Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/DjmKGHWGu88sltHbx5skVWBWoRY.roa
File: DjmKGHWGu88sltHbx5skVWBWoRY.roa (raw, json)
Hash identifier: cbG6GFwgtnAdIz5h/JmnZxki1LQ66Dog82pZ4R/FSRU=
Subject key identifier: 0E:39:8A:18:75:86:BB:CF:2C:96:D1:DB:C7:9B:24:55:60:56:A1:16
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018BAA3BF594DFC0C5047EC159C037CAE864
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/DjmKGHWGu88sltHbx5skVWBWoRY.roa
Signing time: Tue 07 Nov 2023 14:42:18 +0000
ROA not before: Tue 07 Nov 2023 14:42:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136744
IP address blocks: 212.30.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:3b:f5:94:df:c0:c5:04:7e:c1:59:c0:37:ca:e8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Nov 7 14:42:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e398a187586bbcf2c96d1dbc79b24556056a116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0a:3c:4b:18:8b:43:6b:8b:b0:a0:fd:89:10:
87:d8:37:e4:95:11:a8:6e:be:1c:b9:71:f4:81:bb:
ed:3c:db:e3:29:3d:be:b0:56:6e:45:f4:78:d8:3b:
c8:00:a6:87:82:e5:13:12:27:a0:c4:1f:e6:61:7c:
63:38:27:82:27:82:27:74:e1:c3:8f:ab:47:7c:5d:
9d:d2:09:da:34:54:d6:f5:e2:29:83:9c:80:8c:fc:
c9:a0:86:71:2f:ac:67:7d:84:fe:03:6e:28:22:14:
67:5a:09:9e:ec:61:79:31:a0:5c:f3:0c:25:3d:1d:
09:ce:7b:f7:aa:8b:58:7f:9e:2c:34:18:d2:70:31:
9f:fe:c4:78:d3:15:f9:a5:be:f2:9b:17:c2:23:6d:
c4:02:0a:10:ce:e9:c3:5a:f1:42:b0:2b:36:f0:f1:
3e:28:62:4d:7f:88:46:0b:41:de:69:49:3c:b5:92:
39:6d:24:31:1a:11:96:a8:b1:4e:27:69:bd:a1:99:
f8:f6:f7:3b:de:22:2e:7f:05:68:4f:88:af:8e:57:
5c:6b:05:38:8b:76:7e:d2:d5:17:7e:fb:67:48:02:
34:df:35:8e:af:ca:07:52:1b:59:c6:fb:b7:d2:fc:
5a:4f:4b:02:43:36:3c:b6:a0:0a:82:b3:72:a7:3f:
ac:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:39:8A:18:75:86:BB:CF:2C:96:D1:DB:C7:9B:24:55:60:56:A1:16
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/DjmKGHWGu88sltHbx5skVWBWoRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.61.0/24
Signature Algorithm: sha256WithRSAEncryption
49:09:18:26:c5:7f:2c:21:14:b3:c9:3b:63:cc:9a:81:3f:8c:
69:81:97:83:ab:bf:69:ce:75:17:d4:5f:27:7f:53:c8:3a:ce:
3a:a3:d6:4a:e4:48:73:ac:71:34:64:60:7e:b2:06:c3:90:ce:
dc:d2:72:10:9c:a7:c9:60:b8:df:3a:2d:0a:1b:81:c5:43:86:
6f:de:b1:5a:5c:ea:e0:17:75:b0:b3:c1:dd:a5:2a:ef:0e:a0:
84:b5:48:15:c1:f9:85:66:f9:d9:19:f1:85:f8:68:51:94:81:
49:f0:a7:c5:47:c7:9d:cc:3b:21:24:38:f2:bd:05:56:e2:f8:
50:62:97:f4:7e:b7:ee:0b:40:a3:dd:95:38:2a:8f:25:41:00:
13:22:cf:49:ae:eb:3f:ab:2f:e6:3a:ef:5e:fb:2e:a3:3e:78:
88:fb:00:51:80:97:57:43:87:7c:a0:58:bb:a7:fe:97:95:7d:
ca:14:8d:f3:ea:d6:73:fa:98:bd:b6:04:bb:27:9f:4e:2e:e5:
09:9b:4c:ba:49:29:c6:30:82:0f:50:3d:83:65:f9:1d:48:d0:
43:54:b2:12:75:03:fa:db:fa:cc:dc:cf:fe:5c:62:94:39:d0:
5d:16:7f:22:4f:27:c9:0b:c3:44:99:fe:a7:62:8a:7c:bc:d4:
b9:fb:71:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:32 2024 by rpki-client on console-ams.rpki-client.org