Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/auqPEXv3Tg_yWvEqgyVGMj6MFW0.roa
File: auqPEXv3Tg_yWvEqgyVGMj6MFW0.roa (raw, json)
Hash identifier: Gbh+NHDE39McbB7mt6q8q1herkXhHCoXmyISsLaU6h8=
Subject key identifier: 6A:EA:8F:11:7B:F7:4E:0F:F2:5A:F1:2A:83:25:46:32:3E:8C:15:6D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01882090F01EA6F11A49FE736B68E5BCC40C
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/auqPEXv3Tg_yWvEqgyVGMj6MFW0.roa
Signing time: Mon 15 May 2023 17:59:09 +0000
ROA not before: Mon 15 May 2023 17:59:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11161
IP address blocks: 116.206.94.0/24 maxlen: 24
116.206.95.0/24 maxlen: 24
116.206.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 15:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:90:f0:1e:a6:f1:1a:49:fe:73:6b:68:e5:bc:c4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: May 15 17:59:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6aea8f117bf74e0ff25af12a832546323e8c156d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:8b:bb:3d:b8:84:cc:5f:ce:5f:1a:76:64:
db:9e:ec:15:3f:e7:3d:80:17:8b:ed:17:74:de:92:
80:78:e5:42:c4:5c:26:24:25:79:d0:ea:f2:36:d7:
9e:e4:ef:3b:2d:d7:f6:65:15:61:b1:50:63:6d:2c:
3b:67:ba:c2:49:ab:b1:78:01:a9:8a:54:2e:16:1f:
f0:cb:25:a6:12:16:ab:35:a5:c4:d1:37:32:50:48:
c5:ff:bd:1f:c6:14:33:20:1e:9a:4a:b1:8e:24:42:
84:b6:29:83:62:1a:97:0e:48:ce:5b:6d:33:61:f4:
a2:00:b6:56:e2:51:6d:ee:05:88:07:86:42:9a:4b:
2f:38:44:e5:80:09:e2:14:1a:c0:63:c7:1d:3d:04:
04:9f:cd:43:f4:fe:2e:a1:da:45:b7:a8:c2:cb:35:
66:89:f7:ad:3a:89:4c:de:9f:94:f6:c8:8a:07:3e:
7c:da:ac:26:20:5b:18:f7:b2:85:2e:d7:b7:ff:09:
33:8d:5b:47:8c:05:27:26:6a:f2:2c:31:df:68:9c:
8a:0a:d6:1a:ba:08:74:09:be:3e:76:14:2b:4f:42:
08:1e:c4:0f:ac:a6:4b:0d:3f:7f:6a:b0:e8:74:09:
a9:a5:fa:79:ea:64:4b:d5:f0:4a:6c:87:69:72:e8:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EA:8F:11:7B:F7:4E:0F:F2:5A:F1:2A:83:25:46:32:3E:8C:15:6D
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/auqPEXv3Tg_yWvEqgyVGMj6MFW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.93.0-116.206.95.255
Signature Algorithm: sha256WithRSAEncryption
5e:0d:a6:9a:61:08:7c:a5:57:91:e6:f7:71:0f:28:f9:db:83:
27:eb:ad:63:10:1a:1b:f6:54:88:6b:74:a1:2d:7b:35:9f:e6:
87:4b:eb:28:80:af:99:1e:1d:39:f4:3d:51:c2:05:19:a1:b8:
86:7c:14:50:fe:69:51:11:d8:35:8a:8f:51:7d:bf:44:fd:85:
7b:01:28:f8:8c:18:83:64:3b:14:86:08:24:b7:26:7b:38:4f:
b5:55:45:52:23:9f:3a:7d:f1:7b:78:f8:ed:39:a9:f4:4d:49:
db:52:dd:be:04:94:ae:d0:16:30:34:1e:ff:3b:97:a3:91:37:
54:5c:bb:e2:6b:b9:e1:6f:d3:ae:d9:fb:d6:f5:7e:6f:06:2a:
2d:e2:10:7e:89:cc:c9:ef:e2:67:82:2a:e8:41:a0:54:49:c9:
d5:2d:26:ff:6a:d7:88:ce:02:80:d5:8b:fb:75:1c:7d:bf:c6:
93:d4:ee:d8:af:12:59:a7:86:ee:96:16:7f:41:6c:7b:7f:9c:
24:e6:22:fd:fb:34:60:65:1f:17:23:cf:a5:c9:90:cf:d8:8b:
d7:7d:49:be:61:30:10:cf:c6:7c:67:dc:5e:a0:99:a7:1d:43:
10:e1:6c:d0:e8:24:29:d8:39:b2:32:42:e1:6e:9e:3c:8d:56:
37:61:44:fb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYggkPAepvEaSf5za2jlvMQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjMwNTE1MTc1OTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWVhOGYxMTdiZjc0ZTBmZjI1YWYxMmE4MzI1NDYzMjNlOGMxNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX2Luz24hMxfzl8admTbnuwVP+c9
gBeL7Rd03pKAeOVCxFwmJCV50OryNtee5O87Ldf2ZRVhsVBjbSw7Z7rCSauxeAGp
ilQuFh/wyyWmEharNaXE0TcyUEjF/70fxhQzIB6aSrGOJEKEtimDYhqXDkjOW20z
YfSiALZW4lFt7gWIB4ZCmksvOETlgAniFBrAY8cdPQQEn81D9P4uodpFt6jCyzVm
ifetOolM3p+U9siKBz582qwmIFsY97KFLte3/wkzjVtHjAUnJmryLDHfaJyKCtYa
ugh0Cb4+dhQrT0IIHsQPrKZLDT9/arDodAmppfp56mRL1fBKbIdpcujhnwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGrqjxF7904P8lrxKoMlRjI+jBVtMB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvYXVxUEVYdjNUZ195V3ZFcWd5VkdNajZNRlcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAB0zl0D
BAV0zkAwDQYJKoZIhvcNAQELBQADggEBAF4NppphCHylV5Hm93EPKPnbgyfrrWMQ
Ghv2VIhrdKEtezWf5odL6yiAr5keHTn0PVHCBRmhuIZ8FFD+aVER2DWKj1F9v0T9
hXsBKPiMGINkOxSGCCS3Jns4T7VVRVIjnzp98Xt4+O05qfRNSdtS3b4ElK7QFjA0
Hv87l6ORN1Rcu+JrueFv067Z+9b1fm8GKi3iEH6JzMnv4meCKuhBoFRJydUtJv9q
14jOAoDVi/t1HH2/xpPU7tivElmnhu6WFn9BbHt/nCTmIv37NGBlHxcjz6XJkM/Y
i9d9Sb5hMBDPxnxn3F6gmacdQxDhbNDoJCnYObIyQuFunjyNVjdhRPs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:33 2024 by rpki-client on console-fra.rpki-client.org