Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/riLYErBhWwU5mbrusnNkqwEU1-0.roa
File: riLYErBhWwU5mbrusnNkqwEU1-0.roa (raw, json)
Hash identifier: s6hK5shTFD1jI0wt5yOtmxOhEuJ1snum8hCIQ0psZsE=
Subject key identifier: AE:22:D8:12:B0:61:5B:05:39:99:BA:EE:B2:73:64:AB:01:14:D7:ED
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 01856F14CD28DCC1071B636981355A08484E
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/riLYErBhWwU5mbrusnNkqwEU1-0.roa
Signing time: Sun 01 Jan 2023 20:45:12 +0000
ROA not before: Sun 01 Jan 2023 20:45:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 212.30.44.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:cd:28:dc:c1:07:1b:63:69:81:35:5a:08:48:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 20:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae22d812b0615b053999baeeb27364ab0114d7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b7:28:8d:eb:ed:19:5c:8d:cd:ef:9d:51:0f:
65:41:91:c9:e7:d7:9c:66:84:f1:1d:3e:08:2d:e9:
28:54:c6:24:d5:25:70:a2:78:02:7f:de:57:f6:5f:
94:07:6e:38:66:9f:8b:d4:2c:50:16:eb:9f:ab:e7:
12:ec:fc:7e:d9:a2:bd:54:1d:3a:4f:5d:1d:ef:b7:
a8:64:73:4a:0c:39:37:48:87:96:70:98:da:a9:a4:
0d:90:1c:65:23:dd:4f:e8:e6:04:0d:6e:b8:fd:ef:
ec:05:eb:d6:3a:bd:9b:f0:50:67:c0:51:45:f7:77:
64:7f:83:02:9a:ab:7c:d5:b6:f3:59:96:71:6a:4a:
f7:ce:df:02:89:a7:ac:b9:25:05:aa:de:63:67:1a:
e6:53:42:57:c1:9b:83:35:fb:c0:88:d6:c7:f1:75:
b3:aa:34:d5:27:91:ff:22:db:14:44:ff:95:e4:1c:
36:af:d4:cb:dd:f5:4a:60:f4:12:12:7a:b2:56:5f:
33:f6:c0:63:03:5e:7a:08:8a:cc:6c:58:94:e4:59:
26:23:72:e4:b0:92:e3:b3:6e:af:0a:79:6c:2b:e4:
76:22:2c:f1:08:06:45:36:33:e3:e3:51:42:22:c1:
b3:58:fe:c0:a6:26:81:68:56:01:c3:a2:20:6f:ff:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:22:D8:12:B0:61:5B:05:39:99:BA:EE:B2:73:64:AB:01:14:D7:ED
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/riLYErBhWwU5mbrusnNkqwEU1-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:a9:f3:61:f9:f2:b4:63:8d:b3:a3:34:55:43:47:d7:81:91:
11:bf:4d:64:34:80:43:81:85:d2:e8:d0:7c:f4:0f:c5:25:0c:
e1:b5:31:11:f8:3b:46:df:c4:76:09:9e:49:a5:84:8a:a2:b0:
80:09:9f:69:e5:84:07:b5:2e:48:3a:71:5b:6e:b0:d2:9b:20:
c3:71:37:23:63:b5:57:48:2d:0d:f8:ee:d1:1e:26:ab:e9:29:
66:b3:f8:29:e9:14:d7:73:39:b7:21:c1:cc:da:67:03:83:bf:
b7:b1:87:51:ef:e6:b3:a7:9f:23:f3:35:74:43:ee:97:57:71:
eb:d9:86:28:50:c4:0e:cc:7a:c4:b1:5b:76:13:22:d9:85:11:
8e:3d:42:e5:81:26:69:17:13:72:95:16:04:3b:fb:e0:c2:71:
4f:37:ad:71:cb:82:e5:dc:12:14:cb:a5:d6:39:14:63:ff:f2:
73:b7:27:c7:b1:20:3a:a2:b7:d3:60:d3:e9:8d:02:41:d3:00:
a8:26:cd:5f:3a:6e:0b:3a:19:86:a0:de:9d:0f:96:95:a2:54:
7b:d6:de:d1:07:50:77:41:7d:f9:ee:0c:68:d4:33:1c:7e:12:
57:f0:77:70:22:73:09:94:cd:f5:7d:21:32:92:f1:78:6e:dd:
4a:65:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:28 2023 by rpki-client on console-ams.rpki-client.org