Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/xXmwf0XoWh_lGogVsuNRe8ZT2Gc.roa
File: xXmwf0XoWh_lGogVsuNRe8ZT2Gc.roa (raw, json)
Hash identifier: oS3fgXONZV7LeRnJkAkv0H8dFdiE0LOQdUdqmqVCtds=
Subject key identifier: C5:79:B0:7F:45:E8:5A:1F:E5:1A:88:15:B2:E3:51:7B:C6:53:D8:67
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018CA56E4D24CAEE266E522388002C895D48
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/xXmwf0XoWh_lGogVsuNRe8ZT2Gc.roa
Signing time: Tue 26 Dec 2023 09:21:58 +0000
ROA not before: Tue 26 Dec 2023 09:21:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 212.80.18.0/23 maxlen: 23
212.80.18.0/24 maxlen: 24
212.80.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a5:6e:4d:24:ca:ee:26:6e:52:23:88:00:2c:89:5d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 26 09:21:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c579b07f45e85a1fe51a8815b2e3517bc653d867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:00:50:18:27:b9:59:e9:64:78:12:13:09:
a7:bd:36:6b:ae:fe:0d:ee:93:32:37:00:61:b6:0f:
9c:bc:20:0e:e8:aa:62:62:85:55:5f:b8:1c:af:b3:
21:69:5f:b6:1f:0b:97:6b:36:20:3c:bb:64:57:cf:
30:5c:b7:5d:57:c2:c4:e8:32:72:0a:10:3a:dd:37:
4e:62:99:82:aa:3f:f8:a2:62:0d:91:8b:07:c5:14:
dc:71:ef:d6:44:07:e6:17:a4:88:60:37:7f:21:18:
72:4b:65:bf:9a:18:8c:f7:bd:67:5a:a0:c3:b4:8a:
bc:ff:30:89:0c:4e:21:c3:c8:7a:78:0c:94:bf:7f:
17:81:58:91:7d:14:32:f7:a8:36:9c:71:2a:2b:fc:
fc:1b:5e:a3:39:8a:a9:02:cc:b8:f6:ab:fb:47:61:
d8:46:f4:66:71:52:9f:29:6b:06:11:f6:79:77:0b:
88:11:b7:a4:0c:14:be:0c:39:18:c9:95:30:41:ed:
28:60:67:51:38:ee:9a:f1:b2:ed:4d:3c:c0:1f:31:
c3:65:41:f7:b7:3b:06:49:cf:82:bc:f7:e2:f8:f9:
82:62:1c:6a:e5:4b:a4:06:1b:42:d5:c0:63:81:a6:
99:2c:7c:7d:d5:fb:3e:d1:b2:ec:db:d6:dd:9a:51:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:79:B0:7F:45:E8:5A:1F:E5:1A:88:15:B2:E3:51:7B:C6:53:D8:67
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/xXmwf0XoWh_lGogVsuNRe8ZT2Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.18.0/23
Signature Algorithm: sha256WithRSAEncryption
61:9d:3d:c8:b2:8a:20:a2:96:1e:b3:de:af:24:b9:70:6d:21:
d3:05:3f:33:c6:70:35:9f:61:2f:74:71:ea:dc:bd:73:1c:97:
bb:ab:dd:4e:2a:82:13:c0:0d:d9:3e:fd:40:34:f9:b8:12:b0:
07:85:6f:c9:e3:89:83:68:fb:e6:cb:d2:c0:24:1f:34:23:43:
8d:6a:8f:2e:84:f5:db:b0:99:9f:a6:e0:c0:56:00:a8:20:c3:
b2:11:60:56:ce:22:73:09:25:39:15:41:b3:07:2f:ff:e2:8f:
b7:b9:19:c0:3b:70:97:e4:42:79:ad:7c:7b:a2:59:fe:65:98:
56:c1:09:7a:d9:52:59:b8:2e:01:7d:85:57:f7:4c:94:86:1b:
c5:26:d3:49:16:e0:0d:74:a8:75:0d:2b:c9:58:ca:89:f7:a0:
62:6c:ce:1f:0e:c9:dd:a3:73:d3:ce:2f:49:7c:89:fc:6d:8e:
e8:36:03:58:3b:a5:05:ba:64:4b:3d:aa:ff:aa:f0:33:ac:ff:
e7:46:be:b0:31:f6:a1:f7:02:6b:7d:dd:90:49:d9:03:f4:d4:
f4:27:ac:13:a5:4f:a3:65:8b:47:b1:2b:df:04:bc:19:11:cf:
b5:ba:6f:17:14:dc:f5:dd:11:e2:38:0f:20:73:52:44:28:6f:
ae:22:a2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:58 2024 by rpki-client on console-fra.rpki-client.org