Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/OaHPAgRAtdd3D3rfjacVE4F18u0.roa
File: OaHPAgRAtdd3D3rfjacVE4F18u0.roa (raw, json)
Hash identifier: AriIYy+6UfGLX6mGl5qdRzU3/ttJ2RJqY4N6OjRHaS4=
Subject key identifier: 39:A1:CF:02:04:40:B5:D7:77:0F:7A:DF:8D:A7:15:13:81:75:F2:ED
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 0190DA1F3DC2FD0DB05860D7E17EF4E70899
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/OaHPAgRAtdd3D3rfjacVE4F18u0.roa
Signing time: Mon 22 Jul 2024 11:06:38 +0000
ROA not before: Mon 22 Jul 2024 11:06:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51847
IP address blocks: 116.206.92.0/24 maxlen: 24
116.206.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 08:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:1f:3d:c2:fd:0d:b0:58:60:d7:e1:7e:f4:e7:08:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jul 22 11:06:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39a1cf020440b5d7770f7adf8da715138175f2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:71:a8:d2:9e:19:42:c4:1c:77:ac:92:5d:
6f:34:29:73:45:93:6e:b8:74:ff:75:ff:82:95:ae:
02:83:ee:52:3a:12:29:21:8b:44:9a:27:57:86:22:
38:bc:61:58:dc:45:c7:f1:63:9f:5d:3d:f3:35:55:
41:b7:06:3a:61:79:66:ce:75:bd:7d:87:26:f8:7c:
92:20:d9:24:96:bb:e1:6b:25:ea:32:fc:35:10:e1:
9a:b4:fa:2e:2a:74:53:c0:0f:5c:2b:0e:f2:13:6e:
4d:e3:6f:65:8d:2c:e1:69:0a:02:63:36:cd:93:0b:
f1:73:bc:94:fd:28:04:5b:c6:d3:73:a1:d4:07:2f:
eb:0d:24:38:ce:70:67:e4:f6:ad:86:6d:bc:59:91:
30:9c:41:a9:6d:9c:c4:fa:ad:e6:13:47:45:4f:e8:
33:f3:ea:55:3b:6b:90:6e:3c:c4:1f:9f:d7:44:3a:
98:e8:c6:6d:25:49:ac:62:7d:f1:e2:fc:3e:b5:18:
86:f9:77:8a:04:fd:ce:9f:81:09:5a:db:2c:d6:bb:
82:6f:f2:bf:bd:5b:dd:97:a4:c7:d1:d7:37:99:74:
e4:98:3c:c5:6a:db:92:24:d6:09:93:ac:e8:7f:6c:
74:75:30:48:7e:b1:08:4e:f7:ad:92:1b:2c:ad:b5:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:CF:02:04:40:B5:D7:77:0F:7A:DF:8D:A7:15:13:81:75:F2:ED
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/OaHPAgRAtdd3D3rfjacVE4F18u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.92.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:96:d7:66:de:93:db:ae:7a:9c:e6:e6:8b:5f:15:c5:53:99:
9a:27:8a:d4:4d:97:91:38:7c:38:8c:79:2e:0a:96:40:09:df:
d5:db:6d:0d:e5:6b:c8:58:30:16:b2:24:90:01:81:e4:c9:b9:
8d:54:69:e7:66:f9:5e:d9:20:2d:c9:b3:67:85:29:d0:c4:02:
1b:fe:4c:9c:6a:d8:4d:9f:8d:ff:4c:53:0a:01:33:56:fd:b6:
d1:9c:82:c6:cd:e0:05:99:55:5e:02:f9:53:88:2d:86:5b:ce:
0e:4e:37:25:7c:90:f5:8e:63:8d:cd:08:b2:af:b8:74:7b:5c:
c3:5c:fa:03:bb:22:1b:1f:69:9e:5e:27:35:73:e0:2c:eb:e5:
8a:58:9f:ef:f2:32:28:3f:d8:3b:e6:b0:e0:a8:a4:b5:0f:a7:
6c:65:2a:69:c7:13:30:02:6e:8b:2b:3f:bd:95:89:59:45:e4:
86:5a:14:51:a4:66:69:bc:86:a7:88:28:b6:86:2e:da:93:01:
14:22:64:8f:29:f4:a7:91:d2:7c:72:a2:3f:13:f2:64:71:ed:
5b:49:9e:77:0a:21:37:22:32:8d:fe:69:e0:57:b3:98:31:50:
2a:58:03:76:41:a3:20:ea:2e:8f:40:27:5b:b5:43:f2:46:5d:
f7:68:93:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:40 2024 by rpki-client on console-ams.rpki-client.org