Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/b-cNxyWcLqJobpxvLipzhGof5VU.roa
File: b-cNxyWcLqJobpxvLipzhGof5VU.roa (raw, json)
Hash identifier: 0vN1h/6xQz8igPjvpJ15ROciWVxCh8ik5ALW8srY9B0=
Subject key identifier: 6F:E7:0D:C7:25:9C:2E:A2:68:6E:9C:6F:2E:2A:73:84:6A:1F:E5:55
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0188C30C03C9A89897D67F87842211A058AB
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/b-cNxyWcLqJobpxvLipzhGof5VU.roa
Signing time: Fri 16 Jun 2023 07:12:04 +0000
ROA not before: Fri 16 Jun 2023 07:12:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 212.30.38.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 05 Sep 2023 19:41:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:0c:03:c9:a8:98:97:d6:7f:87:84:22:11:a0:58:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jun 16 07:12:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fe70dc7259c2ea2686e9c6f2e2a73846a1fe555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:a6:86:2f:45:9e:84:32:be:2e:90:36:7c:
f8:8b:66:ac:3d:bc:75:db:6e:a7:ba:75:7c:20:07:
4b:37:84:6b:63:68:c0:c4:33:5c:cc:8f:7a:64:c5:
d6:c5:28:fa:16:14:9b:07:f1:4f:d2:06:04:2f:11:
f8:f0:24:a3:1e:83:8c:4f:6d:ea:9d:35:d9:80:85:
16:9a:f6:66:e3:ae:6a:0d:16:07:0c:ea:a7:4f:5d:
6b:8c:eb:48:ee:64:db:30:f9:53:8b:55:e5:41:53:
a8:ee:85:f6:4f:4f:b0:54:8b:39:f7:ea:0b:d4:30:
6c:7c:54:04:f1:51:ed:8d:a7:71:41:1c:a0:74:ca:
c8:53:38:dc:4c:3c:1d:48:1a:d5:d1:26:5d:dd:3d:
3b:7a:0d:a5:47:2d:0f:fb:7d:a3:bd:d0:e8:03:34:
e0:dd:d8:aa:02:08:28:86:eb:a2:84:8f:3a:1c:f5:
fb:08:e6:01:1c:b6:2e:f8:cd:ec:cc:e2:dc:d4:d9:
6b:b0:84:4f:4d:ae:94:a5:2f:05:a5:4f:14:36:19:
79:b4:4c:c5:41:3d:31:1f:4a:48:41:98:16:a5:a8:
5a:5b:21:74:31:c4:1a:08:83:dc:41:7d:d7:c9:4a:
b2:82:6d:76:7d:74:60:af:d7:05:a5:00:d4:b9:0f:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E7:0D:C7:25:9C:2E:A2:68:6E:9C:6F:2E:2A:73:84:6A:1F:E5:55
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/b-cNxyWcLqJobpxvLipzhGof5VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.38.0/23
Signature Algorithm: sha256WithRSAEncryption
34:2c:20:15:6b:31:fd:ee:bb:14:f8:3e:df:69:c6:58:4b:07:
1c:d5:2d:b0:60:8c:a8:ec:7f:08:b4:06:b7:e6:2e:ef:a7:60:
ed:ac:0d:3e:2d:77:55:58:c4:36:90:eb:ed:d4:fd:e1:8b:85:
d6:aa:25:e2:03:a3:c7:0d:7e:7f:58:50:f5:ec:34:a9:f4:e3:
e0:e6:a7:b1:b4:4e:d4:1d:75:bd:55:b1:19:a6:02:bf:12:c6:
86:35:13:01:69:ec:50:74:65:99:06:a8:9a:f9:6c:14:1b:8a:
b9:9f:5a:07:78:f0:ec:2f:cc:02:30:01:d8:84:a7:81:dd:20:
e1:22:6f:50:b6:fa:4b:4b:d0:0e:58:69:90:a2:e0:fe:cb:4f:
17:12:2a:a7:74:73:37:df:3e:1f:2d:38:23:17:de:64:78:d7:
2f:12:0f:a8:3c:95:65:a1:1b:01:ee:21:d8:0c:18:f5:d5:b2:
11:27:ab:71:d4:76:5e:a3:1b:76:0a:6f:3d:f2:61:5b:01:bd:
c6:74:64:f5:5b:9d:e4:3d:d7:4f:4d:bc:4b:ea:4f:53:6b:38:
a0:f4:2f:a3:27:d8:5d:7d:72:18:54:e0:5a:8d:68:22:d1:8a:
c6:bb:22:9b:b6:d5:87:a4:ec:d6:e8:d4:32:d9:77:54:08:27:
9b:24:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:28 2024 by rpki-client on console-ams.rpki-client.org