Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/4Cf9iANdhfYLRKG_KqusNn3NRkE.roa
File: 4Cf9iANdhfYLRKG_KqusNn3NRkE.roa (raw, json)
Hash identifier: GRIMN3QK50xbC4GNeaqmhL/2PsKwUxM9GUjqhtWxHYQ=
Subject key identifier: E0:27:FD:88:03:5D:85:F6:0B:44:A1:BF:2A:AB:AC:36:7D:CD:46:41
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 01858317A142FB39C5658AABCB66BEF38B10
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/4Cf9iANdhfYLRKG_KqusNn3NRkE.roa
Signing time: Thu 05 Jan 2023 18:00:41 +0000
ROA not before: Thu 05 Jan 2023 18:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 212.30.44.0/22 maxlen: 22
212.30.48.0/22 maxlen: 22
45.94.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:83:17:a1:42:fb:39:c5:65:8a:ab:cb:66:be:f3:8b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 5 18:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e027fd88035d85f60b44a1bf2aabac367dcd4641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:4e:5f:ac:05:e0:fe:e1:20:64:2d:f3:d9:
85:c4:bd:fa:14:7d:06:81:d4:7f:d9:7c:4b:9d:16:
94:51:5d:a5:89:bd:b1:47:1e:9a:fb:43:c4:d9:c1:
fa:f6:69:cc:3f:91:2d:f8:e2:30:38:9e:a8:5d:82:
11:ff:c1:64:9f:5f:a1:3b:0d:71:bc:63:79:af:57:
50:b7:7f:f7:dd:ea:54:94:b6:f2:e4:4c:1d:78:04:
26:59:c9:72:e5:34:cd:c4:88:d9:61:4c:dd:9a:2e:
c2:29:b5:6e:fe:22:11:fb:07:26:be:75:25:16:42:
2f:bd:71:f2:bc:a2:57:57:13:67:77:4e:62:ee:77:
f9:d3:56:8e:8a:ff:0e:58:42:81:29:a7:c1:2d:a1:
f3:43:34:a2:da:40:2f:57:6a:09:60:eb:c4:cc:c0:
0c:3e:13:43:73:69:d3:02:ba:b3:8f:2b:78:9f:48:
4e:7c:a8:10:be:86:dd:0f:d1:53:2f:ad:97:0f:5a:
60:e5:e7:d9:97:cf:f8:00:c1:c2:2d:15:7a:08:fd:
82:97:de:bc:3d:ca:f3:e3:f1:82:b0:00:92:e2:80:
a8:62:94:d1:93:92:a2:82:6e:6c:a7:6d:91:69:80:
40:10:10:fb:51:fe:99:d1:77:03:47:20:b2:18:05:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:FD:88:03:5D:85:F6:0B:44:A1:BF:2A:AB:AC:36:7D:CD:46:41
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/4Cf9iANdhfYLRKG_KqusNn3NRkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/22
212.30.44.0-212.30.51.255
Signature Algorithm: sha256WithRSAEncryption
ba:a9:ef:06:ae:89:81:6e:79:a2:6f:fc:a8:88:49:07:03:ce:
7a:bc:fc:79:5b:b9:7a:c4:ff:3a:6e:62:9f:eb:1d:5d:27:95:
c7:26:48:d4:f4:e3:6d:ea:16:cc:95:73:48:0f:6d:f2:f7:af:
de:8d:b8:89:18:26:16:6f:94:90:ff:ad:b0:c1:f3:34:4f:83:
e0:9f:a9:e7:96:a7:f4:f0:35:6e:35:1f:48:bb:d8:1c:5b:ac:
40:1c:67:31:9f:f0:9c:4f:4e:f2:a9:b9:24:71:fe:07:2d:53:
06:9d:66:d1:a1:a0:c7:94:41:d5:df:06:a8:d8:81:eb:e4:7c:
c8:b8:e9:cf:74:53:98:93:c7:d7:a5:56:fc:4d:2f:5e:dd:29:
c1:c2:28:6c:70:7b:05:65:d0:70:fa:be:a8:58:fa:53:98:19:
36:b2:62:39:c5:c1:16:45:5f:87:45:8a:d7:94:97:05:c5:b9:
c5:46:a5:6e:d2:be:e2:5d:ea:52:fb:53:c6:53:7b:f6:c9:69:
a7:fc:c4:c1:5f:0c:27:ed:36:59:08:6d:c9:20:b0:93:52:27:
26:a5:7c:2a:f2:36:a7:5a:67:76:eb:4c:a0:5c:00:c5:ea:2f:
0b:60:8e:aa:b8:7a:f7:c6:65:eb:52:a3:8e:86:7f:6c:9b:ca:
29:f6:9b:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:27 2023 by rpki-client on console-ams.rpki-client.org