Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/L-ZCTPDFvprJYCSlEjbXcdg4A7g.roa
File: L-ZCTPDFvprJYCSlEjbXcdg4A7g.roa (raw, json)
Hash identifier: I3IwnzzSm+NVWdWDvr37a/hwmhgLkGetTRRQuZ95ze8=
Subject key identifier: 2F:E6:42:4C:F0:C5:BE:9A:C9:60:24:A5:12:36:D7:71:D8:38:03:B8
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 019214F6C20D64AF9C279ED08A379060C0CF
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/L-ZCTPDFvprJYCSlEjbXcdg4A7g.roa
Signing time: Sat 21 Sep 2024 14:22:48 +0000
ROA not before: Sat 21 Sep 2024 14:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 212.30.44.0/22 maxlen: 22
212.30.48.0/22 maxlen: 22
212.30.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 30 Sep 2024 07:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:14:f6:c2:0d:64:af:9c:27:9e:d0:8a:37:90:60:c0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Sep 21 14:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fe6424cf0c5be9ac96024a51236d771d83803b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:ff:cd:ae:63:0d:a9:32:d9:6b:c2:56:85:
df:57:3f:72:e6:14:11:d9:37:1c:b5:25:b6:ef:f9:
8f:45:be:76:81:47:50:b8:00:a0:b3:a1:0b:55:c7:
a3:ee:b0:69:b2:06:70:8e:db:fa:81:21:e4:57:b1:
39:42:97:c6:30:e2:03:56:a9:81:10:a1:11:f9:d9:
60:8f:9c:fa:de:24:b0:4c:6b:8e:96:4c:a4:52:f5:
a3:a4:5a:b9:b3:14:1a:12:ba:59:fd:a7:3a:0f:83:
4c:eb:65:d8:15:54:ba:2b:32:6b:a6:0b:dc:73:50:
e2:a1:f9:80:e9:ac:e2:a6:83:76:d6:47:87:a5:45:
92:7a:fc:09:ce:82:8a:66:a9:d3:5f:6a:ba:94:10:
af:55:08:0f:31:44:0f:c5:5f:dd:14:5f:ce:c8:c4:
b9:be:90:83:4d:62:cd:70:34:e8:b2:92:a5:b3:b5:
ea:00:78:19:85:61:bc:4a:5c:a4:e2:58:aa:60:dd:
c3:8c:71:20:7d:9e:9e:30:52:05:b4:31:f6:5e:9e:
87:12:d6:c7:2c:cb:d5:1a:3c:57:3f:5a:e5:19:74:
59:f9:fd:b0:ef:42:72:90:2d:c3:20:7f:24:23:4d:
11:c9:b3:95:9d:ec:49:49:6c:c2:09:9a:96:cd:31:
53:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:42:4C:F0:C5:BE:9A:C9:60:24:A5:12:36:D7:71:D8:38:03:B8
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/L-ZCTPDFvprJYCSlEjbXcdg4A7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.44.0-212.30.51.255
212.30.56.0/22
Signature Algorithm: sha256WithRSAEncryption
72:47:5a:d2:b5:86:e4:80:b3:eb:74:e4:9b:6b:9f:32:84:c2:
aa:b3:b6:66:ad:f7:7f:39:18:41:a8:d8:b4:ec:45:23:1e:eb:
a1:e5:4f:df:17:ca:58:9f:d3:e8:e4:b7:79:3f:f5:b1:6f:87:
b9:19:c6:8e:89:1c:b4:84:04:ba:39:6e:df:a8:b6:40:43:ab:
c5:56:4f:67:6a:98:9a:83:80:a4:51:b3:6e:fc:6f:a9:84:55:
a6:6d:47:9f:4d:19:db:99:cd:97:10:d0:e5:be:e8:08:d0:c0:
ca:09:e8:49:ea:fb:3e:bc:a2:35:ed:45:36:ce:63:1e:0f:06:
4d:76:9c:32:ab:59:0d:94:db:24:2a:9b:5e:05:3a:de:f9:f2:
db:dc:85:66:ae:54:bb:31:05:7a:13:39:c5:42:85:11:5c:69:
e1:b4:48:b2:0a:24:6f:e7:dd:71:c5:6e:c3:62:16:93:1a:aa:
bb:3b:1b:7d:03:83:e7:8b:ba:05:b9:5b:01:4c:75:32:9e:71:
0a:73:9e:1f:2a:71:09:37:e6:65:a2:95:af:12:41:c1:0a:8a:
05:17:f3:06:a4:1b:b0:1d:e0:eb:e4:02:85:9e:2c:ac:cd:20:
10:ca:fb:5b:9f:1e:11:ac:44:e0:48:06:e2:d3:34:f4:29:b7:
2b:46:28:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 30 09:20:30 2024 by rpki-client on console-fra.rpki-client.org