Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/dkx6dL4EB6HsWa7XfbvIL2Ad_2A.roa
File: dkx6dL4EB6HsWa7XfbvIL2Ad_2A.roa (raw, json)
Hash identifier: CPGIwdaaFZ4mov4oJQneWRVM1SW99cwuW0jhrc18iLs=
Subject key identifier: 76:4C:7A:74:BE:04:07:A1:EC:59:AE:D7:7D:BB:C8:2F:60:1D:FF:60
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018894BECBFD60CEF6CAFAD695F886DDA562
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/dkx6dL4EB6HsWa7XfbvIL2Ad_2A.roa
Signing time: Wed 07 Jun 2023 07:25:11 +0000
ROA not before: Wed 07 Jun 2023 07:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 212.30.36.0/24 maxlen: 24
212.30.37.0/24 maxlen: 24
212.30.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:be:cb:fd:60:ce:f6:ca:fa:d6:95:f8:86:dd:a5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jun 7 07:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=764c7a74be0407a1ec59aed77dbbc82f601dff60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:cc:0d:5b:ae:5d:2c:31:aa:a9:58:64:c1:
64:b9:ca:8f:d0:ee:f0:13:b8:c5:27:83:02:86:52:
5e:95:71:39:fa:a9:43:46:88:a2:0e:e6:4b:0e:fa:
46:0f:56:fa:9b:48:6d:0d:93:57:8f:7c:92:37:42:
0b:b9:1d:9a:fc:6a:de:81:18:59:c1:0c:01:0a:74:
9d:04:2e:79:50:ce:8b:56:5e:74:0f:00:b4:53:08:
06:54:10:2c:dc:42:8a:26:e1:33:5d:24:83:49:0c:
c5:4d:91:f9:c4:e1:fc:45:90:0d:fb:1a:1f:3c:ed:
50:d8:c1:80:5e:64:cf:fb:e8:6e:24:d0:7c:ce:65:
b8:68:38:0b:ae:91:4d:0d:a8:02:61:30:0d:82:4f:
4e:06:80:56:13:bd:97:e8:a9:b0:81:29:98:7b:19:
b6:a5:4a:e3:fb:eb:28:92:28:a4:31:c5:b1:60:5f:
fb:27:33:ef:a9:7a:b3:76:32:02:f7:4b:29:eb:b7:
07:21:2a:23:55:7b:bb:c8:3b:eb:d8:b5:43:bd:b4:
bf:99:86:b3:72:05:bc:21:e9:d1:aa:84:c6:9e:3b:
e5:ec:6d:c9:69:65:42:15:8e:a5:6f:5d:85:30:62:
fc:d5:8b:2e:76:39:78:09:53:f6:fc:f0:69:e5:ed:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4C:7A:74:BE:04:07:A1:EC:59:AE:D7:7D:BB:C8:2F:60:1D:FF:60
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/dkx6dL4EB6HsWa7XfbvIL2Ad_2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.36.0/23
212.30.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ea:55:c0:23:2d:8f:34:04:67:87:c4:56:22:b3:c1:88:9c:
bf:fb:0e:5f:af:be:af:3f:89:f5:27:9f:3f:87:2e:fa:e6:64:
eb:69:37:7e:74:a8:18:01:3e:66:d0:aa:7c:82:5f:7d:66:c7:
45:2a:71:27:b2:32:59:cc:74:1a:0a:9d:9d:b1:ce:91:e8:86:
00:c9:c2:f9:61:52:08:59:63:92:77:d0:52:21:12:e2:d3:cb:
dc:32:bf:dc:dd:ee:89:50:31:bf:d6:a0:e8:e8:49:22:a6:d0:
21:40:b4:08:b8:b8:47:2b:fb:e0:1b:4b:6c:7a:0e:89:7f:d5:
b2:6a:27:08:0f:e4:29:54:93:fa:00:c6:ca:21:f2:66:de:20:
09:05:af:8b:1e:d7:e3:2c:e1:d8:a3:1d:7c:9c:6d:ab:15:f8:
0e:32:e5:1d:ef:33:c1:bf:e9:99:6f:fe:ad:5e:6d:ca:4b:c5:
8c:d3:1c:2a:f8:49:f0:db:57:94:87:70:fc:3c:12:c9:63:fb:
48:d1:b1:16:d3:d6:d8:48:a9:4b:5b:85:b8:90:5a:15:9c:b6:
18:55:69:19:ac:88:73:c0:9e:19:55:4b:5a:de:b7:1b:0c:19:
e4:f1:00:dc:ff:93:91:29:43:50:53:9b:82:32:14:df:35:4f:
12:bb:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:51 2024 by rpki-client on console-fra.rpki-client.org