Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/cj-NmfGs5sMGrgmW8QYITQJpesk.roa
File: cj-NmfGs5sMGrgmW8QYITQJpesk.roa (raw, json)
Hash identifier: 5LwYHfImE7uSJlDvcMN2zCTAgS8qnxwORD55nyTxDhs=
Subject key identifier: 72:3F:8D:99:F1:AC:E6:C3:06:AE:09:96:F1:06:08:4D:02:69:7A:C9
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 018C0AF55CEC0B2AB9551D062820A8276CC2
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/cj-NmfGs5sMGrgmW8QYITQJpesk.roa
Signing time: Sun 26 Nov 2023 09:28:21 +0000
ROA not before: Sun 26 Nov 2023 09:28:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34397
IP address blocks: 213.210.196.0/24 maxlen: 24
213.210.195.0/24 maxlen: 24
213.210.192.0/18 maxlen: 18
213.210.216.0/24 maxlen: 24
212.107.97.0/24 maxlen: 24
212.107.96.0/19 maxlen: 19
212.107.99.0/24 maxlen: 24
212.71.51.0/24 maxlen: 24
212.107.105.0/24 maxlen: 24
212.107.103.0/24 maxlen: 24
212.107.106.0/24 maxlen: 24
212.118.96.0/19 maxlen: 19
212.118.100.0/24 maxlen: 24
212.118.102.0/24 maxlen: 24
212.118.107.0/24 maxlen: 24
212.118.106.0/24 maxlen: 24
212.118.108.0/22 maxlen: 22
212.118.115.0/24 maxlen: 24
212.118.119.0/24 maxlen: 24
212.118.124.0/24 maxlen: 24
212.118.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Nov 2023 13:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:f5:5c:ec:0b:2a:b9:55:1d:06:28:20:a8:27:6c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Nov 26 09:28:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=723f8d99f1ace6c306ae0996f106084d02697ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:8d:41:6d:07:78:e2:6c:d4:21:45:bd:be:
44:b1:f6:38:a6:24:0c:2d:36:7a:dd:62:c7:7b:56:
01:10:71:65:b7:36:22:56:d0:02:f3:f8:f0:c8:a8:
e9:c6:2e:53:fc:3a:fa:0e:17:b2:c2:f0:12:a1:3f:
99:44:36:ac:64:ad:e0:f9:64:3c:d4:95:86:de:cd:
8b:1d:87:a1:11:72:32:9e:14:0d:21:25:ff:69:12:
0e:fb:a6:bd:04:5b:dc:2e:d9:b2:d5:2c:b2:45:40:
ab:81:a6:47:1f:a9:1e:9c:b9:69:e3:c7:21:c4:f1:
49:42:68:f6:b5:db:18:ac:07:d9:8d:55:18:7e:d3:
bc:44:c5:33:ec:5b:4a:6f:17:44:9e:9a:f0:8b:1f:
2c:cf:46:03:c6:8d:36:42:db:c8:8c:b6:1b:79:2d:
55:3d:0d:34:a3:2f:51:92:5f:7b:eb:e6:6d:b9:d5:
76:5f:3f:3f:14:ed:9e:9c:d7:a0:5f:81:36:08:ab:
30:1f:1d:dc:21:3e:ec:b2:8a:7e:0f:9a:ea:02:dd:
cf:aa:8f:f0:2a:24:b0:10:f9:6f:f7:53:08:60:af:
7a:09:8a:5c:ac:59:1a:0b:42:64:5c:0f:b2:95:20:
0a:ce:54:6f:d3:61:ac:b9:02:da:9f:16:6d:74:ca:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3F:8D:99:F1:AC:E6:C3:06:AE:09:96:F1:06:08:4D:02:69:7A:C9
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/cj-NmfGs5sMGrgmW8QYITQJpesk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.71.51.0/24
212.107.96.0/19
212.118.96.0/19
213.210.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:43:e5:f9:3b:bf:52:b5:a0:61:ef:df:2f:06:ef:1b:cb:4f:
a7:19:e5:f1:83:42:f8:91:5c:cb:24:bc:01:8d:03:8b:4c:4c:
90:9b:bc:36:8c:04:e0:fb:c8:30:06:c4:28:02:9d:42:e6:85:
bd:8d:76:65:00:8f:4b:79:5f:e2:ea:01:23:56:60:38:d1:d4:
f7:d0:7b:84:d2:1b:73:a9:bd:38:63:61:97:fa:3e:a2:20:6d:
47:88:32:61:b2:a1:f6:52:37:ae:ed:29:09:1b:b1:22:78:c4:
be:0b:c3:ef:23:84:5b:2a:4c:29:89:d4:90:e3:3f:5e:2f:86:
4a:b7:74:b5:c8:f4:c3:cc:f4:bb:c5:14:f6:7c:2d:21:82:18:
df:06:7a:61:df:39:a2:21:79:a2:2d:95:29:39:3b:4d:3f:5b:
f6:47:c5:84:47:5a:11:81:27:77:02:7f:67:b8:4c:ff:2d:95:
3a:d4:c3:b8:98:d6:2e:65:9c:c1:da:9c:d0:db:15:28:9b:90:
c5:0e:54:9a:b0:ad:0d:6c:f4:b8:f0:f7:5e:30:91:8e:d5:bc:
7c:aa:af:f7:04:ef:23:ef:b6:d0:d3:8f:0d:51:61:71:ea:1a:
97:62:63:60:57:e5:5e:4f:3c:a5:ca:83:44:74:43:1f:3e:86:
10:ac:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:10 2024 by rpki-client on console-ams.rpki-client.org