Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/3n2eCiInxFNyFryhcQd8NxmhkkE.roa
File: 3n2eCiInxFNyFryhcQd8NxmhkkE.roa (raw, json)
Hash identifier: mxzQAfDpH3gBdsHVJFASQe39C5dobcvp9T5aL1H+Avw=
Subject key identifier: DE:7D:9E:0A:22:27:C4:53:72:16:BC:A1:71:07:7C:37:19:A1:92:41
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 01856F14CBC83A96CE488CD98C6719FB7239
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/3n2eCiInxFNyFryhcQd8NxmhkkE.roa
Signing time: Sun 01 Jan 2023 20:45:11 +0000
ROA not before: Sun 01 Jan 2023 20:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17941
IP address blocks: 212.30.40.0/22 maxlen: 22
212.30.56.0/22 maxlen: 22
45.94.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:cb:c8:3a:96:ce:48:8c:d9:8c:67:19:fb:72:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 20:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de7d9e0a2227c4537216bca171077c3719a19241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:62:a3:df:79:56:0c:5b:77:bf:11:26:bc:
21:51:5b:c6:fc:4b:7f:ae:4b:f6:07:8f:1b:0e:00:
9e:9e:e9:f8:5c:58:cb:9f:1c:4b:7e:38:c1:f1:ed:
df:e0:df:2e:31:b5:23:0d:7e:6b:a0:8d:f2:a6:31:
54:75:5c:a5:59:d3:86:41:7f:89:4e:89:39:c7:4a:
c9:a0:59:df:0a:ad:48:9c:37:9a:56:9f:6d:51:b3:
57:f5:42:25:1d:2f:25:0b:3e:a7:bb:32:cb:3f:da:
76:e1:c4:a5:f1:b6:00:97:c2:b9:72:f9:e7:aa:51:
35:0f:80:7f:28:52:7e:ab:9f:3a:51:f8:5f:7e:da:
d8:5b:63:67:79:e4:a2:de:61:b3:8a:7b:57:5d:38:
d0:aa:8d:a9:14:9b:4f:9f:c7:ba:90:54:a8:a4:b9:
e9:02:c4:84:93:6e:66:dd:fe:2e:79:74:4f:20:6a:
1f:7b:54:28:05:64:82:96:b1:30:35:72:c5:20:93:
56:d7:f6:71:ef:f5:34:ce:4d:d9:fb:5f:0f:38:a1:
77:cc:7b:b0:3e:01:af:5b:8f:2e:36:65:79:2b:19:
11:6b:40:62:76:75:c5:4d:b5:f1:f2:32:d6:92:c4:
a4:0f:8e:b7:0a:c9:3c:c3:d5:bb:b6:3b:08:12:22:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7D:9E:0A:22:27:C4:53:72:16:BC:A1:71:07:7C:37:19:A1:92:41
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/3n2eCiInxFNyFryhcQd8NxmhkkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/22
212.30.40.0/22
212.30.56.0/22
Signature Algorithm: sha256WithRSAEncryption
60:65:80:ec:3a:3d:70:38:4e:b5:63:55:25:d4:f6:26:bf:d7:
df:20:61:fc:2c:ef:71:1b:f9:7a:63:7e:04:31:72:f1:20:48:
54:16:8e:88:7d:07:16:c6:df:ed:5a:99:95:b3:6c:13:ab:67:
ff:ad:f9:db:15:04:82:02:c5:df:aa:b0:ea:b2:be:a4:29:42:
eb:52:7b:81:d6:2a:ed:c5:39:41:5c:82:a5:c0:24:c3:4e:9f:
8a:e2:26:df:5b:65:0f:cf:c7:53:3c:37:29:be:18:9b:f3:1e:
c0:ce:00:c6:52:db:8a:9d:c3:0c:f4:d3:ba:57:f8:4f:c6:83:
74:25:a6:8c:9c:1b:b4:b2:82:48:87:b0:eb:a7:fb:34:1c:45:
ea:f1:a1:94:fd:9d:e3:58:0f:f8:cf:8d:0d:0f:39:f4:ec:04:
af:96:0c:9f:10:14:d6:1a:5a:f4:27:bf:31:f2:b5:3e:98:af:
e3:fb:c7:21:5f:32:6d:38:2b:90:f2:da:db:3d:c8:9d:ab:2c:
8b:d3:77:c0:1e:aa:4e:09:92:d1:6f:72:04:84:c9:b5:39:19:
f5:97:10:1b:6b:63:43:3c:99:d7:25:88:c4:47:8b:61:1c:df:
8b:d0:92:b1:72:e2:5a:88:ad:fc:74:ff:42:9d:70:57:44:c0:
7b:b5:42:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:35 2023 by rpki-client on console-fra.rpki-client.org