Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/a0ncLmF6yo449twnfBmXvdHdxYk.roa
File: a0ncLmF6yo449twnfBmXvdHdxYk.roa (raw, json)
Hash identifier: lh/XJ+9JNG9bGdkb8O2onXp/DDHICuXGrvMHKcDqXgU=
Subject key identifier: 6B:49:DC:2E:61:7A:CA:8E:38:F6:DC:27:7C:19:97:BD:D1:DD:C5:89
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 01861B8CFC0B140068C993041A654B5A9EF0
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/a0ncLmF6yo449twnfBmXvdHdxYk.roa
Signing time: Sat 04 Feb 2023 08:31:09 +0000
ROA not before: Sat 04 Feb 2023 08:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204356
IP address blocks: 212.30.32.0/24 maxlen: 24
212.30.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1b:8c:fc:0b:14:00:68:c9:93:04:1a:65:4b:5a:9e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Feb 4 08:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b49dc2e617aca8e38f6dc277c1997bdd1ddc589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:1f:40:e8:ac:d3:2e:d0:0b:fc:d3:3c:1a:
9e:27:2d:30:41:50:6f:c6:1e:21:47:0d:0d:0d:9f:
67:87:e1:11:73:a3:81:61:83:f0:ec:a0:14:0c:a9:
85:c0:1b:3a:62:00:80:9c:7a:a0:64:71:88:e1:e7:
9b:20:db:97:53:94:30:ff:8b:a1:07:64:58:23:17:
b0:a9:2b:9f:56:df:ff:27:b2:a2:cd:0f:70:62:63:
5e:1e:31:ba:d6:01:2d:0c:9a:2b:46:5d:89:c2:90:
6f:86:93:a4:9e:55:6e:e9:50:83:df:b0:dd:a7:25:
fa:0b:5d:5f:3c:84:6e:a4:43:59:aa:e3:08:23:1a:
5e:f0:ee:74:63:bf:95:42:88:a3:0c:42:c0:19:f8:
71:92:ed:fc:dd:6b:d1:97:a1:7e:47:ce:a1:67:16:
36:dc:e9:5c:d7:77:74:3e:b1:a9:0f:c6:27:01:1a:
9d:85:22:4e:4b:64:71:53:c0:ec:04:0a:f0:83:56:
f3:2c:d1:32:2f:06:5f:5b:5e:4f:7b:87:32:39:d5:
12:47:5f:5e:db:a2:01:da:5b:c4:0f:52:50:5e:4c:
d1:7a:7d:59:ec:9f:cb:c4:f6:63:0d:bf:8f:86:26:
a9:be:4b:c9:78:ff:b3:3b:09:f7:cc:c0:48:89:5b:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:49:DC:2E:61:7A:CA:8E:38:F6:DC:27:7C:19:97:BD:D1:DD:C5:89
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/a0ncLmF6yo449twnfBmXvdHdxYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.32.0/24
212.30.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:cf:6c:15:9c:0c:fe:aa:05:d8:3c:31:e8:dc:10:88:27:06:
3a:d5:8b:9b:89:ad:ac:e4:48:fc:9a:11:da:21:b1:95:9b:a2:
26:bd:eb:c3:1c:87:9f:ff:fb:15:f9:f7:14:82:36:d1:28:e7:
95:05:c0:d0:f8:c9:ee:24:a7:b8:c6:c4:f6:ad:a3:d6:a8:72:
03:37:76:24:8d:e3:e5:6f:4d:61:54:ee:99:34:a1:06:22:a2:
24:c7:cb:29:f1:47:c0:77:02:40:3f:25:e9:71:3f:f3:15:6d:
f7:c7:e3:2f:f6:ab:27:18:de:7a:cb:ac:d9:48:36:e4:86:d6:
ce:0f:69:3d:4a:e7:7c:75:d9:0c:c8:3c:6f:d9:00:f2:d7:f3:
c9:6d:5a:21:35:1e:bd:e6:03:ee:c1:a2:d1:22:ba:92:e9:39:
86:7e:52:53:98:fb:7a:12:cb:73:89:58:ff:2c:b9:93:f1:5c:
fa:2a:2b:45:95:9d:3a:db:33:c1:f4:58:4c:5d:f7:c2:99:a4:
13:15:a6:85:b1:97:2a:3e:ae:cb:63:f4:36:0e:ce:d1:01:76:
df:67:c9:db:4e:27:69:0b:a0:52:84:09:23:da:11:5e:5f:da:
99:d6:1d:22:b4:c1:4c:36:3d:3d:3c:0e:4e:b1:bd:3b:c5:86:
77:e6:29:df
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 10 14:09:31 2023 by rpki-client on console-fra.rpki-client.org