Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/sHmPPFFbLG0J9_LZiS-7dxzkmrI.roa
File: sHmPPFFbLG0J9_LZiS-7dxzkmrI.roa (raw, json)
Hash identifier: p5hmwIxdat27kFhtDpQlMNFaB9J6go34dVxgGlK2Rvg=
Subject key identifier: B0:79:8F:3C:51:5B:2C:6D:09:F7:F2:D9:89:2F:BB:77:1C:E4:9A:B2
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 0189350CFC8ACFC3056A3E5472E3B8B44F77
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/sHmPPFFbLG0J9_LZiS-7dxzkmrI.roa
Signing time: Sat 08 Jul 2023 10:29:50 +0000
ROA not before: Sat 08 Jul 2023 10:29:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11161
IP address blocks: 116.206.94.0/24 maxlen: 24
116.206.95.0/24 maxlen: 24
116.206.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Oct 2023 01:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:35:0c:fc:8a:cf:c3:05:6a:3e:54:72:e3:b8:b4:4f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jul 8 10:29:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0798f3c515b2c6d09f7f2d9892fbb771ce49ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:00:9a:8e:f9:2f:1f:b9:9a:b5:d5:4e:00:
ed:1e:f6:bb:cc:16:38:ec:b4:80:29:79:9a:8e:c9:
1f:9b:5b:d3:82:84:91:54:fa:12:aa:af:d4:24:4a:
df:b5:98:cc:5e:9c:00:94:a9:e1:6d:82:b8:8f:06:
2f:de:6f:cd:0a:1a:57:ae:3d:42:37:0d:44:eb:d7:
44:12:47:b9:ef:ce:4e:13:00:ff:83:b1:36:9e:47:
21:20:cc:fd:ee:a9:fd:5a:a3:67:99:0a:01:73:7b:
22:60:18:e0:35:f0:73:72:35:4e:bb:b9:33:b5:f8:
c6:8e:5a:3c:d8:5b:42:93:3a:ef:f8:d5:58:3c:0c:
e7:2d:9c:cf:6a:51:a0:8a:a8:e6:d0:bb:57:9d:35:
68:ab:d3:17:6a:de:94:11:b4:21:af:4e:22:97:1f:
d5:37:22:8d:61:09:26:75:eb:de:70:55:b6:04:1b:
54:8b:3b:8d:ba:0a:01:92:48:b7:d9:f4:21:fb:f6:
0b:4a:77:46:dc:a3:c8:32:de:58:87:4a:d2:f1:75:
d4:3d:21:e6:a0:b8:48:a0:b0:f5:2c:d3:39:d4:02:
6e:8a:c3:70:8a:e9:b3:cc:a8:25:01:d4:f9:eb:56:
45:c4:61:98:cc:09:98:c1:3b:bf:93:c2:ae:18:94:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:79:8F:3C:51:5B:2C:6D:09:F7:F2:D9:89:2F:BB:77:1C:E4:9A:B2
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/sHmPPFFbLG0J9_LZiS-7dxzkmrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.93.0-116.206.95.255
Signature Algorithm: sha256WithRSAEncryption
6b:a1:c8:d0:1c:14:e9:d3:48:d9:78:f6:2f:b4:27:5f:9a:05:
d6:95:14:37:8a:45:28:57:83:25:78:95:9a:82:47:d3:b3:a8:
47:fc:18:71:f5:27:07:41:82:35:42:0a:a2:b1:e5:1e:58:a7:
bc:48:f5:30:1d:a0:4b:f0:6d:9f:2c:f1:eb:7d:23:1c:01:29:
81:a0:f3:a2:e2:32:26:c7:94:20:b1:2e:95:0d:e9:ce:c1:59:
79:46:9f:58:57:6e:82:91:3e:34:79:98:e7:0f:fb:a1:a6:91:
9b:09:57:f7:20:ac:22:78:ff:db:bb:eb:29:7a:5d:d1:4d:8c:
e0:0d:7f:1d:91:1a:9b:88:05:5d:56:50:d7:7b:8f:70:e3:27:
78:2e:6a:62:b7:19:fe:8f:ee:df:c4:ba:10:93:05:67:cd:46:
32:59:18:c8:5c:48:01:fc:f5:8c:f3:ad:21:1d:a2:12:c6:69:
66:5a:c8:13:a9:2f:3c:4e:ba:69:16:8f:45:f7:70:08:38:b5:
b9:bb:a0:03:4c:6d:d5:d1:88:ee:ee:4c:3c:28:5d:7d:41:46:
0b:33:53:ed:c2:65:10:2b:45:be:5f:0e:14:a6:c4:c8:22:ed:
73:7a:c8:02:09:bc:cf:ec:30:25:cf:76:44:26:a9:21:88:14:
71:7a:15:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:34 2024 by rpki-client on console-ams.rpki-client.org