Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/7od0vMGcQkuDsBbjBY5hl_XpNrE.roa
File: 7od0vMGcQkuDsBbjBY5hl_XpNrE.roa (raw, json)
Hash identifier: YJqdRW62Ax5GovGO0t1SqX83Dr/2YNJ5+FqRfQDp0g0=
Subject key identifier: EE:87:74:BC:C1:9C:42:4B:83:B0:16:E3:05:8E:61:97:F5:E9:36:B1
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018FAF20A29356E2324DAC030950E294D687
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/7od0vMGcQkuDsBbjBY5hl_XpNrE.roa
Signing time: Sat 25 May 2024 09:41:42 +0000
ROA not before: Sat 25 May 2024 09:41:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136744
IP address blocks: 45.94.55.0/24 maxlen: 24
212.30.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 11:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:af:20:a2:93:56:e2:32:4d:ac:03:09:50:e2:94:d6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: May 25 09:41:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee8774bcc19c424b83b016e3058e6197f5e936b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:c2:b8:bb:5c:0e:14:d6:71:65:e8:68:26:
a6:1d:e2:16:02:3b:46:6f:f9:b2:af:43:45:34:e4:
80:9d:e5:4d:39:97:f3:05:ed:b1:c5:ec:c3:44:9c:
72:75:a9:4b:82:c7:5b:2f:25:ac:13:c6:d7:ff:27:
b4:52:86:4c:89:3e:f3:9f:3f:a6:49:fb:a1:85:26:
c2:f5:74:af:2a:3e:d8:d0:0a:6a:bb:3d:66:b5:fc:
65:c0:b6:e4:bc:f0:86:b6:15:84:72:37:4d:3b:ca:
ac:7a:41:68:7a:a3:6b:ed:79:ca:2c:37:3c:3f:49:
27:e4:41:73:db:f7:c7:2c:f6:c0:77:ee:29:b5:1f:
25:8b:3a:60:7b:c3:78:a2:22:20:3e:27:28:ab:af:
4c:e3:23:89:c6:bf:dc:1d:3c:40:14:21:7d:74:2e:
b2:53:f1:bd:73:8c:fe:ab:ba:bd:b7:29:bc:4b:24:
9a:fd:25:7d:76:a1:0f:19:82:11:38:4b:f5:2c:02:
98:b3:db:63:99:e6:6b:fa:58:82:c7:b2:86:9c:b6:
a4:cc:7a:17:b9:26:58:3b:03:ba:e4:b8:f8:d0:d6:
25:d8:39:76:d3:81:cd:00:36:8f:24:91:67:b9:99:
15:af:e2:7c:ab:83:0a:76:e6:43:68:01:c3:fb:b7:
fe:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:87:74:BC:C1:9C:42:4B:83:B0:16:E3:05:8E:61:97:F5:E9:36:B1
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/7od0vMGcQkuDsBbjBY5hl_XpNrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.55.0/24
212.30.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4e:3d:36:fd:75:12:de:84:e7:d4:19:48:df:84:9a:d9:e5:
b1:f4:f0:ca:e8:22:4a:8a:e2:5b:a2:c8:79:eb:db:88:5c:b1:
44:4a:d5:13:aa:7d:de:82:cf:b8:c2:75:0f:ee:04:a4:5d:05:
3c:c7:b9:34:03:01:d0:06:35:73:88:52:a1:20:55:2b:9c:52:
f2:30:3f:51:ce:f9:60:e0:4c:c3:93:40:e0:61:4f:79:c6:22:
98:32:f7:63:d3:05:d1:4f:1e:c6:bd:7b:7c:60:28:b7:70:62:
48:5b:5a:b0:b6:7e:02:1e:1a:bf:78:a8:f2:19:d7:a4:c6:a3:
e2:4a:dc:25:f4:e3:79:4b:ee:de:03:c7:21:5f:7c:07:fb:4e:
58:60:dc:8f:61:30:ca:a4:58:dd:7f:0d:95:05:d6:44:09:43:
95:a4:ff:ae:36:fa:26:03:97:38:fd:a3:3b:97:1d:cf:97:2d:
25:6d:ab:df:bc:e7:f2:d0:90:7d:81:1d:99:94:89:ff:78:f5:
6d:f6:45:39:3f:77:82:65:8a:7c:9b:2f:f3:c3:a4:a9:6b:44:
b1:7e:37:43:46:a6:4d:31:cc:ce:4d:0a:2e:7f:cc:b9:d1:5b:
aa:91:3f:33:db:4a:21:27:44:e3:fe:f9:55:ce:f2:5f:df:4c:
9d:7d:00:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:28 2024 by rpki-client on console-ams.rpki-client.org