Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/njPor2f6bQwZ_cDCQ_vUXuc4wWc.roa
File: njPor2f6bQwZ_cDCQ_vUXuc4wWc.roa (raw, json)
Hash identifier: 411mQOZ5bZ38VvRCwpCg/rzWCrbwC8hDNon7Y82ldEI=
Subject key identifier: 9E:33:E8:AF:67:FA:6D:0C:19:FD:C0:C2:43:FB:D4:5E:E7:38:C1:67
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 018C87FE993E9FEA27D35B54AF738C27B534
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/njPor2f6bQwZ_cDCQ_vUXuc4wWc.roa
Signing time: Wed 20 Dec 2023 16:10:58 +0000
ROA not before: Wed 20 Dec 2023 16:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55933
IP address blocks: 116.206.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:fe:99:3e:9f:ea:27:d3:5b:54:af:73:8c:27:b5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Dec 20 16:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e33e8af67fa6d0c19fdc0c243fbd45ee738c167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ab:a3:fb:99:3e:01:f3:86:85:c7:3a:a6:29:
40:d3:6c:2f:a3:5f:d0:da:f1:df:f0:e1:50:72:5d:
fe:28:4b:50:b0:10:a0:d1:6a:e8:e2:fd:be:f8:d4:
2d:0a:08:74:96:11:3a:3f:e2:b9:68:3d:20:47:bc:
c7:08:a4:e8:0c:fc:e0:f3:5a:cb:92:ba:9b:18:42:
34:f6:f3:a1:7d:7b:7a:06:93:c1:c7:cb:31:fd:15:
10:90:2e:c7:e7:d6:cc:68:bd:b5:e1:81:e8:e2:d4:
6b:54:aa:15:18:5c:9e:37:1c:54:10:5d:2b:a7:b3:
1b:76:3d:de:37:26:c7:0f:a4:69:12:f4:31:85:57:
be:e0:09:05:71:d2:e7:cf:d0:fe:ac:96:ab:18:e2:
80:03:55:dc:03:3c:48:ea:d4:ad:9a:a8:66:40:15:
ef:f4:5d:da:41:cb:c5:27:aa:9c:24:f1:b5:25:06:
ef:a4:1e:4d:c4:25:ec:be:f3:37:cd:09:8d:2f:5f:
a2:ae:9c:cb:c3:4e:47:87:fe:2c:6b:2f:87:d9:f3:
57:09:49:2d:ea:cf:ae:07:7c:3c:54:d1:95:c0:25:
fd:da:bd:c1:70:71:e6:89:1e:20:d1:eb:d6:3e:bc:
7a:b8:16:2d:99:44:41:c6:f7:b9:5f:1d:91:9f:a0:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:33:E8:AF:67:FA:6D:0C:19:FD:C0:C2:43:FB:D4:5E:E7:38:C1:67
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/njPor2f6bQwZ_cDCQ_vUXuc4wWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.95.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c5:6d:8d:df:96:23:0f:3a:3a:12:a3:a4:a0:b6:e4:25:0d:
92:ba:68:07:9c:8c:e1:72:dc:45:83:6d:5a:7a:39:aa:71:3c:
7c:29:c2:1c:9d:ab:4c:05:c6:ff:0a:b5:fe:05:01:02:26:90:
a5:4d:5a:d5:a1:de:1c:10:f0:03:7d:9f:ca:74:e6:7c:07:fd:
61:a5:38:71:86:98:dd:49:b0:92:a2:db:12:84:db:79:f6:35:
50:ef:4a:ae:bc:44:a0:ef:0e:4e:57:94:ec:93:e4:48:57:e5:
0d:33:e4:5d:8f:7e:7c:ab:4b:c5:7c:ed:aa:64:6f:fc:d1:ea:
da:c2:48:bd:34:78:20:5a:1a:0f:c2:2e:da:35:05:ae:f9:42:
96:b3:23:01:3b:73:76:74:9b:f3:88:ca:14:08:06:ba:21:bd:
17:a3:00:b9:92:e6:f2:16:0e:40:45:ec:04:8e:8d:65:51:d9:
2f:ef:eb:0b:2b:56:a2:43:59:69:73:ea:d5:1d:e7:2a:44:99:
8e:b5:5f:dd:56:e1:e0:14:37:4a:54:9b:56:54:36:53:86:ef:
85:26:3b:93:ab:38:b7:54:e7:d2:0c:5c:f6:40:79:c0:b4:55:
59:af:41:de:4e:4e:ff:97:51:1a:f2:d7:fe:78:3d:26:c5:5a:
7d:5f:2a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:33 2024 by rpki-client on console-fra.rpki-client.org