Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/6LQ2C1u24ulrd0POyqlgLPC5WEk.roa
File: 6LQ2C1u24ulrd0POyqlgLPC5WEk.roa (raw, json)
Hash identifier: TDhDR44vbtDNVHFtEQqP7oc7cpIezZw65IGGSixWous=
Subject key identifier: E8:B4:36:0B:5B:B6:E2:E9:6B:77:43:CE:CA:A9:60:2C:F0:B9:58:49
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018CC9BC5D5387F76A694FB80234FFA5E4B4
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/6LQ2C1u24ulrd0POyqlgLPC5WEk.roa
Signing time: Tue 02 Jan 2024 10:33:34 +0000
ROA not before: Tue 02 Jan 2024 10:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25098
IP address blocks: 212.30.44.0/22 maxlen: 22
212.30.48.0/22 maxlen: 22
45.94.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 14 Feb 2024 14:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:5d:53:87:f7:6a:69:4f:b8:02:34:ff:a5:e4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 10:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8b4360b5bb6e2e96b7743cecaa9602cf0b95849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8e:ef:00:28:af:1f:fa:f7:56:a4:02:75:ce:
e3:cf:42:b6:ae:86:c9:95:0c:c1:24:9a:4f:06:22:
29:c0:9c:27:3f:ee:d9:54:f5:0b:48:a8:3c:32:f4:
a8:8c:d5:a1:05:c1:c1:43:72:32:dc:cf:5e:07:2a:
b4:4f:97:16:d6:ce:23:d3:4d:85:63:33:7c:d4:65:
0f:25:97:38:bb:67:09:3b:6e:71:00:c8:67:82:8e:
d3:ad:a6:38:60:c0:cd:29:db:82:12:25:1b:2d:c9:
73:00:27:c1:18:b6:5a:a9:46:6d:be:8b:a6:ea:82:
f8:b6:fa:2b:ec:5a:98:67:9b:c1:b9:ea:bf:ba:fe:
a9:fd:18:bc:e6:52:79:93:7a:48:44:50:0b:93:9f:
bc:8d:f3:5d:7b:95:60:17:fb:0f:9b:53:5d:49:51:
8d:24:84:1e:e1:22:a0:ac:b9:b3:77:3f:c7:29:22:
b6:c5:26:f8:09:14:05:2a:b3:c6:ed:25:59:d4:4d:
64:a6:1a:09:cd:c7:68:33:38:04:98:00:01:4f:b6:
a5:c9:68:62:f4:22:e6:be:18:08:2f:38:31:92:0c:
5a:1d:f5:74:27:93:6c:41:29:fe:2b:2b:9b:74:db:
21:6a:f0:c9:27:9d:70:fa:b8:bb:d5:bd:90:78:09:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B4:36:0B:5B:B6:E2:E9:6B:77:43:CE:CA:A9:60:2C:F0:B9:58:49
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/6LQ2C1u24ulrd0POyqlgLPC5WEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/22
212.30.44.0-212.30.51.255
Signature Algorithm: sha256WithRSAEncryption
0e:fc:29:c7:32:27:64:e1:bb:b3:b3:a7:72:02:a3:3e:d1:83:
c9:2c:24:4c:46:67:d8:2d:80:bb:94:df:70:c6:6a:e4:2e:e6:
d8:e2:b4:54:0a:a3:a2:e9:ae:3f:87:2a:58:79:85:76:66:37:
28:38:cd:43:29:87:cc:8e:e9:3f:dd:41:c8:83:2b:d3:16:88:
36:60:96:d0:2d:a7:75:ab:11:07:b3:85:8a:a9:cc:45:6a:b6:
79:51:90:b4:53:72:26:4a:6d:0c:f5:e4:42:5d:5e:cf:82:38:
dc:fe:fd:0c:63:c2:95:61:e6:fb:eb:7c:88:94:08:e4:61:58:
72:2e:d2:81:31:88:ae:b5:bb:25:2d:b2:ce:93:32:e2:04:00:
f5:a8:1f:a4:7a:ec:78:d1:46:dd:7f:c1:99:fd:01:9a:47:04:
bf:73:45:36:2f:45:ca:28:2c:df:0b:69:6c:8d:50:ed:32:ea:
37:68:ef:ea:20:28:fd:68:1c:4a:7a:0e:c6:e0:8c:56:fb:e2:
98:3a:ac:98:d1:5a:a3:67:41:a1:71:dc:29:bf:24:21:01:1f:
3b:2b:25:05:07:08:6f:bb:86:fb:ec:a7:c1:b7:8e:7e:f8:18:
00:27:30:a0:53:4e:78:13:4c:e6:8c:45:9c:c2:04:ba:61:df:
a1:6b:f3:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 14 18:19:19 2024 by rpki-client on console-fra.rpki-client.org