Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Fig8qUPTlwPEoXFo-nrKgO8LLVo.roa
File: Fig8qUPTlwPEoXFo-nrKgO8LLVo.roa (raw, json)
Hash identifier: FBKgRfkbF0u1B+efyhO83w8+auowghaaKGDL+jO+2Lw=
Subject key identifier: 16:28:3C:A9:43:D3:97:03:C4:A1:71:68:FA:7A:CA:80:EF:0B:2D:5A
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018A7F443A162A839731565415C4424CAA02
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Fig8qUPTlwPEoXFo-nrKgO8LLVo.roa
Signing time: Sun 10 Sep 2023 13:24:52 +0000
ROA not before: Sun 10 Sep 2023 13:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204356
IP address blocks: 212.30.32.0/24 maxlen: 24
212.30.34.0/24 maxlen: 24
212.30.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7f:44:3a:16:2a:83:97:31:56:54:15:c4:42:4c:aa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Sep 10 13:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16283ca943d39703c4a17168fa7aca80ef0b2d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:43:e9:a9:17:f9:fc:3c:4c:c7:00:c3:a0:
bf:1a:af:9a:0e:9d:68:07:67:ec:89:8f:0d:d5:ea:
20:b8:21:48:07:42:97:4d:ea:22:ab:71:20:25:85:
61:e2:81:2e:05:ed:bf:c1:df:ac:75:92:28:b0:dc:
f5:c3:ad:1c:3d:eb:5e:01:b4:7c:27:9c:15:41:09:
6f:47:ae:17:fa:f6:38:fe:f3:1a:39:21:53:11:35:
15:01:e7:0a:1a:f6:58:b5:c5:76:00:a5:bc:4d:38:
ce:22:2e:81:ab:13:fd:25:01:8c:bc:d4:b9:fe:fc:
7f:b6:68:fd:19:70:8e:57:bf:0e:03:cf:5d:cf:25:
35:e1:bd:49:1d:09:cc:18:0b:a1:4a:ae:f8:53:05:
19:61:88:00:af:bd:fc:1d:2b:9a:47:13:3b:2e:b6:
3e:a4:bf:98:eb:52:b1:7e:c5:1f:c5:c4:68:81:e8:
06:a5:7c:3c:fd:95:70:c5:b7:df:47:67:ef:0e:b4:
5a:08:18:7c:21:2b:24:56:66:d1:65:b5:b0:1b:0e:
c4:52:02:e1:e5:15:e7:52:13:6a:c0:78:fd:5c:1b:
2f:a9:4c:a3:ed:61:89:fc:c4:60:bf:f3:15:89:16:
83:e8:35:60:cb:16:af:55:11:76:6a:26:8f:2b:42:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:28:3C:A9:43:D3:97:03:C4:A1:71:68:FA:7A:CA:80:EF:0B:2D:5A
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Fig8qUPTlwPEoXFo-nrKgO8LLVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.32.0/24
212.30.34.0/24
212.30.39.0/24
Signature Algorithm: sha256WithRSAEncryption
24:85:17:91:ed:f8:20:0b:7a:df:20:69:76:cf:cb:21:b4:9d:
92:61:44:39:e3:1a:ab:18:9f:bf:04:c7:f2:e5:dd:45:b7:1e:
be:42:5a:09:24:03:6d:25:c1:cf:6f:fc:2a:3f:dd:9a:aa:ee:
cd:56:bf:59:f6:60:e6:c0:b3:fa:e9:ed:9e:07:1a:a8:80:f5:
86:63:55:83:c0:69:8b:fd:43:d0:02:e3:10:f2:aa:fc:d8:04:
2a:35:12:b4:64:fa:84:9b:2e:74:3c:85:da:e0:da:e3:e3:20:
3f:81:2b:9c:ab:4f:44:fd:6b:80:fe:f3:ce:4b:e0:27:f8:73:
fd:dd:12:5a:23:ab:85:e8:51:9b:69:08:3c:37:ba:45:50:14:
1a:52:46:19:e4:13:f3:42:24:ea:4a:1f:02:ee:46:30:83:41:
90:f8:9b:20:a1:c7:f6:1e:40:bd:86:03:11:e4:60:15:2a:a9:
75:f9:37:61:b9:24:95:4f:80:40:b8:9d:a8:1b:e4:c6:c4:77:
d1:c4:8d:5e:9e:88:e1:d6:e1:f6:21:45:27:fb:5c:dc:e4:ee:
26:37:9c:91:27:52:6b:b1:b4:cd:f4:f1:a1:77:80:95:75:5e:
61:9e:ba:87:31:c4:fa:aa:a7:95:33:b1:ad:b4:5e:e4:c0:f2:
0c:31:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:32 2024 by rpki-client on console-ams.rpki-client.org