Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/p8JPEHQeSR3AKKRKNhTye9XkAi0.roa
File: p8JPEHQeSR3AKKRKNhTye9XkAi0.roa (raw, json)
Hash identifier: VDtfUpqIURQQ7b1JfP9rBABltresmlaPl7lSizKiXxk=
Subject key identifier: A7:C2:4F:10:74:1E:49:1D:C0:28:A4:4A:36:14:F2:7B:D5:E4:02:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 018C43D66B8A8AF23B1F3A751965D958B3C0
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/p8JPEHQeSR3AKKRKNhTye9XkAi0.roa
Signing time: Thu 07 Dec 2023 10:32:54 +0000
ROA not before: Thu 07 Dec 2023 10:32:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11161
IP address blocks: 116.206.94.0/24 maxlen: 24
116.206.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 16:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:d6:6b:8a:8a:f2:3b:1f:3a:75:19:65:d9:58:b3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Dec 7 10:32:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7c24f10741e491dc028a44a3614f27bd5e4022d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:22:bd:74:4b:88:24:f9:be:e6:5c:64:d2:
96:86:93:85:d6:34:b1:10:f4:5c:1f:fc:94:a0:33:
62:74:09:4b:08:58:dc:02:6f:e0:7c:00:a0:3e:21:
3d:23:0b:14:a4:6e:ec:9b:4f:a9:08:ef:b5:e9:03:
95:04:12:91:80:d8:f3:76:3e:b4:98:57:9c:f2:21:
20:89:bf:1b:22:a4:8e:48:02:6a:5b:94:12:e2:d8:
f8:26:58:77:cc:be:bb:0a:5b:df:c6:5a:7d:a4:3e:
86:c6:ab:f4:1c:d6:03:b8:75:d9:a1:38:f5:e0:76:
44:42:b5:7b:fd:ff:0c:ad:6a:d1:66:bb:c6:c5:7f:
88:a6:8e:06:12:91:70:6f:0a:10:87:8b:a5:10:bd:
d4:95:03:bd:06:cc:a9:c8:ab:b6:56:fd:7f:15:c1:
dd:e2:fe:1b:a1:34:e7:2d:03:50:0a:cc:6b:e7:48:
44:04:39:9c:52:4c:18:02:3a:00:e5:fd:9f:69:80:
73:ce:b0:f4:08:98:da:25:b7:40:2b:28:f7:02:19:
99:d2:57:11:b1:4b:ef:5e:86:50:bb:57:3a:48:e0:
25:d0:09:0d:d0:96:31:eb:e6:0e:46:fd:4b:e1:19:
bc:b9:e2:1a:a7:82:1e:49:31:76:bd:24:14:d8:2f:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C2:4F:10:74:1E:49:1D:C0:28:A4:4A:36:14:F2:7B:D5:E4:02:2D
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/p8JPEHQeSR3AKKRKNhTye9XkAi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.93.0-116.206.94.255
Signature Algorithm: sha256WithRSAEncryption
42:57:aa:ee:12:2c:c7:45:3e:1b:32:d4:c4:66:d4:26:50:04:
a0:97:5c:a0:8a:6b:80:58:04:8a:5a:68:37:b5:e8:16:0b:4f:
5b:ba:98:3c:0f:fc:98:19:25:b6:bd:e4:01:3d:f6:1b:ed:a4:
6d:58:66:24:1c:8d:65:9c:bb:13:4c:cd:70:f8:e7:87:70:13:
ee:b4:6f:6f:dc:5a:87:e9:a7:33:b1:c9:48:60:c5:ce:c1:99:
51:16:7f:a8:3d:fd:90:26:a4:84:65:28:cb:38:36:94:d1:7c:
36:dc:9b:92:a9:69:18:54:18:e3:b6:1a:f6:26:f5:26:b5:0a:
84:54:a2:85:f9:18:06:29:35:9a:12:a1:e6:89:e5:d1:f3:9a:
5f:00:5d:5b:0d:bf:27:b7:7f:d3:74:fa:a3:68:3a:43:c8:67:
a4:a0:9c:89:f9:c8:57:e0:6a:75:08:96:f6:d2:46:7c:74:dc:
69:7a:8f:33:d6:01:cc:07:3d:de:d2:2f:2c:32:2e:d5:73:4b:
8b:77:1b:eb:f4:33:7d:2c:09:41:dd:dd:96:6f:c1:5b:3c:8b:
f7:9c:dd:98:02:5c:ff:1f:32:5e:88:98:4c:61:d3:36:4e:9f:
6e:45:05:c3:b5:0d:8e:4d:3f:de:2c:e7:9d:2c:db:ff:ff:56:
68:2a:59:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:34 2024 by rpki-client on console-ams.rpki-client.org