Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Nm-bBnNzAcKc6M-SyH2odFQvzHc.roa
File: Nm-bBnNzAcKc6M-SyH2odFQvzHc.roa (raw, json)
Hash identifier: Z3GMVOl0cD/DvMdXTD00MNXSW5YSNpjmkr2IMen6g8c=
Subject key identifier: 36:6F:9B:06:73:73:01:C2:9C:E8:CF:92:C8:7D:A8:74:54:2F:CC:77
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0188807C55F2FC05D581FA6001DF804C1114
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Nm-bBnNzAcKc6M-SyH2odFQvzHc.roa
Signing time: Sat 03 Jun 2023 09:00:12 +0000
ROA not before: Sat 03 Jun 2023 09:00:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 212.30.35.0/24 maxlen: 24
212.30.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:80:7c:55:f2:fc:05:d5:81:fa:60:01:df:80:4c:11:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jun 3 09:00:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=366f9b06737301c29ce8cf92c87da874542fcc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:74:12:4a:e3:38:bf:76:19:4f:c5:8c:e9:
46:3d:70:90:b2:05:63:71:2a:5b:cf:74:24:ec:0d:
5d:85:28:98:83:d4:41:46:a6:f0:b2:0d:96:55:b5:
e7:53:a4:c0:28:57:df:c2:cc:83:92:48:0c:8b:30:
71:5d:59:be:33:11:8f:b6:a4:9b:0b:1a:a2:66:ab:
0a:44:bc:fc:b2:29:33:cc:71:08:cf:91:dc:65:90:
bc:5f:22:2f:41:78:ab:8a:35:f2:1a:d4:8c:c4:a4:
42:9d:f8:48:aa:ba:27:bc:46:aa:15:b8:1a:20:1d:
f4:cb:48:fe:2b:38:46:86:42:e7:a8:7d:fc:85:c1:
b5:32:1e:28:16:1f:ed:e6:8b:cb:e5:a5:7b:a7:03:
44:f3:e8:9f:73:5f:8a:8a:d2:b1:c3:df:1f:bb:72:
12:0b:37:51:1e:5d:fc:c1:df:53:8e:29:a4:ae:59:
87:34:10:b6:21:95:19:56:47:c0:7a:17:eb:5b:65:
52:d6:d9:cc:33:b9:7a:f8:cb:f4:50:94:f6:0c:78:
5f:8d:bf:63:61:ce:d0:8b:8d:8d:0e:1c:fe:c7:b3:
98:80:6c:bc:7a:9e:0c:45:77:16:38:c0:51:41:0d:
1e:fb:ad:6a:d3:c2:a3:a5:4c:a5:1d:ff:41:bb:35:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6F:9B:06:73:73:01:C2:9C:E8:CF:92:C8:7D:A8:74:54:2F:CC:77
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Nm-bBnNzAcKc6M-SyH2odFQvzHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.35.0/24
212.30.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:1c:da:69:2f:7e:f8:07:5a:74:53:82:a2:3c:8f:ea:77:1b:
4c:7d:cc:99:96:eb:11:ba:4a:d4:0b:54:ed:b9:51:9c:f6:5d:
0a:87:04:d1:96:6d:8e:b8:da:97:94:37:4f:31:dc:a5:2e:15:
3d:ac:95:cc:c3:7a:25:e9:c5:b4:49:f2:81:c9:b3:5e:99:0e:
3d:c9:a3:63:15:6a:9f:06:61:ab:09:7c:ed:9d:42:36:48:5e:
2f:82:4f:d6:ef:c8:26:e2:fb:10:59:b0:58:48:43:e6:1b:bf:
f7:8b:74:b3:29:a0:52:81:60:98:1e:1c:0f:25:95:aa:03:ba:
86:89:30:d5:c6:44:b5:12:9d:99:6f:6d:9d:8c:b6:d0:24:64:
1a:cd:ac:c5:48:4d:c9:4d:e0:bb:fa:c9:15:dd:c7:a3:bd:14:
77:e3:86:e5:46:f0:be:5c:17:4d:f8:41:f6:10:50:71:04:84:
a3:16:65:b6:56:3e:12:47:00:89:88:06:24:34:a2:11:10:ae:
a5:70:aa:1b:1b:a6:0a:f2:c3:5d:5d:b4:4f:fd:b0:dd:4f:b7:
81:62:7d:ac:04:f2:e7:fa:30:6d:c1:f6:22:47:23:7d:56:25:
8d:d7:e8:7a:d2:f6:eb:9a:93:f5:e9:5c:33:20:bd:9e:c7:01:
8c:22:56:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:27 2023 by rpki-client on console-ams.rpki-client.org