Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/eOgSL9n3WKnH-9o7qv4KXyn2sbQ.roa
File: eOgSL9n3WKnH-9o7qv4KXyn2sbQ.roa (raw, json)
Hash identifier: amII5SIjM2B+ykgWaGckkik7NGk5MlOhUUAlHoxkbo0=
Subject key identifier: 78:E8:12:2F:D9:F7:58:A9:C7:FB:DA:3B:AA:FE:0A:5F:29:F6:B1:B4
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 01856D4ACE5F0A5C324C24BC748A03B7DFEB
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/eOgSL9n3WKnH-9o7qv4KXyn2sbQ.roa
Signing time: Sun 01 Jan 2023 12:24:57 +0000
ROA not before: Sun 01 Jan 2023 12:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47890
IP address blocks: 2a0e:1d80:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:ce:5f:0a:5c:32:4c:24:bc:74:8a:03:b7:df:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jan 1 12:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78e8122fd9f758a9c7fbda3baafe0a5f29f6b1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:ee:0e:c5:c5:c8:27:83:83:51:11:d6:02:
87:e0:84:70:91:b9:1d:32:6e:d3:90:dd:58:e4:4c:
da:be:13:6b:54:ef:e4:b0:87:0a:47:0b:ac:3f:74:
2f:96:11:7d:18:01:a3:98:d7:6d:c2:75:c7:b1:8c:
ee:f2:a8:c0:6a:02:fc:aa:5f:b4:9a:dd:a0:ed:25:
4a:1b:00:26:c2:74:27:34:cf:59:43:ac:f7:57:de:
88:ac:0d:e0:11:50:c7:59:70:bf:1c:92:16:17:dc:
d3:d4:2a:7d:4f:c5:63:47:46:d6:a5:ce:36:52:13:
11:39:b8:b6:c1:b7:c9:97:d1:75:b4:c1:a8:dc:9a:
48:d2:d2:d7:9d:7e:5c:ea:2b:fb:19:be:54:ca:53:
6b:fa:f7:9e:c1:2e:71:b4:45:14:3c:a7:ab:42:7d:
d6:1a:0c:07:99:04:a2:8e:b8:35:3a:4f:4f:51:fb:
c7:27:0c:27:58:1d:ec:09:55:f2:15:ad:56:bb:41:
91:72:3f:68:54:7e:2e:5a:02:ed:2f:05:9a:b4:12:
44:f2:54:dd:96:b3:2e:cd:f2:51:ca:3d:80:e5:77:
a3:69:d2:ee:23:00:de:2d:8c:94:c6:79:bc:4e:1a:
39:9b:bc:28:bb:c4:7a:0d:fd:3b:f8:0f:61:58:34:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E8:12:2F:D9:F7:58:A9:C7:FB:DA:3B:AA:FE:0A:5F:29:F6:B1:B4
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/eOgSL9n3WKnH-9o7qv4KXyn2sbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1d80:7::/48
Signature Algorithm: sha256WithRSAEncryption
56:61:e2:74:f5:d7:db:1a:31:ef:f6:b0:71:9b:0d:a7:a5:23:
5b:92:60:8a:84:34:c2:37:23:ae:5e:c0:0a:91:21:70:bc:8f:
18:fc:e5:cc:7a:08:8d:3c:03:ef:10:69:13:56:88:5f:7e:61:
97:3d:f5:98:b7:61:f0:7e:7e:88:39:cb:89:c4:e7:f8:63:f3:
1d:3e:a1:a9:20:9a:32:15:f7:14:a6:20:a4:6d:aa:a0:1f:74:
a8:93:9c:e4:a4:22:8b:c7:e5:9e:7a:eb:02:ce:2f:59:a3:18:
c8:3f:30:51:fc:46:f7:e0:ea:c5:e0:b2:4f:b4:56:51:00:9d:
57:8c:74:c0:6b:11:9f:2a:44:36:f7:36:39:12:a9:d0:47:3c:
15:c4:5f:06:86:11:45:56:b4:a1:32:a8:ca:82:86:e6:7d:42:
49:f9:9f:e9:ed:b5:d3:3a:6b:61:b3:6b:ff:3a:a2:d7:e1:42:
52:c7:54:9e:1a:ee:17:57:57:9b:4d:ec:ec:8f:e8:97:78:b0:
19:96:46:5b:74:f9:82:f1:4c:80:aa:06:e2:b2:07:4b:f3:53:
3b:9b:48:92:a4:e8:21:88:c0:49:99:4e:03:2c:84:98:18:d1:
40:f7:ab:72:0a:cf:6c:0b:36:d2:14:22:6d:d3:73:c6:cd:fd:
dd:47:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:57 2024 by rpki-client on console-fra.rpki-client.org