Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/yJMEaEYMaxudR5615g9U_QTofBM.roa
File: yJMEaEYMaxudR5615g9U_QTofBM.roa (raw, json)
Hash identifier: RACyLdCmCqoMWCTFlANb0IOfXoCV+pjIcfQ3GpsI8dk=
Subject key identifier: C8:93:04:68:46:0C:6B:1B:9D:47:9E:B5:E6:0F:54:FD:04:E8:7C:13
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 018BB35C118F0DE70BFC09248B3EFE58B1FD
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/yJMEaEYMaxudR5615g9U_QTofBM.roa
Signing time: Thu 09 Nov 2023 09:13:57 +0000
ROA not before: Thu 09 Nov 2023 09:13:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134196
IP address blocks: 116.206.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:5c:11:8f:0d:e7:0b:fc:09:24:8b:3e:fe:58:b1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Nov 9 09:13:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8930468460c6b1b9d479eb5e60f54fd04e87c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:da:cb:93:7d:e6:75:cc:5e:02:30:6b:e6:
81:c8:28:dc:b2:bb:a3:2a:f0:0d:4c:54:42:67:5d:
0d:8c:ff:e2:fc:64:e2:6a:93:62:a2:18:55:4a:9e:
eb:65:0c:a4:08:2f:79:77:d5:bd:52:44:64:4f:d3:
0b:db:21:b8:51:0c:4a:13:98:0a:6a:96:33:eb:18:
8b:05:7a:15:f1:79:7d:6c:d3:69:6a:e4:65:17:00:
37:a3:fc:91:90:5a:d2:46:05:5d:bb:de:68:57:68:
08:2c:8c:6f:f9:00:f3:af:f7:c2:af:e6:a3:7f:fd:
0f:4f:ce:de:48:f9:c9:28:56:3e:b0:ee:3e:81:eb:
ea:f5:0d:05:98:04:e6:cf:f0:f1:44:ef:a2:85:a8:
5b:8c:4b:4f:d5:18:70:91:57:82:eb:84:95:f4:44:
2d:47:d3:36:48:cb:88:f9:b8:6f:8a:38:f7:9f:f8:
e3:4b:28:31:ca:4d:3e:45:51:b2:16:96:a8:b9:95:
0b:5e:92:bc:d1:9a:1d:2d:8a:79:d1:3f:0d:fe:67:
7d:d6:da:5a:1a:bb:5f:55:04:30:79:5e:66:53:e3:
3d:ac:c5:24:f1:24:6e:5e:b9:4a:17:b6:4f:e3:16:
6a:cc:3c:a1:dd:8d:65:c7:f1:8d:08:a8:1d:ba:4f:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:93:04:68:46:0C:6B:1B:9D:47:9E:B5:E6:0F:54:FD:04:E8:7C:13
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/yJMEaEYMaxudR5615g9U_QTofBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:6b:8a:74:84:51:38:b0:ff:fd:48:8a:72:4c:a5:23:e5:19:
d7:d4:9f:14:8d:61:a0:97:2a:ba:46:28:9e:16:28:5c:f1:ea:
b4:12:58:68:40:f9:ca:c5:1c:93:f8:d8:37:d2:0c:ed:b2:d0:
c5:38:d2:e6:6c:1a:77:6d:fc:a4:b4:0a:88:cd:a9:67:02:6d:
d7:9b:9a:c1:f3:a9:a8:0c:18:cf:27:c0:49:64:62:7e:4c:16:
df:ca:a8:13:33:87:34:04:de:cd:4b:7c:5a:a2:ae:c5:42:43:
5f:d7:b0:a9:94:29:26:89:77:c2:7d:80:8a:7e:65:54:7c:3d:
e4:0b:29:50:a1:a3:ab:05:f5:b0:b9:3a:84:e1:2c:40:a2:6c:
92:1c:e6:b9:75:34:b3:69:a8:d8:a0:77:5d:14:a6:a5:ed:1e:
8c:61:22:b1:a1:77:10:16:45:ab:4b:93:6e:ec:81:67:14:95:
ff:74:c6:0f:e9:7d:0b:ef:22:7e:7a:e9:21:95:7a:99:10:23:
e6:a6:9b:73:4c:f3:b6:58:3f:26:23:15:1f:0d:95:d4:ff:56:
79:43:91:3e:85:7e:7c:48:ae:53:b3:e3:5d:44:4d:1a:1c:d6:
39:8d:61:69:c5:14:d9:e6:a3:ff:08:f1:99:8d:35:44:d8:cb:
91:77:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:34 2024 by rpki-client on console-ams.rpki-client.org