Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/D4IXv0MHVhijPzKTseRUGn6_6As.roa
File: D4IXv0MHVhijPzKTseRUGn6_6As.roa (raw, json)
Hash identifier: avQfLS8+erbXmETz+mY595PnnGW8kuJ12JyQQYNJrM8=
Subject key identifier: 0F:82:17:BF:43:07:56:18:A3:3F:32:93:B1:E4:54:1A:7E:BF:E8:0B
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 018B127CB2D84B891125144083814A667BAA
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/D4IXv0MHVhijPzKTseRUGn6_6As.roa
Signing time: Mon 09 Oct 2023 03:30:43 +0000
ROA not before: Mon 09 Oct 2023 03:30:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55933
IP address blocks: 116.206.94.0/24 maxlen: 24
116.206.93.0/24 maxlen: 24
116.206.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 16:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:12:7c:b2:d8:4b:89:11:25:14:40:83:81:4a:66:7b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Oct 9 03:30:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f8217bf43075618a33f3293b1e4541a7ebfe80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:77:75:25:0f:7d:fb:9d:b4:78:e3:cd:98:
7b:b6:0b:35:cc:7b:c8:4a:e4:c7:f4:c8:b9:8d:55:
3c:b0:19:77:6d:4c:c8:0a:22:a1:59:f5:d2:79:a1:
89:2e:d7:91:a2:4b:aa:68:25:cc:9c:1d:de:e8:0f:
50:c9:65:c0:b1:9e:ab:76:cb:6a:b3:73:f6:d4:b6:
7b:92:91:4b:0e:db:52:84:92:71:74:fc:12:ea:a4:
a3:74:7b:6e:77:43:f8:10:e4:7d:25:cd:f0:eb:5f:
c5:85:18:aa:e7:2d:9f:7b:f7:35:d8:bf:d9:55:3f:
ec:41:5d:3f:0d:da:3e:40:d9:bb:1f:4e:b7:9f:f7:
da:cc:ac:0e:7a:a7:84:34:74:13:5d:1b:5a:ec:23:
51:65:59:42:c6:12:86:6a:f7:4a:79:b5:74:8f:24:
37:ee:92:f9:74:c2:df:9f:de:8f:58:03:7a:c6:07:
38:3b:e4:59:72:c0:fe:b2:2a:97:0f:0a:e2:ef:20:
4d:8d:3d:3d:48:23:c7:39:fe:78:68:a1:97:79:c5:
c4:8d:fd:bd:7c:1e:2d:a8:93:7b:87:17:c1:dd:a1:
ca:de:e6:34:ea:d1:9b:28:aa:b3:35:73:3c:c2:63:
35:54:c8:27:50:5d:25:8f:69:7f:df:8c:53:a9:33:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:82:17:BF:43:07:56:18:A3:3F:32:93:B1:E4:54:1A:7E:BF:E8:0B
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/D4IXv0MHVhijPzKTseRUGn6_6As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.93.0-116.206.95.255
Signature Algorithm: sha256WithRSAEncryption
0b:a8:e7:2c:24:03:47:18:eb:96:ab:48:a3:04:94:0c:d5:e7:
a7:b4:4d:8e:8f:d5:dd:9c:3c:8b:d5:b3:ae:1c:11:aa:97:59:
fd:73:7f:3b:93:9d:d8:3a:89:29:02:99:27:c9:df:80:ab:46:
95:f1:46:30:cb:9e:df:c9:5c:67:03:b0:dc:d3:da:71:ab:5e:
a8:6d:d1:06:f9:25:90:6c:d4:95:bf:8f:e0:cd:42:72:df:dd:
36:7c:0b:d8:8f:4f:da:7f:a8:30:a3:1c:cc:38:8a:86:c7:72:
bc:aa:6f:e7:df:a4:e8:85:d1:24:53:20:42:e9:e5:05:d9:98:
12:82:73:bf:70:3e:16:86:2d:f7:c3:ed:51:54:b8:4d:89:58:
76:3b:85:1b:60:96:fa:2b:8f:76:10:61:6c:5b:43:0b:d8:c7:
1c:40:0e:23:59:12:e7:e5:76:55:99:4a:94:94:49:91:fb:56:
89:6f:52:46:ad:c5:c7:39:b4:ea:60:41:6f:ce:14:2f:2b:52:
72:12:89:b4:5a:f1:2d:7a:f8:1b:dd:19:3d:9d:59:63:a3:bb:
8f:42:16:27:79:4f:53:71:9e:4d:81:9f:fe:8c:ea:eb:c2:57:
5a:f9:bc:aa:75:6d:e5:c3:04:61:b7:8a:13:75:fb:79:c9:6e:
0e:6b:86:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:34 2024 by rpki-client on console-ams.rpki-client.org