Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/WxeJhL3jvmNm0bLSXuDq28OBGy0.roa
File: WxeJhL3jvmNm0bLSXuDq28OBGy0.roa (raw, json)
Hash identifier: MUKiwQnIr55YwtcUEoVdp56Ek0RZo3eUJcFQ0AN+4MY=
Subject key identifier: 5B:17:89:84:BD:E3:BE:63:66:D1:B2:D2:5E:E0:EA:DB:C3:81:1B:2D
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 01856F14D29E0D8ADFF1F5E3AE2AD1366DD1
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/WxeJhL3jvmNm0bLSXuDq28OBGy0.roa
Signing time: Sun 01 Jan 2023 20:45:13 +0000
ROA not before: Sun 01 Jan 2023 20:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 212.30.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:d2:9e:0d:8a:df:f1:f5:e3:ae:2a:d1:36:6d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 20:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b178984bde3be6366d1b2d25ee0eadbc3811b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:89:cd:07:ba:13:ec:9b:1e:58:92:cd:b8:
69:c1:be:f7:71:c6:76:56:9a:44:f4:92:38:6e:8b:
89:ce:80:83:ed:c3:8b:c3:3e:58:5c:e8:c9:79:ba:
e1:78:44:d2:b1:4f:14:20:ce:94:27:59:79:26:0c:
5c:40:b6:8b:9b:f3:a9:f8:e3:4e:fd:7e:50:4e:14:
00:30:47:72:f5:3e:72:d5:49:54:dc:a7:3b:05:91:
81:f7:e3:32:a4:32:6e:b4:b0:dd:b2:d0:2d:d8:15:
ae:be:74:9a:8d:02:9f:90:32:ed:17:71:82:3f:ff:
b9:21:f5:ae:02:63:db:a7:f8:81:6e:62:69:27:bb:
47:97:0d:29:ac:73:85:fa:71:fb:62:46:6f:13:6f:
be:2e:ef:16:68:eb:52:6b:b0:88:f9:cc:79:a2:07:
ce:2f:b6:3b:f6:f5:72:99:36:06:3e:01:8e:3a:7d:
a6:20:d3:86:f3:c7:8e:78:be:ac:82:33:fa:05:47:
ea:84:08:63:c0:34:30:2b:4b:c8:3b:67:dd:10:78:
45:4d:75:29:4f:37:04:75:95:8a:38:ac:91:96:f8:
fa:7a:c3:f4:37:21:36:90:b1:4b:1d:e0:9f:a8:87:
3f:4d:5b:c4:8c:c7:9a:67:ad:78:f3:9d:e3:45:23:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:17:89:84:BD:E3:BE:63:66:D1:B2:D2:5E:E0:EA:DB:C3:81:1B:2D
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/WxeJhL3jvmNm0bLSXuDq28OBGy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.63.0/24
Signature Algorithm: sha256WithRSAEncryption
18:73:a8:2e:91:c5:59:ac:cc:60:d5:b7:9b:51:5a:3d:92:92:
5d:1a:77:aa:8a:b7:52:d5:6a:68:15:91:63:9b:4e:23:03:3d:
51:dd:1d:95:ea:f9:16:c8:5f:d5:6a:ce:d9:25:e9:69:d2:1a:
97:cc:b4:4e:3e:9c:4b:5c:8a:df:29:6a:b4:0c:69:44:72:ef:
dd:53:01:a9:5d:07:2e:28:78:58:70:04:b5:de:92:c7:6f:41:
28:2e:b0:36:18:2c:fc:43:1c:13:df:2f:78:4d:fd:79:0a:f0:
de:22:bd:5d:60:a0:c2:0d:5f:b7:46:cc:7c:4c:16:ab:14:54:
5c:f2:94:83:ab:2b:a5:d8:49:49:74:fc:24:7a:8b:3b:70:8d:
98:9a:cd:05:ff:25:cc:59:1e:ea:31:f9:ce:c8:43:36:17:ee:
fc:fa:f6:b2:c6:bb:5b:a4:b2:c5:3f:ad:9b:b3:52:85:fc:5c:
df:3f:f1:7c:12:ff:e1:57:18:ce:94:53:df:d1:73:eb:db:68:
f9:a0:90:bd:ed:a2:5f:cc:a4:1c:b3:c3:ed:f8:5a:dd:17:30:
2b:0b:6e:6d:7e:d7:02:24:a4:aa:cf:e5:59:91:57:6d:49:97:
39:a9:1d:f9:21:dc:72:21:e2:1f:21:a9:a3:9b:d0:8e:e9:65:
38:2c:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:35 2023 by rpki-client on console-fra.rpki-client.org