Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Jb2HblaUnoGVKUGOK4ZzPI49s6E.roa
File: Jb2HblaUnoGVKUGOK4ZzPI49s6E.roa (raw, json)
Hash identifier: mY1HP5OZ6seVJUJk5Z5PwKDS00ses/C2wzaqBxLJRsA=
Subject key identifier: 25:BD:87:6E:56:94:9E:81:95:29:41:8E:2B:86:73:3C:8E:3D:B3:A1
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01875BA3ECAE032A284A26035128879C84ED
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Jb2HblaUnoGVKUGOK4ZzPI49s6E.roa
Signing time: Fri 07 Apr 2023 12:14:42 +0000
ROA not before: Fri 07 Apr 2023 12:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11161
IP address blocks: 116.206.95.0/24 maxlen: 24
116.206.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 17:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:a3:ec:ae:03:2a:28:4a:26:03:51:28:87:9c:84:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Apr 7 12:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25bd876e56949e819529418e2b86733c8e3db3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:3a:d8:22:79:67:e5:02:63:42:1a:a1:82:
fb:1e:6c:18:bd:24:b6:b9:89:1b:4f:bd:76:9c:7a:
06:ec:fc:67:75:56:4b:9d:80:d6:a5:6d:a2:d7:da:
3a:d9:5d:32:da:3a:d3:ac:3d:e9:f2:0c:4a:84:32:
72:8e:63:fe:ae:9a:24:e1:88:52:eb:12:d7:8f:d3:
94:7b:69:94:4f:bb:1b:65:13:b4:f3:92:53:d4:ef:
b5:39:e5:0c:dd:f9:6e:e9:79:90:b5:79:10:d6:01:
63:e0:ec:85:98:20:bf:43:fa:09:cc:b7:e2:da:e8:
87:98:5e:01:50:e2:f5:78:02:c3:5f:6f:27:10:21:
fe:4d:30:fe:75:10:69:2d:b5:88:6c:c9:96:f0:c4:
70:dc:0b:d4:7f:ff:1f:00:c0:6d:f0:5b:b8:e0:34:
11:24:11:e6:02:28:c9:35:23:d3:f0:d4:d2:b1:1f:
74:ce:5a:b1:49:5c:f4:45:27:77:36:f4:9f:d0:76:
8c:1c:b3:b0:7d:c9:f3:e5:f0:fb:e3:6a:94:57:61:
ec:b3:a3:e9:6a:3f:2b:c7:ec:48:66:fe:ba:f1:7b:
5a:e3:6b:d5:cf:2a:9e:14:b3:b3:78:72:24:eb:dc:
ed:17:a6:50:80:69:97:ad:39:c5:6b:46:fe:de:ee:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BD:87:6E:56:94:9E:81:95:29:41:8E:2B:86:73:3C:8E:3D:B3:A1
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/Jb2HblaUnoGVKUGOK4ZzPI49s6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.93.0/24
116.206.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d6:d5:9b:4f:8e:40:5f:36:e9:4a:c0:b5:c0:4c:4f:41:88:
4f:47:34:47:b7:83:11:f6:bf:20:91:7d:e3:24:53:7e:e0:be:
a2:99:b3:fb:0b:b0:c2:8d:82:d9:18:43:a0:80:c1:33:8d:37:
f8:32:11:7a:f6:98:60:4e:e4:b3:57:72:28:d7:c0:e6:0f:94:
3c:41:41:05:5a:01:6e:22:d1:24:99:2d:33:9d:c9:60:ba:67:
f0:fc:a0:c2:c7:c4:b9:cb:50:cd:6e:ec:ce:d5:b0:d8:92:b8:
c0:28:02:6e:b8:16:13:05:26:90:2a:cc:2c:5c:d9:9d:bb:1a:
5f:36:23:04:6f:db:8d:58:6f:79:f8:7b:57:89:08:c8:ca:c9:
01:00:74:b9:2b:ef:d3:2e:c4:e6:75:08:21:02:b9:61:6d:91:
86:d8:4f:02:17:98:d6:b6:32:4a:1e:67:f3:7e:a7:20:1a:63:
43:50:37:33:a5:3a:6d:01:82:28:99:19:bd:33:ab:61:2b:bb:
2c:97:45:1f:4c:ba:13:9f:0c:98:d1:6e:5d:a3:51:a8:bb:9a:
8b:c4:b4:a3:ba:20:63:59:f6:cd:58:e3:0d:02:ba:05:f5:c0:
3a:2a:fb:35:28:7d:33:72:07:46:66:f8:b7:d8:04:ef:b6:e8:
1b:64:c9:9e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdbo+yuAyooSiYDUSiHnITtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjMwNDA3MTIxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWJkODc2ZTU2OTQ5ZTgxOTUyOTQxOGUyYjg2NzMzYzhlM2RiM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt862CJ5Z+UCY0IaoYL7HmwYvSS2
uYkbT712nHoG7PxndVZLnYDWpW2i19o62V0y2jrTrD3p8gxKhDJyjmP+rpok4YhS
6xLXj9OUe2mUT7sbZRO085JT1O+1OeUM3flu6XmQtXkQ1gFj4OyFmCC/Q/oJzLfi
2uiHmF4BUOL1eALDX28nECH+TTD+dRBpLbWIbMmW8MRw3AvUf/8fAMBt8Fu44DQR
JBHmAijJNSPT8NTSsR90zlqxSVz0RSd3NvSf0HaMHLOwfcnz5fD742qUV2Hss6Pp
aj8rx+xIZv668Xta42vVzyqeFLOzeHIk69ztF6ZQgGmXrTnFa0b+3u5z/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCW9h25WlJ6BlSlBjiuGczyOPbOhMB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvSmIySGJsYVVub0dWS1VHT0s0WnpQSTQ5czZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAdM5dAwQA
dM5fMA0GCSqGSIb3DQEBCwUAA4IBAQCO1tWbT45AXzbpSsC1wExPQYhPRzRHt4MR
9r8gkX3jJFN+4L6imbP7C7DCjYLZGEOggMEzjTf4MhF69phgTuSzV3Io18DmD5Q8
QUEFWgFuItEkmS0znclgumfw/KDCx8S5y1DNbuzO1bDYkrjAKAJuuBYTBSaQKsws
XNmduxpfNiMEb9uNWG95+HtXiQjIyskBAHS5K+/TLsTmdQghArlhbZGG2E8CF5jW
tjJKHmfzfqcgGmNDUDczpTptAYIomRm9M6thK7ssl0UfTLoTnwyY0W5do1Gou5qL
xLSjuiBjWfbNWOMNAroF9cA6Kvs1KH0zcgdGZvi32ATvtugbZMme
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:33 2024 by rpki-client on console-fra.rpki-client.org