Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/pMXpGpie5OEzYAx178v31ez1x38.roa
File: pMXpGpie5OEzYAx178v31ez1x38.roa (raw, json)
Hash identifier: Xjca+71XmjgnHRXgUWbTpz6CzFwt3Zq+IU14TO9m2Q0=
Subject key identifier: A4:C5:E9:1A:98:9E:E4:E1:33:60:0C:75:EF:CB:F7:D5:EC:F5:C7:7F
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0188C30C0421C2F95B701B865405E843FA42
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/pMXpGpie5OEzYAx178v31ez1x38.roa
Signing time: Fri 16 Jun 2023 07:12:04 +0000
ROA not before: Fri 16 Jun 2023 07:12:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 212.30.44.0/22 maxlen: 22
212.30.48.0/22 maxlen: 22
45.94.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:0c:04:21:c2:f9:5b:70:1b:86:54:05:e8:43:fa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jun 16 07:12:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4c5e91a989ee4e133600c75efcbf7d5ecf5c77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:30:97:f3:fb:d2:71:78:75:09:b0:63:4a:
9d:fa:75:70:cc:bf:8f:26:92:8e:73:aa:d5:4d:fd:
04:cf:ab:d9:bf:b4:98:25:35:35:b2:29:c8:3b:97:
15:9b:f1:8d:44:04:f5:85:25:06:51:c6:f0:d9:56:
cd:db:56:55:e5:0d:ea:d9:cc:88:10:75:f9:da:90:
9d:b4:16:b9:be:05:76:16:32:88:62:a8:ac:84:28:
d7:9d:e4:39:b8:8c:f3:a9:b1:08:73:4f:ee:4e:92:
ab:32:d8:41:3e:57:93:47:63:ba:c4:f6:71:97:38:
3d:50:0f:71:b2:15:74:e4:42:3d:59:58:8e:2d:c2:
05:94:1d:f6:68:80:24:8c:87:fa:7e:0a:64:45:91:
e5:f8:ce:4f:9a:d6:b5:46:b8:0d:77:39:00:c6:56:
0a:72:69:2e:57:fb:1d:a2:73:f4:5b:20:e4:f6:e4:
65:89:7d:01:5e:b6:6c:9f:ed:86:c3:cd:08:02:96:
11:53:a3:ad:32:76:03:bf:23:5d:df:01:f1:39:80:
32:eb:c9:81:3c:5e:fc:d3:d8:1c:0e:0a:51:3a:4d:
35:e0:79:c6:ac:72:15:5a:34:8c:93:94:6b:b1:72:
f8:39:0d:95:71:5c:71:97:c1:ac:93:bf:46:3c:63:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C5:E9:1A:98:9E:E4:E1:33:60:0C:75:EF:CB:F7:D5:EC:F5:C7:7F
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/pMXpGpie5OEzYAx178v31ez1x38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/22
212.30.44.0-212.30.51.255
Signature Algorithm: sha256WithRSAEncryption
32:88:2d:15:4c:63:94:95:fa:6b:3e:5c:c6:d4:10:aa:01:18:
f3:ec:56:96:b3:3d:57:bf:42:05:48:f2:e4:05:7f:bc:54:d2:
8a:b1:96:8c:3e:bf:54:23:89:3c:d2:26:39:d9:9b:05:42:8f:
26:b0:c3:17:f3:96:94:1a:eb:55:12:e7:43:cb:93:4b:23:fb:
ab:23:80:76:57:ec:2c:a0:50:56:8c:8c:00:a0:94:23:ed:91:
37:cb:5a:95:ed:e1:f4:7e:9d:24:39:47:ed:0d:51:6b:8f:83:
ae:e6:25:41:3e:00:2c:7c:c1:ef:a7:88:ab:41:e4:a3:2d:d3:
e0:3a:9b:d2:48:9e:d8:72:1a:14:d5:1d:6d:13:35:7b:0e:8c:
06:f0:6a:e0:04:b2:56:34:43:d9:3e:81:dd:c6:30:2a:e2:f5:
70:15:dd:85:05:9b:fb:b4:e4:a7:6b:48:23:68:ad:93:09:0c:
5d:2c:23:f0:42:4f:32:96:65:92:3b:b4:77:79:02:48:f7:aa:
40:30:10:31:c0:14:86:f4:4c:c8:eb:0e:b6:08:68:e3:1e:fe:
94:6f:b9:0c:17:3d:cb:22:bc:49:07:74:1b:4d:15:41:e6:b7:
0e:ab:1f:46:5c:15:54:6b:28:bf:ba:b0:b7:6b:dc:52:14:fe:
a5:d1:3c:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:51 2024 by rpki-client on console-fra.rpki-client.org