Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/c4Oni6R7UHP8I57ut7bM3ebEbig.roa
File: c4Oni6R7UHP8I57ut7bM3ebEbig.roa (raw, json)
Hash identifier: hnpK++6l4lLHSAFs0vNfW7SsH0YuDyntYiASnSXiafs=
Subject key identifier: 73:83:A7:8B:A4:7B:50:73:FC:23:9E:EE:B7:B6:CC:DD:E6:C4:6E:28
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018BAA3BF6A28C031B2B65BFCDDCE9E750B7
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/c4Oni6R7UHP8I57ut7bM3ebEbig.roa
Signing time: Tue 07 Nov 2023 14:42:18 +0000
ROA not before: Tue 07 Nov 2023 14:42:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212435
IP address blocks: 212.30.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:3b:f6:a2:8c:03:1b:2b:65:bf:cd:dc:e9:e7:50:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Nov 7 14:42:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7383a78ba47b5073fc239eeeb7b6ccdde6c46e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:e1:62:2d:72:7f:0e:a3:6a:43:49:07:0e:
a0:01:a5:94:b0:0d:95:8d:8d:8a:a4:ed:f3:70:2f:
7e:8f:b6:0e:be:78:0b:78:9a:e4:35:41:11:f3:96:
1d:7f:b4:62:6e:47:60:91:6c:9b:51:c3:1c:df:17:
93:80:18:14:e1:0d:37:76:87:47:4d:ed:aa:5e:fa:
a2:64:1c:28:93:19:ec:b6:13:4f:a5:9d:6c:8d:3d:
a7:06:2c:80:78:33:71:b8:63:eb:12:a1:37:b9:53:
3a:39:05:1c:07:d4:94:cf:13:b5:0d:70:9b:3e:6c:
f6:f3:cc:1c:60:3f:8d:44:c8:d8:7d:3b:6f:fa:5e:
10:6d:19:71:ab:64:d8:f8:76:70:a2:9d:c6:68:21:
0e:29:f2:5f:8f:e2:b1:9b:e4:ee:6a:50:ee:72:b7:
b8:e3:63:5c:0c:1d:1a:32:b9:aa:01:03:50:30:1a:
7d:d7:b9:2d:4d:32:2c:11:43:ae:af:f5:a1:63:29:
4b:a9:4e:35:2a:4c:78:43:5f:91:dc:f2:01:0e:dc:
8c:67:e8:0d:96:7f:2e:f3:99:c2:6f:93:83:18:eb:
a6:cf:c8:04:e3:ce:60:6f:94:1e:43:92:50:6d:aa:
bd:1f:61:b2:28:cd:90:65:bb:ec:2e:da:28:ac:5d:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:83:A7:8B:A4:7B:50:73:FC:23:9E:EE:B7:B6:CC:DD:E6:C4:6E:28
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/c4Oni6R7UHP8I57ut7bM3ebEbig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.62.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cd:52:a0:65:e9:ba:21:63:a9:da:b8:71:3d:ae:20:0c:66:
fe:d6:5c:ee:b8:ac:b7:b0:ed:03:d6:a3:bb:05:fb:ee:da:eb:
f3:a5:55:f8:59:e9:51:29:d2:7d:2e:a9:ba:e3:42:54:35:f7:
1f:b4:63:73:85:31:0f:d4:cb:fb:a4:01:2d:19:27:97:ba:c2:
a7:b8:e9:b6:bc:43:44:c6:0b:2d:76:7a:9a:30:3a:b3:1e:30:
82:80:25:8c:4c:ed:23:8c:15:4a:3e:9f:8d:79:bb:d7:06:8e:
a9:71:11:83:cd:ea:99:76:fd:93:e5:ff:14:8d:ef:47:2b:7a:
89:3e:e2:dc:2b:7a:8f:1d:50:26:41:e7:5c:72:17:94:b9:58:
7a:0b:9b:80:36:3e:52:ed:18:18:fe:cb:26:0e:c6:5c:4d:99:
26:61:f0:6f:57:11:fb:c8:3d:00:18:eb:59:3a:f3:dd:a5:8f:
5c:dd:0f:fc:7f:96:5a:30:4a:56:c6:15:e3:ab:5b:9e:d4:ba:
16:2c:5b:c8:f3:80:57:39:86:2e:8a:f9:e1:80:c4:03:c5:cc:
89:af:76:15:55:36:4a:c8:d5:4f:32:21:78:f8:05:25:d3:54:
84:ed:83:d9:1b:aa:e0:70:58:2f:9a:5e:23:21:ad:3e:a0:bf:
0e:13:97:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:32 2024 by rpki-client on console-ams.rpki-client.org