Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/OeB_N1Qc6hiA2FfzRLsexBSNlrE.roa
File: OeB_N1Qc6hiA2FfzRLsexBSNlrE.roa (raw, json)
Hash identifier: D+a0DYJ9fAHKfY9D3+A71A/nHv6/N63WtObh9R8W3og=
Subject key identifier: 39:E0:7F:37:54:1C:EA:18:80:D8:57:F3:44:BB:1E:C4:14:8D:96:B1
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 018F058E64D47D7C8970965E7702215C740C
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/OeB_N1Qc6hiA2FfzRLsexBSNlrE.roa
Signing time: Mon 22 Apr 2024 11:26:08 +0000
ROA not before: Mon 22 Apr 2024 11:26:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51847
IP address blocks: 116.206.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 15:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:8e:64:d4:7d:7c:89:70:96:5e:77:02:21:5c:74:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Apr 22 11:26:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39e07f37541cea1880d857f344bb1ec4148d96b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a6:cf:31:b1:0d:7a:21:e1:78:66:ea:72:9b:
63:d7:de:75:df:a6:73:f7:b6:4a:0f:a3:fb:e1:67:
e6:bb:60:d4:d7:e3:75:05:d9:43:a6:93:61:22:f4:
f9:d6:41:b6:f8:fb:a0:c6:c4:13:1f:ab:4b:c4:e7:
c8:fe:c5:78:b2:9e:c3:92:fb:0b:e1:d1:b8:63:88:
02:ef:29:93:36:29:cc:97:0b:21:22:6c:1b:ae:3d:
df:db:20:9c:49:25:22:74:15:b0:65:6a:d0:af:d7:
16:cc:83:96:19:dc:19:38:1c:2e:fa:80:ac:58:b0:
d4:1d:1e:8a:e6:a9:68:03:12:b0:bd:d0:a2:46:1a:
15:b5:ed:58:99:c8:58:0f:c3:b0:57:b8:15:3b:ad:
85:8c:3b:0f:65:13:c0:b8:66:eb:c3:cd:e2:12:56:
2c:0d:cc:ad:69:98:a8:27:a4:86:5e:2b:55:df:5f:
72:2c:87:70:26:a4:b1:8f:ac:c5:b4:a5:16:e9:5a:
da:4e:62:a9:1f:38:44:77:de:98:6b:0b:32:e2:9e:
c4:23:38:9c:1d:c5:0d:e4:25:1c:19:b0:fd:8c:8b:
c3:d5:7e:f2:a9:59:3e:3f:8e:27:bd:ee:26:a3:ae:
30:b9:d0:e0:bc:a9:56:29:f7:5a:ad:69:07:be:3a:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E0:7F:37:54:1C:EA:18:80:D8:57:F3:44:BB:1E:C4:14:8D:96:B1
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/OeB_N1Qc6hiA2FfzRLsexBSNlrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.92.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:8d:c4:4a:9a:08:25:de:50:ab:11:7f:71:9a:e8:e6:35:8d:
59:df:4f:e1:52:3b:86:e1:29:26:7d:77:d4:c8:58:a3:98:82:
3d:e9:14:53:be:27:e3:24:98:cc:fd:47:7d:d7:df:b5:59:a0:
a6:f1:c6:35:02:2a:6a:8d:1a:a0:61:83:62:82:48:fb:b7:53:
1e:a7:f5:57:c3:7e:0b:0b:54:1f:99:90:54:7b:0d:14:6d:0d:
77:43:d0:3f:0e:c2:15:d3:76:0a:77:6b:cb:52:0f:e7:69:17:
54:a4:bf:48:e6:61:4d:75:fb:ea:d6:45:da:b8:d3:82:87:92:
0d:f4:c3:0a:ca:3e:0b:40:72:f2:f3:d0:e1:4f:3c:6b:63:6e:
e2:0c:61:ad:41:64:8a:72:78:32:df:71:7f:68:ba:14:d4:09:
18:c8:3d:44:67:28:91:24:ec:10:5d:d1:a1:08:5d:f9:48:12:
48:76:d7:aa:22:65:22:44:52:7b:b8:54:6d:c6:fa:99:f0:33:
5f:18:79:7b:2f:64:6f:32:c3:dd:77:95:d9:52:5e:2f:d1:88:
fc:df:87:c7:c4:26:e1:1f:0c:3f:ef:1b:c9:f9:78:c2:11:b5:
39:7b:44:bd:17:a8:b1:cc:8c:d0:bc:7f:cb:12:d3:1d:b0:21:
2f:69:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:33 2024 by rpki-client on console-fra.rpki-client.org