj9HJXUdtK-c.roa
File: uUUEcvwUIvp3Jncpj9HJXUdtK-c.roa (raw, json)
Hash identifier: VXvrZisIq56EuPBLZ44nKKdrYvXSweQy69G+Q+PRI4Q=
Subject key identifier: B9:45:04:72:FC:14:22:FA:77:26:77:29:8F:D1:C9:5D:47:6D:2B:E7
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018E13216B6D8E27462B48D668E80F79F02A
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/uUUEcvwUIvp3Jncpj9HJXUdtK-c.roa
Signing time: Wed 06 Mar 2024 09:39:01 +0000
ROA not before: Wed 06 Mar 2024 09:39:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43754
IP address blocks: 212.80.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jun 2024 12:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:21:6b:6d:8e:27:46:2b:48:d6:68:e8:0f:79:f0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Mar 6 09:39:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9450472fc1422fa772677298fd1c95d476d2be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bd:8d:be:6e:65:89:2a:26:c2:7d:4f:82:2f:
93:ea:ee:59:0d:40:c4:39:ef:77:f2:43:29:7b:ab:
b5:8a:c8:53:47:01:92:56:b3:47:cd:9b:d2:51:4d:
b5:85:f0:32:3f:89:74:cc:83:9e:d0:48:c4:72:7b:
a0:75:b1:c8:3d:c8:b2:b2:27:6e:36:1f:86:9f:dc:
f9:9f:d0:a7:4e:92:8c:e3:e0:c7:6d:5a:74:53:3f:
0b:aa:17:67:c8:c3:72:ff:3d:09:69:51:32:fb:db:
54:c1:9f:fa:ae:f5:fa:a2:df:58:2d:a5:7a:50:a1:
e5:df:e1:09:f5:65:05:0a:dc:b7:e8:32:f8:68:50:
84:64:0c:76:b0:3a:31:93:78:57:be:4e:f7:92:80:
bf:e8:6e:6d:de:fe:bc:08:9b:6a:dd:4c:8f:b5:38:
c9:55:db:51:87:75:a6:db:0f:ea:8a:44:f4:39:76:
36:69:50:c8:2a:98:f7:03:d2:1e:7a:b9:71:3a:c0:
4e:2d:18:18:18:9f:29:6e:5b:78:a8:1e:95:f5:f0:
1b:ce:e7:bf:27:c6:e2:6b:16:7b:3b:0e:af:2a:18:
b2:cf:6b:69:ca:ea:90:bf:0e:99:3d:d0:40:75:7e:
22:cd:32:81:d5:27:80:49:63:4c:77:c9:60:45:26:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:45:04:72:FC:14:22:FA:77:26:77:29:8F:D1:C9:5D:47:6D:2B:E7
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/uUUEcvwUIvp3Jncpj9HJXUdtK-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.10.0/24
Signature Algorithm: sha256WithRSAEncryption
82:89:93:02:82:ba:32:c6:4c:90:42:04:58:45:4a:a1:8a:35:
fc:61:37:bd:be:69:f3:47:e3:e3:ce:bc:ae:29:ea:2b:4a:66:
78:e2:74:f9:04:78:73:30:c0:33:ab:f6:bb:87:31:4e:37:24:
9f:ad:66:79:3d:de:f8:fe:72:c7:f0:66:c0:b7:b0:2a:92:c8:
d9:be:05:e6:87:6b:f2:80:72:cf:aa:6e:2d:74:2a:65:bc:58:
ed:a0:7d:c9:e5:f9:f1:84:fb:82:5c:2f:8e:6b:cc:ac:1d:62:
2a:ae:d9:3a:f4:ba:ff:0c:c0:ad:fd:5d:6c:e7:f9:9c:9f:22:
b3:3e:3e:ce:49:ad:94:76:aa:64:26:a9:6f:c0:bf:c3:e9:8e:
35:21:ac:00:e6:07:34:b2:7e:a8:1b:45:b9:89:cf:46:4b:bc:
82:8e:bc:ea:f9:a1:67:c7:93:68:3d:73:b6:64:3f:46:bc:5a:
27:1e:1b:1f:dc:67:c8:a5:bb:8c:83:d1:87:88:48:6f:ba:2d:
51:2c:69:a4:0d:a8:b6:ba:31:75:8f:fa:d9:cf:3e:91:1e:f1:
ef:d8:71:c5:23:fc:99:1c:31:d3:e7:3c:bd:45:f5:88:1c:78:
77:d0:31:69:a0:e9:20:0d:ce:a4:38:dd:19:5c:a7:c9:0f:bd:
a2:c7:cb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 13:19:41 2024 by rpki-client on console-ams.rpki-client.org