Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Kn7FIX45pA24A81uELRENrcKCkM.roa
File: Kn7FIX45pA24A81uELRENrcKCkM.roa (raw, json)
Hash identifier: 66HdP2V64kAkEhVsGD+6l7m0niSn2g/MAybwMd3xaPg=
Subject key identifier: 2A:7E:C5:21:7E:39:A4:0D:B8:03:CD:6E:10:B4:44:36:B7:0A:0A:43
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0185830D8F5B291750796A8659F51DB4FEB0
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Kn7FIX45pA24A81uELRENrcKCkM.roa
Signing time: Thu 05 Jan 2023 17:49:41 +0000
ROA not before: Thu 05 Jan 2023 17:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17941
IP address blocks: 212.30.40.0/22 maxlen: 22
212.30.56.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:83:0d:8f:5b:29:17:50:79:6a:86:59:f5:1d:b4:fe:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 5 17:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a7ec5217e39a40db803cd6e10b44436b70a0a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fb:43:78:57:d6:ae:b1:4a:ec:39:fd:75:93:
75:99:f7:1d:45:8f:be:8b:5e:ee:61:3a:9d:b3:91:
ac:9f:46:47:f1:81:30:fb:0b:61:eb:0d:c9:c4:b8:
b8:61:c0:97:5d:5a:f2:19:4e:3e:34:0b:28:47:47:
0e:72:d8:0a:ca:3b:fa:4e:99:0e:9a:2f:88:8f:b5:
23:17:0b:6d:44:fb:f8:af:65:cc:bc:1e:f0:56:79:
37:a9:ed:b1:e9:6f:08:9b:d1:72:60:20:33:e9:c7:
0f:7f:14:48:6f:8c:41:e5:f9:39:12:d1:3f:5a:26:
d9:ab:2a:88:1f:cd:ab:17:18:b3:81:eb:6e:fa:07:
47:c8:03:c7:c0:ce:48:af:99:b8:01:68:dd:60:ea:
2d:14:e5:e8:a9:c4:55:8c:06:17:73:7c:e6:84:12:
6f:81:2d:e1:1c:b5:be:64:7b:58:f0:fe:d7:38:3e:
d1:b5:d4:7f:01:83:9b:7a:09:55:2c:7b:a7:2c:3c:
87:38:a1:88:a1:52:95:15:79:d7:70:21:95:15:ab:
26:a1:40:26:50:ef:b1:15:55:a2:a6:90:08:fb:8d:
13:3e:7b:c3:5f:e0:58:45:07:52:b3:32:b1:bd:7b:
7f:c6:9b:3f:3c:9e:93:85:a8:56:da:c5:be:8d:cd:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:C5:21:7E:39:A4:0D:B8:03:CD:6E:10:B4:44:36:B7:0A:0A:43
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Kn7FIX45pA24A81uELRENrcKCkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.40.0/22
212.30.56.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:62:35:8c:ac:af:b6:2e:c3:85:a2:13:fa:f9:f1:86:8b:f5:
05:5a:eb:61:fc:0b:9e:29:8b:dc:a5:45:ee:42:31:1f:a9:13:
27:06:13:e1:9b:75:ea:ef:cb:8c:5a:3f:b3:04:1b:65:97:37:
55:84:8f:31:ea:ab:3d:8d:a8:47:8c:93:f0:41:fd:1d:9d:a3:
56:fb:e2:1f:b0:74:99:0e:53:de:32:35:16:7a:48:25:89:9c:
a3:81:10:0e:2b:5f:2b:92:37:e9:74:e7:a9:75:91:cc:8d:9c:
98:b2:3b:69:7f:e6:dc:5b:74:e7:53:14:04:4e:e9:ba:f3:74:
e1:8b:a1:60:b8:bb:c8:05:79:d9:49:b1:94:21:6e:fb:f7:61:
18:a9:e1:dd:8c:d1:ba:79:53:05:96:1c:6d:43:e1:c8:de:81:
85:00:bf:f1:22:a6:66:97:5d:eb:d7:f9:d1:d6:82:1e:3d:36:
06:72:ee:7c:cc:b7:e8:c1:81:fb:96:d4:f0:67:77:5b:f5:35:
6d:2a:fb:d9:11:6b:63:8e:ac:63:30:ce:61:72:71:33:3f:20:
72:d2:c5:5d:69:71:7d:a4:f5:3f:36:ec:0b:2c:e5:9e:24:28:
2d:f8:2e:ce:5e:be:41:3a:83:ab:b0:d1:93:fc:09:9a:1d:bc:
00:a4:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:32 2024 by rpki-client on console-ams.rpki-client.org