Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/az0QJEIy1TRg0gX_xAqBTt5V9bI.roa
File: az0QJEIy1TRg0gX_xAqBTt5V9bI.roa (raw, json)
Hash identifier: lYYNl9SVA8K56KZMdihS0Lb4DrX9uCGvpw5wq/uPsT8=
Subject key identifier: 6B:3D:10:24:42:32:D5:34:60:D2:05:FF:C4:0A:81:4E:DE:55:F5:B2
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0191222745A8233D473544662BBE528EBB28
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/az0QJEIy1TRg0gX_xAqBTt5V9bI.roa
Signing time: Mon 05 Aug 2024 10:48:04 +0000
ROA not before: Mon 05 Aug 2024 10:48:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17941
IP address blocks: 212.30.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 24 Sep 2024 17:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:27:45:a8:23:3d:47:35:44:66:2b:be:52:8e:bb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Aug 5 10:48:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b3d10244232d53460d205ffc40a814ede55f5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0e:46:b2:f9:49:43:44:04:40:29:8b:1c:02:
4f:cb:27:8b:89:c3:46:6d:05:f8:63:64:64:ca:c3:
7b:14:c9:10:a5:04:26:0b:db:cf:2a:2e:b6:3a:a9:
83:27:e9:85:bb:81:75:7a:53:4e:34:2d:a4:6c:88:
a6:cb:11:80:03:34:04:88:5f:b8:e1:8f:1a:48:be:
a0:54:1c:82:ef:00:db:e1:9d:55:e1:92:8a:f7:3c:
4b:25:75:10:64:aa:84:0a:30:2c:75:be:ac:62:48:
96:cd:22:80:ce:fb:b7:0e:61:16:68:7a:bc:e4:78:
03:63:43:c2:62:9f:b1:e5:0e:08:ae:9b:16:9c:55:
2a:a7:e9:a1:85:f0:4b:5c:38:a4:24:18:a7:f5:f3:
c0:27:64:d0:e9:cd:fb:4a:fb:3e:6c:73:8b:cd:04:
65:89:62:80:39:1f:5d:58:c0:a1:e2:57:43:5b:32:
3a:d3:1c:d5:ef:85:e3:64:0d:31:14:41:c3:92:22:
ec:c9:73:92:05:dd:90:ff:f3:a4:cd:e3:9c:46:32:
44:61:0e:f7:92:7e:79:5a:fb:11:eb:f5:61:71:6f:
04:48:bc:04:3e:07:36:7b:67:28:73:3b:60:27:2b:
af:b9:ec:dd:d6:a4:4f:62:0f:0a:d1:de:a3:7e:2a:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3D:10:24:42:32:D5:34:60:D2:05:FF:C4:0A:81:4E:DE:55:F5:B2
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/az0QJEIy1TRg0gX_xAqBTt5V9bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:b3:ef:7c:6c:8a:9d:f1:5e:14:9f:25:6c:2e:9f:e1:e4:40:
68:46:ec:de:b6:3d:1b:d9:b8:3e:38:4f:ce:9c:58:68:c3:c9:
23:4f:a1:fc:26:f8:ad:eb:34:17:91:8f:35:e5:50:03:1f:7d:
b6:26:09:e3:fb:71:d3:ce:1e:af:b6:6e:1a:31:19:9c:43:8b:
28:74:05:ab:48:23:fe:15:ea:ea:1c:88:3c:e8:d8:9b:cc:00:
c0:f5:77:dd:64:80:2f:03:1f:cb:23:dc:4f:55:91:ba:7a:73:
8b:06:d9:88:1c:60:52:b7:a8:eb:f1:89:18:cd:11:b0:51:d4:
50:40:4b:dd:dc:6b:aa:b2:1c:3c:86:a7:83:5f:bd:38:3b:79:
a4:0f:d9:dd:ce:4b:5f:28:9b:0c:bd:d3:16:e1:68:81:ae:f3:
0b:38:a1:20:3b:26:71:11:64:35:f9:57:fe:39:cd:6f:c5:16:
38:a6:80:6f:58:8b:f4:b9:57:11:62:37:ab:e5:9e:a8:a8:e9:
1e:68:d4:a4:d0:a4:e2:72:4b:98:aa:de:70:66:59:af:e0:82:
c2:4c:10:dc:2e:20:0f:60:99:09:b9:44:98:6e:26:24:04:5e:
49:24:4e:86:2c:fd:a6:03:8f:32:6f:b7:2c:1e:ba:34:9a:11:
7d:89:ff:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 20:31:13 2024 by rpki-client on console-fra.rpki-client.org