Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Rxqs0vCb4IL-aV2-SfpMHQ0qYFs.roa
File: Rxqs0vCb4IL-aV2-SfpMHQ0qYFs.roa (raw, json)
Hash identifier: rRMf3FszTZ+REeF/QpUsSIBTm+zpUrih7YsSQD3ChfA=
Subject key identifier: 47:1A:AC:D2:F0:9B:E0:82:FE:69:5D:BE:49:FA:4C:1D:0D:2A:60:5B
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018FC948CDBC85AD0DCC3AB02C4A6B55217A
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Rxqs0vCb4IL-aV2-SfpMHQ0qYFs.roa
Signing time: Thu 30 May 2024 11:35:42 +0000
ROA not before: Thu 30 May 2024 11:35:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136744
IP address blocks: 212.30.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 19:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:48:cd:bc:85:ad:0d:cc:3a:b0:2c:4a:6b:55:21:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: May 30 11:35:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=471aacd2f09be082fe695dbe49fa4c1d0d2a605b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:19:b0:8c:68:ac:a1:0e:a0:5f:0f:ae:29:
0b:4e:bc:94:d6:9b:5b:89:d4:cc:95:4b:a0:5c:b4:
e5:b4:a3:1f:1f:93:0a:c2:2b:7e:95:d0:b8:60:4b:
93:15:40:9c:80:24:e4:30:a2:44:42:f8:8f:e4:f7:
19:90:a5:47:38:76:cd:8c:77:75:de:db:57:8c:f8:
ff:34:a9:9d:dc:87:1b:27:a7:03:7e:56:05:c9:67:
9e:84:28:40:35:57:7b:0d:2e:bc:a2:72:25:14:24:
3a:b4:4a:0b:46:81:b2:a0:f3:f6:55:9a:c7:92:27:
ff:7c:2b:82:25:11:cb:63:f0:82:d8:6e:d4:48:10:
4f:28:9b:b4:65:bf:cf:e7:70:4d:50:fc:d2:ce:77:
40:42:4a:c5:a0:d4:2e:cf:1d:8a:6f:b2:49:83:15:
dc:92:8a:0c:0f:01:fe:f4:5a:f4:20:30:41:59:b1:
9e:41:e0:e4:d8:9f:48:4b:d6:87:41:d4:6c:28:81:
d6:46:7a:fd:e5:63:c3:e5:1c:11:14:11:a3:51:01:
ef:c6:35:27:56:b4:e8:78:f5:98:76:60:f7:41:22:
50:ef:e1:99:8c:3a:56:40:ed:22:48:30:fc:b8:80:
14:e0:0e:cb:bd:58:b5:d0:77:89:d7:58:fc:eb:6b:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:AC:D2:F0:9B:E0:82:FE:69:5D:BE:49:FA:4C:1D:0D:2A:60:5B
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Rxqs0vCb4IL-aV2-SfpMHQ0qYFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.61.0/24
Signature Algorithm: sha256WithRSAEncryption
12:92:15:62:a1:04:77:b4:1a:27:67:1a:51:6b:3f:05:8b:4f:
b3:a2:9d:bc:f2:9a:e1:89:d8:45:fe:e8:76:27:ce:14:e5:4a:
a1:8d:ba:54:78:80:8d:a0:25:e6:b7:1d:79:62:ba:40:aa:91:
48:9a:58:8e:27:95:e9:e5:6f:ae:c6:56:7c:4b:fc:1f:83:1a:
45:c3:71:9d:de:e1:f1:a9:1c:8d:48:f8:63:c4:97:7f:0c:7f:
fd:44:d1:c9:31:dd:e3:12:d7:c3:c7:b1:28:c5:9c:7d:a1:8a:
9d:50:fe:7c:86:3b:e4:52:50:dd:85:6f:7c:ab:1e:c3:2d:11:
85:51:da:d4:8f:42:82:cb:94:29:52:46:b6:db:b8:be:77:c0:
74:dd:c4:5b:28:2b:d4:1d:8a:07:a8:d5:ac:eb:73:97:79:ef:
89:bc:2c:0d:60:89:92:9f:52:1f:c6:29:b9:a9:87:42:cf:ef:
5c:e8:48:80:81:71:1c:56:55:c6:3a:28:38:81:f5:31:8d:c0:
a8:b9:b4:f3:67:6a:89:07:9b:14:d3:8c:38:76:08:d0:5d:cc:
e8:5c:8e:26:f4:c6:72:cb:87:61:0d:d1:97:3d:81:b6:b6:4a:
d8:85:31:e4:d2:a1:e3:6e:fd:5c:81:cd:d2:12:70:a6:7b:79:
4a:e8:ce:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:02:51 2024 by rpki-client on console-fra.rpki-client.org