Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/hVeAny-FAFJECBKXTz6AloG7Iqw.roa
File: hVeAny-FAFJECBKXTz6AloG7Iqw.roa (raw, json)
Hash identifier: OUqftPKFQmdcIV+XQ9whMTMR/6U5rjHpSIYjtDf2c8M=
Subject key identifier: 85:57:80:9F:2F:85:00:52:44:08:12:97:4F:3E:80:96:81:BB:22:AC
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 01856F14D05171914CA1D163B3D131EE279A
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/hVeAny-FAFJECBKXTz6AloG7Iqw.roa
Signing time: Sun 01 Jan 2023 20:45:12 +0000
ROA not before: Sun 01 Jan 2023 20:45:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136744
IP address blocks: 212.30.61.0/24 maxlen: 24
212.30.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:d0:51:71:91:4c:a1:d1:63:b3:d1:31:ee:27:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 20:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8557809f2f850052440812974f3e809681bb22ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:0b:7c:6f:a9:f0:2a:e9:0b:62:da:28:63:
83:70:1c:be:33:07:c1:75:c3:4e:ca:ca:bb:86:7e:
f6:b1:07:ca:c9:0b:54:a7:3e:6a:08:ac:80:01:ca:
98:99:4c:19:6c:4f:82:b4:46:1b:01:d0:56:dd:bf:
33:92:a8:a6:88:0f:6c:ff:ba:fb:5d:c9:13:03:db:
36:83:49:7e:85:7b:d2:48:de:ef:b2:c2:00:8d:39:
e6:4c:07:94:10:32:e6:a9:2a:eb:de:6d:22:56:9f:
a3:8f:30:b5:8f:86:83:89:a7:5c:03:86:d3:3a:96:
3e:5c:92:a4:3d:f4:44:04:f3:02:d5:04:96:3d:6d:
a9:b4:3f:99:6f:9e:73:af:d0:d3:71:0b:e5:b8:ff:
6a:9c:77:47:54:26:cb:9c:84:e2:c9:d8:4f:91:e7:
aa:92:18:ca:31:00:11:8f:c3:ca:19:c7:51:2b:3b:
d7:21:7e:ae:24:cf:d4:71:6b:4f:ea:40:c2:52:60:
7c:c6:97:e8:c7:8d:cc:97:96:1e:49:f7:90:d0:ba:
67:a8:26:99:de:1b:b0:69:b7:3e:26:61:a4:f4:ae:
04:86:38:65:4f:f5:36:f3:a0:6b:65:97:56:eb:d8:
ea:3b:cb:52:73:ea:20:42:b5:10:89:9e:7f:18:e0:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:57:80:9F:2F:85:00:52:44:08:12:97:4F:3E:80:96:81:BB:22:AC
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/hVeAny-FAFJECBKXTz6AloG7Iqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.61.0-212.30.62.255
Signature Algorithm: sha256WithRSAEncryption
2b:60:d3:2e:8a:51:8e:e4:d8:db:76:d0:30:be:e4:17:b6:25:
ad:84:5c:d2:c5:1f:2a:07:ce:03:83:06:14:c8:85:08:94:7c:
50:b5:2c:16:41:d7:9b:79:b4:e5:31:61:94:ea:02:86:13:4f:
1b:d2:51:dd:d0:6f:68:22:ef:70:90:1f:83:fd:35:65:b3:0b:
39:c8:d9:90:f9:0a:f1:c0:14:07:94:0a:6f:76:3b:98:85:13:
0a:f9:76:bf:42:8b:51:31:75:5d:33:f8:44:ca:c1:94:36:b9:
c1:c0:3f:b6:81:3a:58:d6:b3:b6:62:ae:b7:f4:7a:af:20:ee:
fc:d8:63:7c:55:8f:7d:be:d6:b3:77:a0:32:f6:d1:32:f1:f1:
2d:2b:04:1a:b7:0c:3c:40:7b:29:99:b3:d7:12:d5:1b:f1:d0:
36:7b:19:0b:13:ba:f5:5f:0b:3d:5e:01:b8:cc:eb:f0:09:84:
05:0e:dd:b1:5c:bb:b6:af:a8:7f:56:76:67:43:cd:8c:21:3a:
e7:e3:90:39:5b:0e:8e:a9:3c:d1:68:90:35:23:ce:fa:e3:9a:
90:59:59:f2:73:c9:f2:ce:60:23:7e:ec:7c:ed:01:8e:bc:e2:
1e:0a:2b:07:a6:10:bd:8f:37:83:d9:4b:aa:da:0a:bd:3d:38:
53:3a:a0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 15:24:56 2023 by rpki-client on console-fra.rpki-client.org