Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/AoCMl8ffp1Vr0xXI4BJV7xFBAik.roa
File: AoCMl8ffp1Vr0xXI4BJV7xFBAik.roa (raw, json)
Hash identifier: r8EfzVTRGKX54FKQxRpqXS2dh7+l+jiezCCPWoSMYzw=
Subject key identifier: 02:80:8C:97:C7:DF:A7:55:6B:D3:15:C8:E0:12:55:EF:11:41:02:29
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 01856F14CB1CB2A1245F84BA70E880CEF1FA
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/AoCMl8ffp1Vr0xXI4BJV7xFBAik.roa
Signing time: Sun 01 Jan 2023 20:45:11 +0000
ROA not before: Sun 01 Jan 2023 20:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 212.30.48.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:cb:1c:b2:a1:24:5f:84:ba:70:e8:80:ce:f1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 20:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02808c97c7dfa7556bd315c8e01255ef11410229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:04:a2:17:6e:94:8d:b1:e3:13:31:37:f8:
7b:9d:01:00:28:b0:c2:fb:5b:03:c5:e2:c3:a9:b4:
83:a2:3d:2c:2f:d5:ab:1a:f8:8b:57:c3:db:67:de:
f7:62:d6:c6:a2:fd:8d:9a:ce:3d:e8:cd:cc:59:40:
3f:61:04:7e:bb:ed:ca:2e:d5:51:c1:e3:4d:9a:ad:
bb:56:1c:29:11:33:77:87:33:61:6d:46:d2:81:e8:
44:e1:0e:3e:28:f8:8d:76:f2:c8:72:a5:82:e3:ba:
18:d5:9c:ed:77:e5:d3:51:c6:aa:90:44:e9:b5:b2:
76:4d:83:ab:00:ad:6c:18:20:47:0d:e4:8b:f7:4e:
16:de:5f:ea:a6:13:7d:e2:5f:72:7a:e3:4d:e7:3a:
6f:d6:9d:02:6e:b2:d2:6e:ea:94:de:c1:6c:ec:f7:
32:80:d4:4b:1a:d3:e6:66:cd:af:8e:3d:9b:3d:69:
3d:9b:a5:4f:50:96:1b:fa:a2:b0:f7:3f:8b:7a:ca:
86:69:17:d5:3a:0e:0d:b4:53:95:eb:52:e0:2f:7e:
69:94:bb:9b:ad:7b:9b:db:c5:62:5e:87:6f:a0:75:
08:dc:e4:f4:ea:ac:e8:ff:1b:a5:76:a9:12:3a:a6:
42:73:d8:aa:df:e4:90:a3:bb:e9:5b:69:61:cd:75:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:80:8C:97:C7:DF:A7:55:6B:D3:15:C8:E0:12:55:EF:11:41:02:29
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/AoCMl8ffp1Vr0xXI4BJV7xFBAik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.48.0/22
Signature Algorithm: sha256WithRSAEncryption
86:0b:6e:9d:22:4d:ab:9f:eb:87:92:27:bb:f4:f5:1c:93:67:
82:c8:97:ff:fe:5b:db:da:c0:9e:c2:15:55:9d:7b:9c:9e:73:
5b:64:4e:9a:ea:72:33:5f:e2:35:38:21:34:2b:24:dc:18:39:
33:cc:bb:39:4a:4f:08:a0:66:cc:95:29:8e:21:c1:67:00:c0:
69:87:fb:f8:8b:86:45:e2:0f:1f:3a:fc:99:e4:e4:ae:0c:ec:
b2:e0:a2:84:91:08:c2:ac:72:ba:8c:d7:05:5c:a8:bb:b5:aa:
35:7a:e1:77:88:f2:87:cb:fe:af:08:de:2e:b6:b8:47:69:39:
a1:5c:73:e5:a3:9f:7a:0f:79:b3:51:8a:31:30:53:34:46:6a:
6d:85:ab:f2:87:43:01:14:c6:25:33:72:2a:5e:46:0b:4c:d4:
3c:c7:20:ca:e1:ff:aa:f5:5f:73:40:75:ad:10:22:b4:ed:3e:
c4:ca:a8:16:e7:42:4e:7e:19:dd:65:ca:31:f7:83:2f:02:61:
72:97:8a:f2:f4:78:9e:e9:35:4e:bd:fe:fb:ed:01:4e:72:1f:
24:cb:9e:24:ba:dd:14:32:bf:8a:9f:6f:e1:9a:3d:21:49:42:
71:55:5f:60:13:e7:5a:95:64:08:a9:dc:2c:07:22:36:8f:ad:
01:bc:45:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:35 2023 by rpki-client on console-fra.rpki-client.org