Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/E2mNaABIrGTgu67kRYT4n4CvFBQ.roa
File: E2mNaABIrGTgu67kRYT4n4CvFBQ.roa (raw, json)
Hash identifier: nP5ksXUwCMELpVgqimz6NZqF19heBB9lbr4kTssrP/g=
Subject key identifier: 13:69:8D:68:00:48:AC:64:E0:BB:AE:E4:45:84:F8:9F:80:AF:14:14
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0188A687B84FA5151740DDCE6D27439D06E5
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/E2mNaABIrGTgu67kRYT4n4CvFBQ.roa
Signing time: Sat 10 Jun 2023 18:18:12 +0000
ROA not before: Sat 10 Jun 2023 18:18:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 212.30.35.0/24 maxlen: 24
212.30.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a6:87:b8:4f:a5:15:17:40:dd:ce:6d:27:43:9d:06:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jun 10 18:18:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13698d680048ac64e0bbaee44584f89f80af1414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:50:1c:ec:b3:af:98:7f:56:59:95:b7:fd:
7b:0c:5a:10:0a:96:8e:36:be:1f:1c:71:98:26:49:
d1:d0:6c:87:1a:6d:83:b9:c5:05:60:29:33:40:d8:
fb:61:d0:48:1e:ae:8d:8d:b1:81:48:56:58:4d:fb:
49:2b:6e:fe:9d:e5:7d:70:f7:f0:13:d1:07:e7:41:
82:ad:be:6d:c1:6a:2f:51:cc:cb:fd:1d:20:e7:70:
3c:50:4b:ce:00:ac:4b:ae:c4:d6:a7:48:77:1e:07:
82:76:95:75:0c:21:39:b6:66:14:c5:7f:c7:47:a2:
c2:bb:5d:1b:56:fd:e9:8e:79:4c:31:a5:2f:bf:fc:
c0:5f:d9:c6:c9:63:f9:1d:3e:d8:7c:b9:83:cc:40:
fc:09:91:b7:13:11:c8:4b:b9:7c:cc:96:ba:ad:6a:
cc:ab:31:0e:7a:20:f4:39:87:ad:90:96:1e:84:19:
a2:0f:6b:7c:9d:b9:cc:8c:75:c7:e8:bd:75:a3:eb:
75:98:24:6a:61:df:03:0a:73:d7:22:2c:86:73:50:
36:dc:89:a8:4f:ef:38:17:e8:4a:6e:48:50:32:55:
6d:14:20:18:d7:ac:8d:d4:b3:10:65:50:9f:ab:95:
7e:90:52:4d:1d:e7:31:a7:40:cf:35:b0:ed:b1:96:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:69:8D:68:00:48:AC:64:E0:BB:AE:E4:45:84:F8:9F:80:AF:14:14
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/E2mNaABIrGTgu67kRYT4n4CvFBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.35.0/24
212.30.63.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5f:10:3f:66:d1:20:fa:97:ce:e3:68:80:e5:04:32:b6:dd:
25:d7:82:b7:7a:ca:ea:38:6b:1a:3c:ab:d9:ed:c1:2b:fc:da:
a6:dd:4c:8b:06:12:7f:3a:17:0e:fb:9d:1c:2e:93:ad:71:b0:
79:dd:37:82:18:42:eb:96:85:68:3a:f8:a8:a3:29:44:0d:fd:
fa:22:c7:4e:90:92:15:da:a9:70:29:1d:78:a4:ef:2c:85:2a:
c7:59:f5:01:89:0d:19:cf:73:f7:22:c0:35:61:87:38:30:52:
14:e8:7e:e6:2b:c1:36:db:01:58:06:1e:1b:2c:09:be:30:59:
0f:28:54:58:79:4b:f5:e7:15:04:ac:48:b8:d8:94:98:10:e2:
26:02:c0:72:d2:b8:ad:bd:53:e1:e1:c4:14:fe:3b:0a:bf:bc:
eb:52:51:5b:19:e0:c8:9f:d2:08:c1:ae:38:1b:dc:9a:58:18:
cf:dd:9e:ba:af:fd:14:d9:f0:e6:bd:ec:3a:da:da:4c:4a:15:
25:b5:5d:dc:98:b4:2e:a1:86:5c:3b:0c:a4:92:34:a0:30:b3:
cc:c0:49:74:ce:97:76:6f:a8:5b:68:08:59:a3:fe:c2:85:56:
d5:5a:c5:34:1a:be:28:89:eb:7a:d7:6a:ed:c1:6a:03:b1:46:
3c:5d:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:32 2024 by rpki-client on console-ams.rpki-client.org