Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/w0qxFVqXqsSaGluWXyoAoVo2YK8.roa
File: w0qxFVqXqsSaGluWXyoAoVo2YK8.roa (raw, json)
Hash identifier: 4cxOs8vTq0dpE4B+0jY07jQVSIjz/nc4AL5E9wMzHNg=
Subject key identifier: C3:4A:B1:15:5A:97:AA:C4:9A:1A:5B:96:5F:2A:00:A1:5A:36:60:AF
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019049C06C3C7D1BB063BFC62A36EF447D6E
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/w0qxFVqXqsSaGluWXyoAoVo2YK8.roa
Signing time: Mon 24 Jun 2024 10:17:45 +0000
ROA not before: Mon 24 Jun 2024 10:17:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39650
IP address blocks: 212.80.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jun 2024 14:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:c0:6c:3c:7d:1b:b0:63:bf:c6:2a:36:ef:44:7d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jun 24 10:17:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c34ab1155a97aac49a1a5b965f2a00a15a3660af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:71:c0:ce:86:f9:fa:76:de:17:4b:96:13:
d5:e9:b9:a6:a0:5d:35:90:dd:97:42:35:d8:ef:cf:
2c:7b:fd:c2:8e:86:55:a3:34:7e:78:7b:9b:4f:4d:
5c:57:bc:0e:e3:4c:8e:99:54:34:f6:d9:db:58:02:
77:bd:5f:1a:c7:8b:7c:a3:3d:46:37:c1:b0:66:11:
cf:23:db:0a:3c:0c:5b:ef:b3:a0:51:43:4c:5a:23:
a2:9e:87:15:a5:52:80:6c:d6:84:c0:5c:4c:19:4e:
f1:9f:85:57:d9:ff:53:ed:5c:02:bf:b7:74:f5:30:
58:4b:5a:9c:15:fe:1b:7b:d5:08:53:ba:4b:5c:bf:
11:87:e3:ee:8a:15:84:5c:6d:e9:86:00:1b:fb:ea:
0e:d7:46:50:f7:99:f7:94:cf:aa:dc:54:be:28:62:
00:01:4b:b4:2e:f7:d1:ea:89:e8:7b:b1:01:97:ff:
28:6a:ab:d7:c9:f6:25:0b:2a:c3:cf:40:84:29:95:
59:15:4f:36:db:3b:01:69:5e:87:38:ad:7c:77:80:
4d:24:1f:9a:f3:a3:36:27:4f:2c:7f:92:d0:0f:11:
f2:f7:ef:12:2a:6b:63:02:f0:e9:55:d4:d6:65:68:
67:d3:6f:da:55:7a:52:99:73:04:b1:00:22:de:8d:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4A:B1:15:5A:97:AA:C4:9A:1A:5B:96:5F:2A:00:A1:5A:36:60:AF
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/w0qxFVqXqsSaGluWXyoAoVo2YK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:83:61:cf:47:1e:57:f9:c5:99:58:07:0e:f0:b3:58:c4:95:
68:51:82:80:25:ef:ae:98:73:fb:df:de:59:62:a2:75:0d:01:
e9:77:52:87:71:17:f9:b0:4b:5d:c9:57:95:78:57:1c:68:73:
fa:b6:74:c5:de:5a:0b:d5:79:97:cb:20:88:43:32:dc:2c:c6:
c5:47:f7:53:91:95:b9:76:a9:80:f2:66:75:54:94:90:43:fb:
98:53:c3:89:3e:39:fb:d2:54:92:a6:0f:97:5f:29:4c:15:fa:
90:30:ad:e9:60:87:e8:17:87:8d:11:f0:c0:89:cb:55:9d:d7:
a2:e6:5f:b6:70:b9:85:68:14:7e:8c:50:09:0d:f0:6f:38:db:
f9:13:b1:e7:4b:f3:08:74:ac:a4:ea:d6:a9:7d:b9:ca:fc:37:
3b:8b:75:10:fa:1f:62:02:56:4c:2f:02:29:11:79:d1:64:c6:
78:96:ff:07:a9:19:17:ac:0c:2c:24:79:81:30:4e:73:cb:03:
17:18:a6:a9:57:a8:97:d8:93:62:7c:b7:44:dc:9c:8c:24:a9:
e6:db:40:bc:2b:6b:86:8b:e3:5e:7c:25:9d:74:d2:30:78:f3:
de:2e:4d:79:4a:da:3d:44:3e:bb:8c:d9:7d:5c:9f:cf:0c:81:
7c:d3:6b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 17:34:09 2024 by rpki-client on console-fra.rpki-client.org