Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/r4VysTpud3hHHBgAmhhKPHDltN4.roa
File: r4VysTpud3hHHBgAmhhKPHDltN4.roa (raw, json)
Hash identifier: upVv5jmLuU6jwl97/RGZ26tauNXq7EBKGaiGMKjIvY4=
Subject key identifier: AF:85:72:B1:3A:6E:77:78:47:1C:18:00:9A:18:4A:3C:70:E5:B4:DE
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0185BEBC2E50D37DC686F6A5EE0748292070
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/r4VysTpud3hHHBgAmhhKPHDltN4.roa
Signing time: Tue 17 Jan 2023 07:58:01 +0000
ROA not before: Tue 17 Jan 2023 07:58:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 212.30.44.0/22 maxlen: 22
212.30.38.0/23 maxlen: 23
212.30.48.0/22 maxlen: 22
45.94.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:bc:2e:50:d3:7d:c6:86:f6:a5:ee:07:48:29:20:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 17 07:58:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af8572b13a6e7778471c18009a184a3c70e5b4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:2d:4b:ea:12:b5:49:3a:cc:1b:b4:db:ec:
a7:6f:e4:57:98:fd:c0:c6:4c:fd:a2:9d:ea:be:f1:
04:49:26:ab:d0:28:09:3e:75:bc:2c:07:fe:51:d5:
72:49:04:ed:7d:93:d6:59:2f:f0:98:eb:fc:3e:b8:
da:fa:a2:57:4f:cf:97:19:01:53:13:0c:c2:6a:e2:
5c:7a:66:5a:41:83:74:39:51:4d:f3:2e:d3:5f:4f:
50:ca:92:f8:42:c2:f6:7c:89:d6:9d:8e:06:37:d0:
9a:21:b8:00:32:70:48:20:81:81:24:a5:ef:db:16:
2e:9e:02:cd:37:22:fe:35:59:ab:a2:17:bd:62:02:
c7:fa:a6:13:6e:c9:52:3f:0f:32:e0:ba:29:5a:80:
32:16:11:5a:f9:0b:6a:ad:fe:05:e1:d4:de:a6:26:
ff:c8:ba:be:df:38:1f:70:02:f4:a8:7b:7f:b9:8d:
cc:d8:da:d0:8e:0d:80:cc:6b:a1:7c:a3:a4:44:87:
82:74:5e:50:f2:33:51:32:dd:be:76:c0:e0:6a:a7:
73:a5:f5:6b:3b:f5:22:0d:fc:86:dc:b6:7f:71:c1:
f9:15:b6:3e:7e:bb:fc:40:f8:af:eb:3e:00:9f:59:
31:cb:03:22:40:96:48:d1:48:f6:04:b4:3e:ba:84:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:85:72:B1:3A:6E:77:78:47:1C:18:00:9A:18:4A:3C:70:E5:B4:DE
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/r4VysTpud3hHHBgAmhhKPHDltN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/22
212.30.38.0/23
212.30.44.0-212.30.51.255
Signature Algorithm: sha256WithRSAEncryption
9f:51:92:07:04:ad:f1:33:39:b2:e3:d9:f8:39:48:f7:8e:b1:
0c:28:c0:df:8e:d0:a4:0e:59:92:9a:0b:7f:cb:b0:62:79:78:
ab:88:fb:72:dd:34:36:4d:ab:44:f4:4b:cb:60:48:b1:84:0b:
51:38:99:a0:84:55:94:81:d6:ae:c0:fe:17:2b:01:be:35:24:
4c:17:d4:d6:c8:f9:1a:ed:70:17:75:48:28:9b:f5:a0:e9:71:
ca:7d:f1:57:a0:50:2e:dd:b6:c3:15:60:0a:5d:60:d5:25:c8:
82:0e:e4:85:d7:d3:1c:1a:14:24:83:9c:49:41:99:fe:fe:b9:
c2:02:e9:f4:25:37:f6:cd:4b:cc:0c:c6:c5:8e:b0:0e:2e:b2:
de:9c:75:8b:90:7e:76:20:4f:44:89:f1:69:65:a7:57:dd:61:
70:94:89:24:1e:68:a6:ba:16:f4:8b:ee:b8:66:33:42:93:aa:
5b:22:4d:18:37:25:56:2c:82:62:b8:7b:07:72:71:d6:24:cb:
c9:cd:26:f8:d6:c9:af:78:8f:bb:be:64:23:2f:22:25:47:ef:
fb:f4:8d:11:9e:df:9c:54:8d:f9:74:e6:89:12:e4:19:a5:94:
79:ac:cb:db:b9:75:e5:60:50:1a:c6:0e:e0:a9:9c:5d:cd:41:
64:9b:d5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:36 2023 by rpki-client on console-fra.rpki-client.org