Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/18bnuUYBfl5-vtnV3fA9d_EUdGo.roa
File: 18bnuUYBfl5-vtnV3fA9d_EUdGo.roa (raw, json)
Hash identifier: 3b6azTwALQwSZcpsub10dFujW984iJ/jyL+As/eTyS8=
Subject key identifier: D7:C6:E7:B9:46:01:7E:5E:7E:BE:D9:D5:DD:F0:3D:77:F1:14:74:6A
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018DB7E2F8CFFB2C7E8769E1F244E472F940
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/18bnuUYBfl5-vtnV3fA9d_EUdGo.roa
Signing time: Sat 17 Feb 2024 16:25:21 +0000
ROA not before: Sat 17 Feb 2024 16:25:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47750
IP address blocks: 212.30.44.0/24 maxlen: 24
212.30.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 11:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b7:e2:f8:cf:fb:2c:7e:87:69:e1:f2:44:e4:72:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Feb 17 16:25:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7c6e7b946017e5e7ebed9d5ddf03d77f114746a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c5:5b:97:7e:b7:06:e4:e7:e9:62:b2:2b:dc:
6d:09:bb:fa:06:60:5c:8e:a9:ee:ac:05:a4:a9:e7:
46:f1:fa:78:36:32:fc:35:ee:81:63:eb:8a:e0:0d:
99:f4:5a:d2:6a:ce:5c:4a:10:d8:f1:2f:b2:b6:18:
bf:28:05:49:2d:57:b8:83:67:da:0f:d5:65:39:d7:
4e:be:a7:b4:e0:11:31:d3:8c:5a:9b:8b:95:41:4b:
51:56:53:08:bd:16:39:ec:d3:ab:89:40:b5:43:d7:
ec:19:3a:0e:2d:cc:1b:f4:4d:c2:1a:1b:0f:47:2e:
c8:b9:d2:6c:ba:eb:28:b4:8b:68:3c:66:fc:a4:59:
f3:f4:40:1b:02:4c:a5:93:ec:c0:7a:37:81:6d:46:
d9:70:1b:5f:2a:70:48:eb:47:48:09:27:fa:23:4a:
e3:72:aa:17:21:22:98:69:e4:3a:77:47:b0:0f:90:
66:09:37:c0:a6:f2:92:82:2d:57:ca:1b:d4:c1:c1:
b7:55:cd:06:fa:fb:e4:8b:2b:0e:a1:aa:5b:e1:dc:
86:29:52:36:ee:fd:ce:5a:9e:6f:d5:27:bb:a2:e3:
1f:f0:03:d2:82:34:d3:f0:1b:04:37:8f:77:82:9d:
6d:3e:27:f4:16:ec:96:d8:c1:53:c9:27:c5:c3:6b:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C6:E7:B9:46:01:7E:5E:7E:BE:D9:D5:DD:F0:3D:77:F1:14:74:6A
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/18bnuUYBfl5-vtnV3fA9d_EUdGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.44.0/23
Signature Algorithm: sha256WithRSAEncryption
37:24:78:9d:57:a6:59:b9:6e:cc:da:8d:9c:30:27:5a:da:62:
72:9e:fb:11:a7:9b:43:7d:52:e6:83:79:72:95:b9:de:a5:9a:
d9:10:59:e8:d9:32:86:1b:d6:6a:ca:c2:05:8d:f2:cb:92:58:
54:2f:b7:02:74:98:cf:32:cc:b1:22:aa:df:06:94:f1:12:5c:
57:03:f8:ac:fb:ef:f8:ad:14:90:55:f9:92:80:c2:49:ce:93:
a3:bf:87:21:4d:41:9c:b0:aa:c6:81:a1:3d:71:7d:ac:66:01:
2a:9e:2e:de:f1:55:10:b0:4c:41:58:0a:76:b7:6e:e5:54:50:
dd:53:1c:00:d6:a7:bc:3d:86:80:43:1b:56:cb:0d:a5:16:cf:
a9:f3:f8:be:1d:33:c6:9a:62:2c:45:bf:29:a2:33:6a:c3:76:
a5:90:8c:80:2d:a8:48:fe:99:43:8c:85:79:ea:04:0d:9b:06:
7f:8f:d7:75:6b:79:a4:62:db:b2:c1:e5:b9:f8:71:b5:48:0f:
d3:8c:78:c5:bc:2b:05:e9:cf:21:f0:97:0c:4f:4e:fa:64:92:
e1:b8:d0:8a:dd:ee:1c:aa:98:af:32:18:0f:36:4b:a9:a6:bd:
69:df:6b:de:7f:fe:19:aa:b6:30:36:7a:79:81:6c:3f:22:3c:
21:c3:ed:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 16:26:42 2024 by rpki-client on console-ams.rpki-client.org