Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/vnfz22SplUHnjiFROgRoIgZyZd8.roa
File: vnfz22SplUHnjiFROgRoIgZyZd8.roa (raw, json)
Hash identifier: qQAZNvSVEtQwxpcttqiE4/Dy+MwWDOc08ydCcRJs//w=
Subject key identifier: BE:77:F3:DB:64:A9:95:41:E7:8E:21:51:3A:04:68:22:06:72:65:DF
Certificate issuer: /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial: 01856C1CA366644E7D909D519F8FEBB1089C
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/vnfz22SplUHnjiFROgRoIgZyZd8.roa
Signing time: Sun 01 Jan 2023 06:54:54 +0000
ROA not before: Sun 01 Jan 2023 06:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12750
IP address blocks: 212.80.96.0/19 maxlen: 19
2a01:7480::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a3:66:64:4e:7d:90:9d:51:9f:8f:eb:b1:08:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Validity
Not Before: Jan 1 06:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be77f3db64a99541e78e21513a046822067265df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a8:2f:19:a2:b8:57:15:fb:c0:f6:da:03:a8:
ab:5c:8e:d6:55:8f:9c:01:05:db:d8:72:2e:d7:92:
71:95:0f:bb:47:df:1c:62:c4:99:f8:64:86:3f:f9:
eb:73:ba:d5:68:d3:0d:4c:6c:9a:25:54:f1:54:d0:
dd:13:86:84:ba:a8:1e:f0:3c:35:46:10:f6:36:44:
f8:86:ee:a0:f7:31:a1:57:f6:a0:06:32:88:97:2b:
4a:0a:e6:7e:6f:b6:1d:97:fa:29:32:1b:63:ef:2d:
0f:fa:d3:ff:24:c4:81:13:be:bb:9a:f5:2e:41:44:
a6:c1:39:d4:ed:d2:9d:12:38:ca:0f:40:e5:c8:46:
14:fe:1b:52:e0:00:b6:5f:b2:7a:ac:2f:cd:34:4b:
ea:a2:80:d6:79:10:dc:56:93:0a:5c:8b:1c:dd:6b:
f1:45:4d:b3:43:4e:6e:56:b5:8f:90:59:18:5b:a3:
76:fb:af:53:e7:d3:24:71:23:eb:29:37:ab:0e:8e:
b9:f0:03:69:bd:15:41:f6:bd:2e:92:41:d3:11:06:
43:85:5e:09:08:78:9e:c7:53:87:b7:86:10:2c:b0:
aa:23:4c:c2:83:04:41:d1:ae:e5:eb:6f:63:4d:af:
17:f5:60:49:bb:10:90:97:70:ed:19:93:3f:cf:89:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:77:F3:DB:64:A9:95:41:E7:8E:21:51:3A:04:68:22:06:72:65:DF
X509v3 Authority Key Identifier:
keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/vnfz22SplUHnjiFROgRoIgZyZd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.96.0/19
IPv6:
2a01:7480::/32
Signature Algorithm: sha256WithRSAEncryption
44:c7:11:aa:a1:9f:d5:42:ab:2b:10:ff:0e:22:24:52:48:b1:
dc:f4:8d:dd:11:8a:c4:10:ee:4f:89:d0:29:b9:a2:7a:8a:6b:
3d:fd:df:3b:a7:e9:05:de:bd:26:c6:0b:5d:02:99:a2:e8:0e:
6c:b6:2b:c0:de:53:b2:b8:51:be:06:87:fd:5b:1e:55:0e:4b:
1d:22:9c:76:91:2e:47:0c:ff:64:66:ae:ca:a0:a8:8d:25:48:
07:53:37:33:3f:46:64:a5:0b:59:0d:ba:25:e8:9b:1d:75:57:
50:9a:f3:0b:47:5a:c0:29:ee:0a:d1:da:e1:68:ae:9e:da:5c:
eb:46:c8:2f:fb:8b:6a:1f:8f:d0:8f:c8:3d:d0:b1:86:4e:4b:
0c:33:fe:67:f7:c1:2d:22:b6:8b:b2:fd:95:6e:a2:6c:d9:6b:
de:1b:a5:e3:42:87:41:92:78:ce:3e:f6:5d:26:f1:bb:9a:fb:
33:a6:f1:a4:59:58:c2:ec:c2:58:7f:66:79:07:1d:86:7f:e4:
73:77:3f:46:33:d8:43:79:39:a2:0b:f1:15:b2:63:f1:cc:c7:
0e:3e:62:5e:38:b9:11:8d:af:ff:ce:4c:c7:fb:30:8e:59:41:
6e:e1:75:29:58:61:08:68:3c:a9:2f:52:7b:de:f3:10:d2:04:
32:fd:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:22 2024 by rpki-client on console-ams.rpki-client.org