Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/dFH5mFwCswNfgifsodpdmYu-lYk.roa
File: dFH5mFwCswNfgifsodpdmYu-lYk.roa (raw, json)
Hash identifier: PuUCjv9QwXag/Jn8d5ZhLlfDxYBuNZAWl5ihbgfe9wM=
Subject key identifier: 74:51:F9:98:5C:02:B3:03:5F:82:27:EC:A1:DA:5D:99:8B:BE:95:89
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 01856F14D1B0D608E723A14397D9989C56E1
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/dFH5mFwCswNfgifsodpdmYu-lYk.roa
Signing time: Sun 01 Jan 2023 20:45:13 +0000
ROA not before: Sun 01 Jan 2023 20:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204356
IP address blocks: 212.30.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:d1:b0:d6:08:e7:23:a1:43:97:d9:98:9c:56:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 20:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7451f9985c02b3035f8227eca1da5d998bbe9589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:70:0f:44:f0:53:2f:76:37:ea:2e:f9:4d:
d4:d7:32:79:66:5f:12:03:7f:ce:64:ba:0c:29:24:
82:ae:79:fd:65:19:b2:47:ac:cf:8f:25:03:b1:42:
78:92:45:d5:ee:d6:66:b2:1f:97:ca:ce:f7:66:17:
aa:e6:05:eb:c7:c1:3f:f2:6f:37:bd:aa:f3:7a:7c:
4f:42:b2:ef:c1:bc:f1:98:69:b2:9b:53:6f:12:28:
14:dc:50:c2:89:6b:20:99:68:08:99:e4:9a:10:e8:
90:20:64:8e:d9:45:3d:7b:71:d0:14:f5:3e:c8:d3:
a1:95:a4:86:54:16:75:d1:39:85:48:27:5f:b5:87:
d9:ea:c4:c8:11:61:75:7c:02:54:06:54:f9:fa:a8:
ab:98:01:ad:02:0b:30:c9:f3:f6:a8:a8:b9:8b:fd:
94:83:2e:46:d1:6d:2b:ca:85:62:85:76:19:76:49:
9f:5e:b4:40:c8:65:01:e2:cb:87:12:f1:b4:18:0b:
19:17:4d:a7:d5:c0:22:ca:99:8f:58:a9:f0:de:2c:
83:b5:c4:c9:f2:34:27:97:88:09:57:4e:4d:20:b0:
3c:c2:26:ed:5d:c9:bc:c5:9a:4b:d7:f1:95:e9:d2:
45:ec:2a:31:1d:09:25:9b:ce:23:e6:25:a8:2c:53:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:51:F9:98:5C:02:B3:03:5F:82:27:EC:A1:DA:5D:99:8B:BE:95:89
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/dFH5mFwCswNfgifsodpdmYu-lYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.32.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:58:70:fa:83:f3:fc:1c:53:de:2c:29:b4:2e:d6:24:a8:46:
ef:07:e9:2c:47:2a:0b:1a:86:1c:dc:8d:22:6e:02:72:e5:56:
e7:90:7f:95:df:4f:0e:5f:b3:0f:20:94:22:bc:c5:25:c8:d9:
9e:62:9d:88:70:8e:01:ee:18:50:8f:38:eb:6c:8e:c2:f0:cb:
d5:2e:d4:12:9b:7b:65:72:16:2f:6d:4b:10:df:50:4d:72:e6:
f0:49:50:c6:5a:eb:bf:18:b1:dd:4a:b5:05:ca:2c:fa:d2:17:
21:10:37:0b:61:89:cc:90:e9:e9:01:2e:bf:c2:c8:c8:0f:08:
0a:4c:ee:08:43:b0:c1:27:f6:57:e3:97:f8:27:23:83:29:19:
1a:0f:13:c3:e2:99:d2:8c:4e:da:f8:71:b9:c5:8c:30:d8:d8:
42:4e:84:f4:d3:38:9e:88:8a:36:84:0b:1e:ac:d0:d1:3c:23:
13:aa:7c:56:5c:54:c4:f4:af:92:49:71:8a:e8:97:fa:4d:d9:
1d:8f:45:cc:df:ce:70:20:85:8d:81:f0:8a:d3:82:5e:40:64:
30:6d:10:79:fc:9a:fa:7d:98:f7:dd:7f:94:f8:e9:11:59:65:
80:7e:0d:a7:db:04:0d:97:2a:1f:65:a9:bb:45:c0:9e:b9:1d:
d9:88:9a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:28 2023 by rpki-client on console-ams.rpki-client.org