Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/cwpyOUQQqJmjOUERrRK7rRH1aCk.roa
File: cwpyOUQQqJmjOUERrRK7rRH1aCk.roa (raw, json)
Hash identifier: DcXXBN11isBOpuGl78AJ7KHo7yD8wnc4gA6/G587fcY=
Subject key identifier: 73:0A:72:39:44:10:A8:99:A3:39:41:11:AD:12:BB:AD:11:F5:68:29
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 01856F14D14DC2AABBF34C5B195021972147
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/cwpyOUQQqJmjOUERrRK7rRH1aCk.roa
Signing time: Sun 01 Jan 2023 20:45:13 +0000
ROA not before: Sun 01 Jan 2023 20:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 212.30.36.0/24 maxlen: 24
212.30.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:d1:4d:c2:aa:bb:f3:4c:5b:19:50:21:97:21:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 20:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=730a72394410a899a3394111ad12bbad11f56829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3d:dc:c4:b4:55:0e:a8:c4:3a:cf:9d:f1:03:
75:3b:4f:5c:6a:f5:11:95:3f:bd:c2:d3:ef:03:ff:
59:9d:38:d0:e1:8b:1a:78:01:f0:2d:28:51:24:f7:
8b:e6:18:5c:d1:74:8b:42:f9:c0:e4:ad:6b:fc:0c:
0a:bf:ea:f0:7b:2d:a8:a2:e6:35:e1:9b:de:d7:e0:
c5:46:d1:b6:48:a6:fc:94:6f:e7:8a:37:f7:c4:cf:
31:58:a6:4b:a0:14:81:8f:80:8d:ff:93:e2:84:a2:
17:f0:38:f2:c2:4f:6f:7e:e5:68:8c:5a:35:cd:4b:
39:95:6b:b6:00:30:eb:b7:92:74:95:cf:b8:05:41:
09:84:37:dc:77:4b:e0:25:7e:a5:69:52:19:8c:e4:
a3:1c:7d:22:af:b0:4f:40:10:e4:8b:85:00:4c:59:
77:ed:e2:1b:23:bb:c8:2c:4d:9a:46:f8:8c:c5:a7:
db:69:25:38:57:b4:53:d0:84:a7:8a:1f:0f:3d:0c:
db:08:85:64:af:55:c3:f3:da:d6:8d:06:d2:8d:34:
7c:b7:13:48:0a:ab:c7:69:68:e1:93:1e:47:a4:21:
b4:7a:6f:2f:7e:81:dd:22:a3:c8:4a:dd:98:d3:08:
18:fb:a2:1a:89:11:cd:07:ee:f6:02:b1:83:27:0d:
5d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0A:72:39:44:10:A8:99:A3:39:41:11:AD:12:BB:AD:11:F5:68:29
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/cwpyOUQQqJmjOUERrRK7rRH1aCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.36.0/23
Signature Algorithm: sha256WithRSAEncryption
97:ec:79:f5:cd:90:93:ee:98:69:71:f4:37:ff:05:06:58:28:
0f:59:a1:fa:4e:88:57:4d:bf:72:37:c6:52:92:db:31:da:c7:
97:d5:fc:90:97:1c:08:be:5c:6b:9b:76:6b:cf:3d:69:1b:fa:
7c:e1:5e:8b:1c:6f:8c:57:af:e9:e9:d0:28:32:be:ea:85:c5:
ae:4d:69:a4:a9:d8:9e:5a:b1:8d:d5:5c:4c:8e:ff:f4:9e:c1:
89:41:12:64:eb:ec:a6:39:f2:e7:e2:f0:4c:e1:a4:9e:a0:54:
c3:c7:fa:88:73:bd:64:9b:46:61:53:ae:4b:d3:fc:0a:f1:a1:
19:fb:75:4d:0b:50:f9:46:7f:83:27:e9:10:5c:d6:9b:50:fa:
c3:b4:17:c7:8f:fc:9f:cb:a3:88:00:a2:a5:a4:4b:87:bd:df:
71:ec:42:e4:05:f2:49:85:b5:99:e9:e0:b2:09:34:ee:8c:22:
cf:bd:84:3d:93:75:34:24:cf:d1:c5:56:1c:e2:f3:27:f5:cb:
5e:66:98:0f:68:af:81:5e:a5:ce:7e:27:21:bf:11:28:33:9e:
8c:89:d8:f8:6f:b2:1e:d8:55:ab:b1:b8:4d:0b:83:52:a6:ce:
31:1f:b0:63:5c:73:c7:1f:50:ae:68:b2:a7:f6:d1:8e:c9:df:
bc:a1:15:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:28 2023 by rpki-client on console-ams.rpki-client.org