Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/uwAVByvkXRANQUbuHstSnsEFKuw.roa
File: uwAVByvkXRANQUbuHstSnsEFKuw.roa (raw, json)
Hash identifier: nopp795iWuQJUqFZjjrEyLAQ1knGPMthwyx31c/erbg=
Subject key identifier: BB:00:15:07:2B:E4:5D:10:0D:41:46:EE:1E:CB:52:9E:C1:05:2A:EC
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 01856F14D405ECE2E8F33BDD276664339DAF
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/uwAVByvkXRANQUbuHstSnsEFKuw.roa
Signing time: Sun 01 Jan 2023 20:45:14 +0000
ROA not before: Sun 01 Jan 2023 20:45:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 212.30.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:d4:05:ec:e2:e8:f3:3b:dd:27:66:64:33:9d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 20:45:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb0015072be45d100d4146ee1ecb529ec1052aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:75:13:4b:74:f2:c2:55:30:f9:26:16:04:
0e:70:d3:94:92:5d:92:4e:23:d6:2e:d1:a6:42:1c:
ec:62:3c:4d:63:18:4a:77:d7:bb:b4:8f:7b:1a:fb:
d4:1a:ed:b4:b5:f6:de:62:5a:b0:85:55:e1:f2:01:
fe:c0:a9:28:ce:22:8b:a0:e7:f3:86:06:dd:c1:c4:
4d:93:00:20:0a:63:86:9d:0f:52:10:1f:c6:bc:e4:
32:13:1f:31:52:20:76:60:22:5b:ac:b0:64:dd:18:
cb:ca:1f:e6:dc:51:f0:1e:61:4a:0b:2e:c8:05:6d:
53:2d:7b:6c:cd:5c:46:a6:18:64:29:0c:98:3e:6e:
e0:ff:00:21:99:5a:72:af:32:57:d5:0b:0a:80:1c:
b5:54:3a:bd:75:ef:06:5c:c9:06:2c:dd:d3:04:41:
25:e2:6f:35:1b:a8:8a:c2:24:b7:89:2d:ca:3c:73:
ce:ac:07:fb:f1:6e:c5:ef:c3:90:16:c0:d8:ff:45:
ef:4c:2f:de:e3:c1:49:e5:bc:7c:f1:72:f0:fc:ac:
8e:ce:b0:fc:34:07:66:26:f3:d7:5d:97:91:05:5a:
ec:73:95:98:cb:30:cc:e3:cd:80:89:d8:b8:2a:ef:
97:1f:84:be:95:bc:69:53:9b:9a:d3:23:2d:c0:47:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:00:15:07:2B:E4:5D:10:0D:41:46:EE:1E:CB:52:9E:C1:05:2A:EC
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/uwAVByvkXRANQUbuHstSnsEFKuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.60.0/24
Signature Algorithm: sha256WithRSAEncryption
00:35:84:13:be:92:1a:10:b7:6a:b4:16:9f:2c:a5:ff:88:a2:
75:81:70:a9:2e:8d:fd:3e:88:97:d9:72:9b:f0:a0:a0:6f:6b:
55:85:dd:c9:5b:b4:31:d8:41:4f:48:0b:52:d4:9d:b2:bf:e7:
7b:76:74:d2:ba:94:64:92:ec:9e:5f:f4:5e:41:2e:47:2a:68:
1e:d3:87:8a:b9:11:45:32:f4:f8:a7:08:03:d2:b3:c5:35:ef:
cc:be:25:b7:9d:4c:a0:50:fa:7d:06:97:a6:a8:2e:81:a6:e6:
1c:f4:87:a6:85:67:43:e6:25:45:e9:6d:92:ef:44:75:24:01:
fa:4a:aa:7a:58:9e:86:f7:ad:7e:8a:ce:99:bf:c2:1a:14:8e:
e9:39:e7:3b:13:fd:b3:78:9a:96:2f:30:55:a6:f0:43:8e:23:
4c:ae:f0:b7:e0:0c:a2:67:fe:64:df:b0:23:92:d8:18:f7:5b:
50:a7:40:20:c2:d2:7b:5f:96:8d:7f:14:ee:63:5e:57:54:15:
9b:c3:37:1e:4b:8f:d6:ee:f1:10:c5:97:14:27:99:26:f7:e4:
75:75:59:e3:81:67:4b:d8:1c:b6:bb:de:55:24:a9:25:bd:e4:
3b:ae:bd:d6:16:da:7e:a0:ec:7e:f7:1b:9f:f1:57:d6:64:79:
01:da:9c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:32 2024 by rpki-client on console-ams.rpki-client.org